CVE-2009-0035 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-0035 Interim 1 29 2025-11-05T06:10:11Z current 2021-05-30T12:45:28Z 2025-11-05T06:10:11Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-0035 alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 openSUSE Leap 15.0 openSUSE Tumbleweed alsa-1.0.27.2-11.10 alsa-1.0.27.2-11.4 alsa-1.0.27.2-15.1 alsa-1.1.2-2.1 alsa-1.1.5-4.22 alsa-1.1.5-6.6.1 alsa-1.1.5-lp150.4.3 alsa-1.2.14-160000.2.2 alsa-devel-1.0.27.2-11.10 alsa-devel-1.0.27.2-11.4 alsa-devel-1.0.27.2-15.1 alsa-devel-1.1.2-2.1 alsa-devel-1.1.5-4.22 alsa-devel-1.1.5-6.6.1 alsa-devel-1.2.14-160000.2.2 alsa-devel-32bit-1.1.2-2.1 alsa-docs-1.0.27.2-11.10 alsa-docs-1.0.27.2-11.4 alsa-docs-1.0.27.2-15.1 alsa-docs-1.1.2-2.1 alsa-docs-1.2.14-160000.2.2 alsa-topology-devel-1.2.14-160000.2.2 libasound2-1.0.27.2-11.10 libasound2-1.0.27.2-11.4 libasound2-1.0.27.2-15.1 libasound2-1.1.2-2.1 libasound2-1.1.5-4.22 libasound2-1.1.5-6.6.1 libasound2-1.1.5-lp150.4.3 libasound2-1.2.10-2.6 libasound2-1.2.10-slfo.1.1_1.2 libasound2-1.2.14-160000.2.2 libasound2-32bit-1.0.27.2-11.10 libasound2-32bit-1.0.27.2-15.1 libasound2-32bit-1.1.2-2.1 libasound2-32bit-1.1.5-4.22 libasound2-32bit-1.1.5-6.6.1 libasound2-32bit-1.1.5-lp150.4.3 libatopology2-1.2.14-160000.2.2 alsa-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Desktop 12 libasound2-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Desktop 12 libasound2-32bit-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Desktop 12 alsa-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Desktop 12 SP1 libasound2-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Desktop 12 SP1 libasound2-32bit-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Desktop 12 SP1 alsa-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Desktop 12 SP2 libasound2-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Desktop 12 SP2 libasound2-32bit-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Desktop 12 SP2 alsa-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libasound2-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libasound2-32bit-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 alsa-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libasound2-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libasound2-32bit-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 alsa-1.0.27.2-15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 alsa-docs-1.0.27.2-15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libasound2-1.0.27.2-15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libasound2-32bit-1.0.27.2-15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 alsa-1.1.5-4.22 as a component of SUSE Linux Enterprise Module for Basesystem 15 alsa-devel-1.1.5-4.22 as a component of SUSE Linux Enterprise Module for Basesystem 15 libasound2-1.1.5-4.22 as a component of SUSE Linux Enterprise Module for Basesystem 15 libasound2-32bit-1.1.5-4.22 as a component of SUSE Linux Enterprise Module for Basesystem 15 alsa-1.1.5-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 alsa-devel-1.1.5-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libasound2-1.1.5-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libasound2-32bit-1.1.5-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 alsa-1.1.5-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 alsa-devel-1.1.5-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libasound2-1.1.5-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libasound2-32bit-1.1.5-6.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 alsa-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Server 12 alsa-docs-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Server 12 libasound2-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Server 12 libasound2-32bit-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Server 12 alsa-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Server 12 SP1 alsa-docs-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Server 12 SP1 libasound2-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Server 12 SP1 libasound2-32bit-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Server 12 SP1 alsa-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Server 12 SP2 alsa-docs-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Server 12 SP2 libasound2-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Server 12 SP2 libasound2-32bit-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Server 12 SP2 alsa-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP3 alsa-docs-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP3 libasound2-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP3 libasound2-32bit-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP3 alsa-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP4 alsa-docs-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP4 libasound2-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP4 libasound2-32bit-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP4 alsa-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP5 alsa-docs-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP5 libasound2-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP5 libasound2-32bit-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server 12 SP5 alsa-1.2.14-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 alsa-devel-1.2.14-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 alsa-docs-1.2.14-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 alsa-topology-devel-1.2.14-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libasound2-1.2.14-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libatopology2-1.2.14-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 alsa-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 alsa-docs-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libasound2-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 alsa-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 alsa-docs-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libasound2-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libasound2-32bit-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 alsa-devel-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Software Development Kit 12 alsa-devel-1.0.27.2-11.10 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 alsa-devel-1.0.27.2-11.4 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 alsa-devel-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 alsa-devel-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 alsa-devel-1.0.27.2-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libasound2-1.2.10-2.6 as a component of SUSE Linux Micro 6.0 libasound2-1.2.10-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 alsa-1.1.5-lp150.4.3 as a component of openSUSE Leap 15.0 libasound2-1.1.5-lp150.4.3 as a component of openSUSE Leap 15.0 libasound2-32bit-1.1.5-lp150.4.3 as a component of openSUSE Leap 15.0 alsa-1.1.2-2.1 as a component of openSUSE Tumbleweed alsa-devel-1.1.2-2.1 as a component of openSUSE Tumbleweed alsa-devel-32bit-1.1.2-2.1 as a component of openSUSE Tumbleweed alsa-docs-1.1.2-2.1 as a component of openSUSE Tumbleweed libasound2-1.1.2-2.1 as a component of openSUSE Tumbleweed libasound2-32bit-1.1.2-2.1 as a component of openSUSE Tumbleweed alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts. CVE-2009-0035 SUSE Linux Enterprise Desktop 12:alsa-1.0.27.2-11.10 SUSE Linux Enterprise Desktop 12:libasound2-1.0.27.2-11.10 SUSE Linux Enterprise Desktop 12:libasound2-32bit-1.0.27.2-11.10 SUSE Linux Enterprise Desktop 12 SP1:alsa-1.0.27.2-11.10 SUSE Linux Enterprise Desktop 12 SP1:libasound2-1.0.27.2-11.10 SUSE Linux Enterprise Desktop 12 SP1:libasound2-32bit-1.0.27.2-11.10 SUSE Linux Enterprise Desktop 12 SP2:alsa-1.0.27.2-11.10 SUSE Linux Enterprise Desktop 12 SP2:libasound2-1.0.27.2-11.10 SUSE Linux Enterprise Desktop 12 SP2:libasound2-32bit-1.0.27.2-11.10 SUSE Linux Enterprise Desktop 12 SP3:alsa-1.0.27.2-15.1 SUSE Linux Enterprise Desktop 12 SP3:libasound2-1.0.27.2-15.1 SUSE Linux Enterprise Desktop 12 SP3:libasound2-32bit-1.0.27.2-15.1 SUSE Linux Enterprise Desktop 12 SP4:alsa-1.0.27.2-15.1 SUSE Linux Enterprise Desktop 12 SP4:libasound2-1.0.27.2-15.1 SUSE Linux Enterprise Desktop 12 SP4:libasound2-32bit-1.0.27.2-15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:alsa-1.0.27.2-15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:alsa-docs-1.0.27.2-15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libasound2-1.0.27.2-15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libasound2-32bit-1.0.27.2-15.1 SUSE Linux Enterprise Module for Basesystem 15:alsa-1.1.5-4.22 SUSE Linux Enterprise Module for Basesystem 15:alsa-devel-1.1.5-4.22 SUSE Linux Enterprise Module for Basesystem 15:libasound2-1.1.5-4.22 SUSE Linux Enterprise Module for Basesystem 15:libasound2-32bit-1.1.5-4.22 SUSE Linux Enterprise Module for Basesystem 15 SP1:alsa-1.1.5-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:alsa-devel-1.1.5-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libasound2-1.1.5-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libasound2-32bit-1.1.5-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:alsa-1.1.5-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:alsa-devel-1.1.5-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libasound2-1.1.5-6.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libasound2-32bit-1.1.5-6.6.1 SUSE Linux Enterprise Server 12:alsa-1.0.27.2-11.4 SUSE Linux Enterprise Server 12:alsa-docs-1.0.27.2-11.4 SUSE Linux Enterprise Server 12:libasound2-1.0.27.2-11.4 SUSE Linux Enterprise Server 12:libasound2-32bit-1.0.27.2-11.10 SUSE Linux Enterprise Server 12 SP1:alsa-1.0.27.2-11.10 SUSE Linux Enterprise Server 12 SP1:alsa-docs-1.0.27.2-11.10 SUSE Linux Enterprise Server 12 SP1:libasound2-1.0.27.2-11.10 SUSE Linux Enterprise Server 12 SP1:libasound2-32bit-1.0.27.2-11.10 SUSE Linux Enterprise Server 12 SP2:alsa-1.0.27.2-11.4 SUSE Linux Enterprise Server 12 SP2:alsa-docs-1.0.27.2-11.4 SUSE Linux Enterprise Server 12 SP2:libasound2-1.0.27.2-11.4 SUSE Linux Enterprise Server 12 SP2:libasound2-32bit-1.0.27.2-11.10 SUSE Linux Enterprise Server 12 SP3:alsa-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP3:alsa-docs-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP3:libasound2-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP3:libasound2-32bit-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP4:alsa-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP4:alsa-docs-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP4:libasound2-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP4:libasound2-32bit-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP5:alsa-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP5:alsa-docs-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP5:libasound2-1.0.27.2-15.1 SUSE Linux Enterprise Server 12 SP5:libasound2-32bit-1.0.27.2-15.1 SUSE Linux Enterprise Server 16.0:alsa-1.2.14-160000.2.2 SUSE Linux Enterprise Server 16.0:alsa-devel-1.2.14-160000.2.2 SUSE Linux Enterprise Server 16.0:alsa-docs-1.2.14-160000.2.2 SUSE Linux Enterprise Server 16.0:alsa-topology-devel-1.2.14-160000.2.2 SUSE Linux Enterprise Server 16.0:libasound2-1.2.14-160000.2.2 SUSE Linux Enterprise Server 16.0:libatopology2-1.2.14-160000.2.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:alsa-1.0.27.2-11.4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:alsa-docs-1.0.27.2-11.4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libasound2-1.0.27.2-11.4 SUSE Linux Enterprise Server for SAP Applications 12 SP5:alsa-1.0.27.2-15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:alsa-docs-1.0.27.2-15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libasound2-1.0.27.2-15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libasound2-32bit-1.0.27.2-15.1 SUSE Linux Enterprise Software Development Kit 12:alsa-devel-1.0.27.2-11.10 SUSE Linux Enterprise Software Development Kit 12 SP1:alsa-devel-1.0.27.2-11.10 SUSE Linux Enterprise Software Development Kit 12 SP2:alsa-devel-1.0.27.2-11.4 SUSE Linux Enterprise Software Development Kit 12 SP3:alsa-devel-1.0.27.2-15.1 SUSE Linux Enterprise Software Development Kit 12 SP4:alsa-devel-1.0.27.2-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:alsa-devel-1.0.27.2-15.1 SUSE Linux Micro 6.0:libasound2-1.2.10-2.6 SUSE Linux Micro 6.1:libasound2-1.2.10-slfo.1.1_1.2 openSUSE Leap 15.0:alsa-1.1.5-lp150.4.3 openSUSE Leap 15.0:libasound2-1.1.5-lp150.4.3 openSUSE Leap 15.0:libasound2-32bit-1.1.5-lp150.4.3 openSUSE Tumbleweed:alsa-1.1.2-2.1 openSUSE Tumbleweed:alsa-devel-1.1.2-2.1 openSUSE Tumbleweed:alsa-devel-32bit-1.1.2-2.1 openSUSE Tumbleweed:alsa-docs-1.1.2-2.1 openSUSE Tumbleweed:libasound2-1.1.2-2.1 openSUSE Tumbleweed:libasound2-32bit-1.1.2-2.1 moderate 3.6 AV:L/AC:L/Au:N/C:N/I:P/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N