RHSA-2018:3083
Vulnerability from csaf_opensuse - Published: 2018-10-30 00:00 - Updated: 2026-09-20 11:01Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2018:3083.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2018:3083.
Patchnames: RHSA-2018:3083
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
6.2 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
low
7.1 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
7.7 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
low
4.6 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
6.6 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
low
4.4 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
low
6.2 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
low
4.4 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
low
7.5 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
low
7.8 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2015-8830
Threats
Impact
moderate
References
145 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2018:3083.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2018:3083.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2018:3083",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2018_3083.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8830 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4913 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-0861 page",
"url": "https://www.suse.com/security/cve/CVE-2017-0861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10661 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-17805 page",
"url": "https://www.suse.com/security/cve/CVE-2017-17805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-18208 page",
"url": "https://www.suse.com/security/cve/CVE-2017-18208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-18232 page",
"url": "https://www.suse.com/security/cve/CVE-2017-18232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-18344 page",
"url": "https://www.suse.com/security/cve/CVE-2017-18344/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000026 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-10322 page",
"url": "https://www.suse.com/security/cve/CVE-2018-10322/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-10878 page",
"url": "https://www.suse.com/security/cve/CVE-2018-10878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-10879 page",
"url": "https://www.suse.com/security/cve/CVE-2018-10879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-10881 page",
"url": "https://www.suse.com/security/cve/CVE-2018-10881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-10883 page",
"url": "https://www.suse.com/security/cve/CVE-2018-10883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-10902 page",
"url": "https://www.suse.com/security/cve/CVE-2018-10902/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1092 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1092/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1094 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1094/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-10940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-10940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1118 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1120 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1130 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13405 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5344 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5344/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5391 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5803 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5848 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5848/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7740 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7757 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8781 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8781/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:01:43Z",
"generator": {
"date": "2018-10-30T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2018:3083",
"initial_release_date": "2018-10-30T00:00:00Z",
"revision_history": [
{
"date": "2018-10-30T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:01:43Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-957.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-957.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-957.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-957.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-957.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-957.el7.x86_64",
"product": {
"name": "bpftool-0:3.10.0-957.el7.x86_64",
"product_id": "bpftool-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-957.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-957.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-957.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-957.el7.x86_64",
"product_id": "kernel-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-957.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-957.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-957.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-957.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-957.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-957.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-957.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-957.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-957.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-957.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-957.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:3.10.0-957.el7.x86_64",
"product": {
"name": "kernel-headers-0:3.10.0-957.el7.x86_64",
"product_id": "kernel-headers-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-957.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-957.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-957.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-957.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-957.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-957.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-957.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-957.el7.x86_64",
"product_id": "perf-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-957.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-957.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-957.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-957.el7.x86_64",
"product_id": "python-perf-0:3.10.0-957.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-957.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-957.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-957.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-957.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64"
},
"product_reference": "kernel-headers-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-957.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-957.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-8830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8830"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE-2012-6701 regression.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8830",
"url": "https://www.suse.com/security/cve/CVE-2015-8830"
},
{
"category": "external",
"summary": "SUSE Bug 969354 for CVE-2015-8830",
"url": "https://bugzilla.suse.com/969354"
},
{
"category": "external",
"summary": "SUSE Bug 969355 for CVE-2015-8830",
"url": "https://bugzilla.suse.com/969355"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8830"
},
{
"cve": "CVE-2016-4913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4913"
}
],
"notes": [
{
"category": "general",
"text": "The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \\0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4913",
"url": "https://www.suse.com/security/cve/CVE-2016-4913"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2016-4913",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 870618 for CVE-2016-4913",
"url": "https://bugzilla.suse.com/870618"
},
{
"category": "external",
"summary": "SUSE Bug 980725 for CVE-2016-4913",
"url": "https://bugzilla.suse.com/980725"
},
{
"category": "external",
"summary": "SUSE Bug 985132 for CVE-2016-4913",
"url": "https://bugzilla.suse.com/985132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4913"
},
{
"cve": "CVE-2017-0861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-0861"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-0861",
"url": "https://www.suse.com/security/cve/CVE-2017-0861"
},
{
"category": "external",
"summary": "SUSE Bug 1088260 for CVE-2017-0861",
"url": "https://bugzilla.suse.com/1088260"
},
{
"category": "external",
"summary": "SUSE Bug 1088268 for CVE-2017-0861",
"url": "https://bugzilla.suse.com/1088268"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2017-0861",
"url": "https://bugzilla.suse.com/1091815"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2017-0861",
"url": "https://bugzilla.suse.com/1115893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-0861"
},
{
"cve": "CVE-2017-10661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10661"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10661",
"url": "https://www.suse.com/security/cve/CVE-2017-10661"
},
{
"category": "external",
"summary": "SUSE Bug 1053152 for CVE-2017-10661",
"url": "https://bugzilla.suse.com/1053152"
},
{
"category": "external",
"summary": "SUSE Bug 1053153 for CVE-2017-10661",
"url": "https://bugzilla.suse.com/1053153"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2017-10661",
"url": "https://bugzilla.suse.com/1115893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10661"
},
{
"cve": "CVE-2017-17805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-17805"
}
],
"notes": [
{
"category": "general",
"text": "The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-17805",
"url": "https://www.suse.com/security/cve/CVE-2017-17805"
},
{
"category": "external",
"summary": "SUSE Bug 1073792 for CVE-2017-17805",
"url": "https://bugzilla.suse.com/1073792"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2017-17805",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2017-17805",
"url": "https://bugzilla.suse.com/1115893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-17805"
},
{
"cve": "CVE-2017-18208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-18208"
}
],
"notes": [
{
"category": "general",
"text": "The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-18208",
"url": "https://www.suse.com/security/cve/CVE-2017-18208"
},
{
"category": "external",
"summary": "SUSE Bug 1083494 for CVE-2017-18208",
"url": "https://bugzilla.suse.com/1083494"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2017-18208",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2017-18208",
"url": "https://bugzilla.suse.com/1091815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-18208"
},
{
"cve": "CVE-2017-18232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-18232"
}
],
"notes": [
{
"category": "general",
"text": "The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-18232",
"url": "https://www.suse.com/security/cve/CVE-2017-18232"
},
{
"category": "external",
"summary": "SUSE Bug 1085413 for CVE-2017-18232",
"url": "https://bugzilla.suse.com/1085413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-18232"
},
{
"cve": "CVE-2017-18344",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-18344"
}
],
"notes": [
{
"category": "general",
"text": "The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn\u0027t properly validate the sigevent-\u003esigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-18344",
"url": "https://www.suse.com/security/cve/CVE-2017-18344"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2017-18344",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1102851 for CVE-2017-18344",
"url": "https://bugzilla.suse.com/1102851"
},
{
"category": "external",
"summary": "SUSE Bug 1103203 for CVE-2017-18344",
"url": "https://bugzilla.suse.com/1103203"
},
{
"category": "external",
"summary": "SUSE Bug 1103580 for CVE-2017-18344",
"url": "https://bugzilla.suse.com/1103580"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2017-18344",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-18344"
},
{
"cve": "CVE-2018-1000026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000026"
}
],
"notes": [
{
"category": "general",
"text": "Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000026",
"url": "https://www.suse.com/security/cve/CVE-2018-1000026"
},
{
"category": "external",
"summary": "SUSE Bug 1079384 for CVE-2018-1000026",
"url": "https://bugzilla.suse.com/1079384"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-1000026",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1096723 for CVE-2018-1000026",
"url": "https://bugzilla.suse.com/1096723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-1000026"
},
{
"cve": "CVE-2018-10322",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-10322"
}
],
"notes": [
{
"category": "general",
"text": "The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-10322",
"url": "https://www.suse.com/security/cve/CVE-2018-10322"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-10322",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1090749 for CVE-2018-10322",
"url": "https://bugzilla.suse.com/1090749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-10322"
},
{
"cve": "CVE-2018-10878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-10878"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-10878",
"url": "https://www.suse.com/security/cve/CVE-2018-10878"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-10878",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1099813 for CVE-2018-10878",
"url": "https://bugzilla.suse.com/1099813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-10878"
},
{
"cve": "CVE-2018-10879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-10879"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-10879",
"url": "https://www.suse.com/security/cve/CVE-2018-10879"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-10879",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1099844 for CVE-2018-10879",
"url": "https://bugzilla.suse.com/1099844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-10879"
},
{
"cve": "CVE-2018-10881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-10881"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-10881",
"url": "https://www.suse.com/security/cve/CVE-2018-10881"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-10881",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1099864 for CVE-2018-10881",
"url": "https://bugzilla.suse.com/1099864"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-10881"
},
{
"cve": "CVE-2018-10883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-10883"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-10883",
"url": "https://www.suse.com/security/cve/CVE-2018-10883"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-10883",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1099863 for CVE-2018-10883",
"url": "https://bugzilla.suse.com/1099863"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-10883"
},
{
"cve": "CVE-2018-10902",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-10902"
}
],
"notes": [
{
"category": "general",
"text": "It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-10902",
"url": "https://www.suse.com/security/cve/CVE-2018-10902"
},
{
"category": "external",
"summary": "SUSE Bug 1105322 for CVE-2018-10902",
"url": "https://bugzilla.suse.com/1105322"
},
{
"category": "external",
"summary": "SUSE Bug 1105323 for CVE-2018-10902",
"url": "https://bugzilla.suse.com/1105323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-10902"
},
{
"cve": "CVE-2018-1092",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1092"
}
],
"notes": [
{
"category": "general",
"text": "The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1092",
"url": "https://www.suse.com/security/cve/CVE-2018-1092"
},
{
"category": "external",
"summary": "SUSE Bug 1087012 for CVE-2018-1092",
"url": "https://bugzilla.suse.com/1087012"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-1092",
"url": "https://bugzilla.suse.com/1087082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1092"
},
{
"cve": "CVE-2018-1094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1094"
}
],
"notes": [
{
"category": "general",
"text": "The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allows attackers to cause a denial of service (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted ext4 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1094",
"url": "https://www.suse.com/security/cve/CVE-2018-1094"
},
{
"category": "external",
"summary": "SUSE Bug 1087007 for CVE-2018-1094",
"url": "https://bugzilla.suse.com/1087007"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-1094",
"url": "https://bugzilla.suse.com/1087082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-1094"
},
{
"cve": "CVE-2018-10940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-10940"
}
],
"notes": [
{
"category": "general",
"text": "The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-10940",
"url": "https://www.suse.com/security/cve/CVE-2018-10940"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-10940",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092903 for CVE-2018-10940",
"url": "https://bugzilla.suse.com/1092903"
},
{
"category": "external",
"summary": "SUSE Bug 1107689 for CVE-2018-10940",
"url": "https://bugzilla.suse.com/1107689"
},
{
"category": "external",
"summary": "SUSE Bug 1113751 for CVE-2018-10940",
"url": "https://bugzilla.suse.com/1113751"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-10940"
},
{
"cve": "CVE-2018-1118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1118"
}
],
"notes": [
{
"category": "general",
"text": "Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1118",
"url": "https://www.suse.com/security/cve/CVE-2018-1118"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-1118",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092472 for CVE-2018-1118",
"url": "https://bugzilla.suse.com/1092472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-1118"
},
{
"cve": "CVE-2018-1120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1120"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process\u0027s memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/\u003cpid\u003e/cmdline (or /proc/\u003cpid\u003e/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1120",
"url": "https://www.suse.com/security/cve/CVE-2018-1120"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-1120",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092100 for CVE-2018-1120",
"url": "https://bugzilla.suse.com/1092100"
},
{
"category": "external",
"summary": "SUSE Bug 1093158 for CVE-2018-1120",
"url": "https://bugzilla.suse.com/1093158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1120"
},
{
"cve": "CVE-2018-1130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1130"
}
],
"notes": [
{
"category": "general",
"text": "Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1130",
"url": "https://www.suse.com/security/cve/CVE-2018-1130"
},
{
"category": "external",
"summary": "SUSE Bug 1092904 for CVE-2018-1130",
"url": "https://bugzilla.suse.com/1092904"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-1130"
},
{
"cve": "CVE-2018-13405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13405"
}
],
"notes": [
{
"category": "general",
"text": "The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13405",
"url": "https://www.suse.com/security/cve/CVE-2018-13405"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-13405",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1100416 for CVE-2018-13405",
"url": "https://bugzilla.suse.com/1100416"
},
{
"category": "external",
"summary": "SUSE Bug 1129735 for CVE-2018-13405",
"url": "https://bugzilla.suse.com/1129735"
},
{
"category": "external",
"summary": "SUSE Bug 1195161 for CVE-2018-13405",
"url": "https://bugzilla.suse.com/1195161"
},
{
"category": "external",
"summary": "SUSE Bug 1198702 for CVE-2018-13405",
"url": "https://bugzilla.suse.com/1198702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-13405"
},
{
"cve": "CVE-2018-5344",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5344"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5344",
"url": "https://www.suse.com/security/cve/CVE-2018-5344"
},
{
"category": "external",
"summary": "SUSE Bug 1075825 for CVE-2018-5344",
"url": "https://bugzilla.suse.com/1075825"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-5344",
"url": "https://bugzilla.suse.com/1087082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-5344"
},
{
"cve": "CVE-2018-5391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5391"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5391",
"url": "https://www.suse.com/security/cve/CVE-2018-5391"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-5391",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1102340 for CVE-2018-5391",
"url": "https://bugzilla.suse.com/1102340"
},
{
"category": "external",
"summary": "SUSE Bug 1103097 for CVE-2018-5391",
"url": "https://bugzilla.suse.com/1103097"
},
{
"category": "external",
"summary": "SUSE Bug 1103098 for CVE-2018-5391",
"url": "https://bugzilla.suse.com/1103098"
},
{
"category": "external",
"summary": "SUSE Bug 1108654 for CVE-2018-5391",
"url": "https://bugzilla.suse.com/1108654"
},
{
"category": "external",
"summary": "SUSE Bug 1114071 for CVE-2018-5391",
"url": "https://bugzilla.suse.com/1114071"
},
{
"category": "external",
"summary": "SUSE Bug 1121102 for CVE-2018-5391",
"url": "https://bugzilla.suse.com/1121102"
},
{
"category": "external",
"summary": "SUSE Bug 1134140 for CVE-2018-5391",
"url": "https://bugzilla.suse.com/1134140"
},
{
"category": "external",
"summary": "SUSE Bug 1181460 for CVE-2018-5391",
"url": "https://bugzilla.suse.com/1181460"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-5391"
},
{
"cve": "CVE-2018-5803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5803"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the \"_sctp_make_chunk()\" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5803",
"url": "https://www.suse.com/security/cve/CVE-2018-5803"
},
{
"category": "external",
"summary": "SUSE Bug 1083900 for CVE-2018-5803",
"url": "https://bugzilla.suse.com/1083900"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-5803",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2018-5803",
"url": "https://bugzilla.suse.com/1115893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-5803"
},
{
"cve": "CVE-2018-5848",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5848"
}
],
"notes": [
{
"category": "general",
"text": "In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the \u0027ie_len\u0027 argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5848",
"url": "https://www.suse.com/security/cve/CVE-2018-5848"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-5848",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1097356 for CVE-2018-5848",
"url": "https://bugzilla.suse.com/1097356"
},
{
"category": "external",
"summary": "SUSE Bug 1105412 for CVE-2018-5848",
"url": "https://bugzilla.suse.com/1105412"
},
{
"category": "external",
"summary": "SUSE Bug 1115339 for CVE-2018-5848",
"url": "https://bugzilla.suse.com/1115339"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-5848"
},
{
"cve": "CVE-2018-7740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7740"
}
],
"notes": [
{
"category": "general",
"text": "The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7740",
"url": "https://www.suse.com/security/cve/CVE-2018-7740"
},
{
"category": "external",
"summary": "SUSE Bug 1084353 for CVE-2018-7740",
"url": "https://bugzilla.suse.com/1084353"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-7740"
},
{
"cve": "CVE-2018-7757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7757"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7757",
"url": "https://www.suse.com/security/cve/CVE-2018-7757"
},
{
"category": "external",
"summary": "SUSE Bug 1084536 for CVE-2018-7757",
"url": "https://bugzilla.suse.com/1084536"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-7757",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1087209 for CVE-2018-7757",
"url": "https://bugzilla.suse.com/1087209"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2018-7757",
"url": "https://bugzilla.suse.com/1091815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-7757"
},
{
"cve": "CVE-2018-8781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8781"
}
],
"notes": [
{
"category": "general",
"text": "The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8781",
"url": "https://www.suse.com/security/cve/CVE-2018-8781"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-8781",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1090643 for CVE-2018-8781",
"url": "https://bugzilla.suse.com/1090643"
},
{
"category": "external",
"summary": "SUSE Bug 1090646 for CVE-2018-8781",
"url": "https://bugzilla.suse.com/1090646"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-957.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-957.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-8781"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…