RHSA-2020:1016
Vulnerability from csaf_opensuse - Published: 2020-03-31 00:00 - Updated: 2026-09-20 11:07Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2020:1016.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2020:1016.
Patchnames: RHSA-2020:1016
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
Moderate
4 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
low
6.2 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
low
6.1 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
low
7.3 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
low
4.7 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2015-9289
Threats
Impact
moderate
References
74 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2020:1016.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2020:1016.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2020:1016",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2020_1016.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-9289 page",
"url": "https://www.suse.com/security/cve/CVE-2015-9289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-17807 page",
"url": "https://www.suse.com/security/cve/CVE-2017-17807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19985 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7191 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-10207 page",
"url": "https://www.suse.com/security/cve/CVE-2019-10207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-10638 page",
"url": "https://www.suse.com/security/cve/CVE-2019-10638/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-10639 page",
"url": "https://www.suse.com/security/cve/CVE-2019-10639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11190 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11884 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-12382 page",
"url": "https://www.suse.com/security/cve/CVE-2019-12382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13233 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13648 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14283 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15916 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16746 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-18660 page",
"url": "https://www.suse.com/security/cve/CVE-2019-18660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3901 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9503 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9503/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:07:23Z",
"generator": {
"date": "2020-03-31T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2020:1016",
"initial_release_date": "2020-03-31T00:00:00Z",
"revision_history": [
{
"date": "2020-03-31T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:07:23Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1127.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-1127.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-1127.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-1127.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1127.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "bpftool-0:3.10.0-1127.el7.x86_64",
"product_id": "bpftool-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1127.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-1127.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-1127.el7.x86_64",
"product_id": "kernel-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1127.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-1127.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1127.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1127.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1127.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1127.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-1127.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1127.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-1127.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "kernel-headers-0:3.10.0-1127.el7.x86_64",
"product_id": "kernel-headers-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1127.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-1127.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1127.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1127.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1127.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-1127.el7.x86_64",
"product_id": "perf-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1127.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-1127.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1127.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-1127.el7.x86_64",
"product_id": "python-perf-0:3.10.0-1127.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1127.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-1127.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-1127.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-1127.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "kernel-headers-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1127.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-1127.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-9289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-9289"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-9289",
"url": "https://www.suse.com/security/cve/CVE-2015-9289"
},
{
"category": "external",
"summary": "SUSE Bug 1143179 for CVE-2015-9289",
"url": "https://bugzilla.suse.com/1143179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-9289"
},
{
"cve": "CVE-2017-17807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-17807"
}
],
"notes": [
{
"category": "general",
"text": "The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task\u0027s \"default request-key keyring\" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-17807",
"url": "https://www.suse.com/security/cve/CVE-2017-17807"
},
{
"category": "external",
"summary": "SUSE Bug 1073860 for CVE-2017-17807",
"url": "https://bugzilla.suse.com/1073860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-17807"
},
{
"cve": "CVE-2018-19985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19985"
}
],
"notes": [
{
"category": "general",
"text": "The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19985",
"url": "https://www.suse.com/security/cve/CVE-2018-19985"
},
{
"category": "external",
"summary": "SUSE Bug 1120743 for CVE-2018-19985",
"url": "https://bugzilla.suse.com/1120743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-19985"
},
{
"cve": "CVE-2018-20169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20169"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20169",
"url": "https://www.suse.com/security/cve/CVE-2018-20169"
},
{
"category": "external",
"summary": "SUSE Bug 1119714 for CVE-2018-20169",
"url": "https://bugzilla.suse.com/1119714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-20169"
},
{
"cve": "CVE-2018-7191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7191"
}
],
"notes": [
{
"category": "general",
"text": "In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7191",
"url": "https://www.suse.com/security/cve/CVE-2018-7191"
},
{
"category": "external",
"summary": "SUSE Bug 1135603 for CVE-2018-7191",
"url": "https://bugzilla.suse.com/1135603"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-7191"
},
{
"cve": "CVE-2019-10207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-10207"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-10207",
"url": "https://www.suse.com/security/cve/CVE-2019-10207"
},
{
"category": "external",
"summary": "SUSE Bug 1123959 for CVE-2019-10207",
"url": "https://bugzilla.suse.com/1123959"
},
{
"category": "external",
"summary": "SUSE Bug 1142857 for CVE-2019-10207",
"url": "https://bugzilla.suse.com/1142857"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-10207"
},
{
"cve": "CVE-2019-10638",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-10638"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-10638",
"url": "https://www.suse.com/security/cve/CVE-2019-10638"
},
{
"category": "external",
"summary": "SUSE Bug 1140575 for CVE-2019-10638",
"url": "https://bugzilla.suse.com/1140575"
},
{
"category": "external",
"summary": "SUSE Bug 1140577 for CVE-2019-10638",
"url": "https://bugzilla.suse.com/1140577"
},
{
"category": "external",
"summary": "SUSE Bug 1142129 for CVE-2019-10638",
"url": "https://bugzilla.suse.com/1142129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-10638"
},
{
"cve": "CVE-2019-10639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-10639"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker\u0027s web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-10639",
"url": "https://www.suse.com/security/cve/CVE-2019-10639"
},
{
"category": "external",
"summary": "SUSE Bug 1140577 for CVE-2019-10639",
"url": "https://bugzilla.suse.com/1140577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-10639"
},
{
"cve": "CVE-2019-11190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11190"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su) because install_exec_creds() is called too late in load_elf_binary() in fs/binfmt_elf.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11190",
"url": "https://www.suse.com/security/cve/CVE-2019-11190"
},
{
"category": "external",
"summary": "SUSE Bug 1131543 for CVE-2019-11190",
"url": "https://bugzilla.suse.com/1131543"
},
{
"category": "external",
"summary": "SUSE Bug 1132374 for CVE-2019-11190",
"url": "https://bugzilla.suse.com/1132374"
},
{
"category": "external",
"summary": "SUSE Bug 1132472 for CVE-2019-11190",
"url": "https://bugzilla.suse.com/1132472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "Moderate"
}
],
"title": "CVE-2019-11190"
},
{
"cve": "CVE-2019-11884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11884"
}
],
"notes": [
{
"category": "general",
"text": "The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a \u0027\\0\u0027 character.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11884",
"url": "https://www.suse.com/security/cve/CVE-2019-11884"
},
{
"category": "external",
"summary": "SUSE Bug 1134848 for CVE-2019-11884",
"url": "https://bugzilla.suse.com/1134848"
},
{
"category": "external",
"summary": "SUSE Bug 1139868 for CVE-2019-11884",
"url": "https://bugzilla.suse.com/1139868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11884"
},
{
"cve": "CVE-2019-12382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-12382"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The vendor disputes this issues as not being a vulnerability because kstrdup() returning NULL is handled sufficiently and there is no chance for a NULL pointer dereference",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-12382",
"url": "https://www.suse.com/security/cve/CVE-2019-12382"
},
{
"category": "external",
"summary": "SUSE Bug 1136586 for CVE-2019-12382",
"url": "https://bugzilla.suse.com/1136586"
},
{
"category": "external",
"summary": "SUSE Bug 1155298 for CVE-2019-12382",
"url": "https://bugzilla.suse.com/1155298"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-12382"
},
{
"cve": "CVE-2019-13233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13233"
}
],
"notes": [
{
"category": "general",
"text": "In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13233",
"url": "https://www.suse.com/security/cve/CVE-2019-13233"
},
{
"category": "external",
"summary": "SUSE Bug 1140454 for CVE-2019-13233",
"url": "https://bugzilla.suse.com/1140454"
},
{
"category": "external",
"summary": "SUSE Bug 1144502 for CVE-2019-13233",
"url": "https://bugzilla.suse.com/1144502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-13233"
},
{
"cve": "CVE-2019-13648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13648"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13648",
"url": "https://www.suse.com/security/cve/CVE-2019-13648"
},
{
"category": "external",
"summary": "SUSE Bug 1142254 for CVE-2019-13648",
"url": "https://bugzilla.suse.com/1142254"
},
{
"category": "external",
"summary": "SUSE Bug 1142265 for CVE-2019-13648",
"url": "https://bugzilla.suse.com/1142265"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-13648"
},
{
"cve": "CVE-2019-14283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14283"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14283",
"url": "https://www.suse.com/security/cve/CVE-2019-14283"
},
{
"category": "external",
"summary": "SUSE Bug 1143191 for CVE-2019-14283",
"url": "https://bugzilla.suse.com/1143191"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-14283"
},
{
"cve": "CVE-2019-15916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15916"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15916",
"url": "https://www.suse.com/security/cve/CVE-2019-15916"
},
{
"category": "external",
"summary": "SUSE Bug 1149448 for CVE-2019-15916",
"url": "https://bugzilla.suse.com/1149448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-15916"
},
{
"cve": "CVE-2019-16746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16746"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16746",
"url": "https://www.suse.com/security/cve/CVE-2019-16746"
},
{
"category": "external",
"summary": "SUSE Bug 1152107 for CVE-2019-16746",
"url": "https://bugzilla.suse.com/1152107"
},
{
"category": "external",
"summary": "SUSE Bug 1173659 for CVE-2019-16746",
"url": "https://bugzilla.suse.com/1173659"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-16746"
},
{
"cve": "CVE-2019-18660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-18660"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-18660",
"url": "https://www.suse.com/security/cve/CVE-2019-18660"
},
{
"category": "external",
"summary": "SUSE Bug 1157038 for CVE-2019-18660",
"url": "https://bugzilla.suse.com/1157038"
},
{
"category": "external",
"summary": "SUSE Bug 1157923 for CVE-2019-18660",
"url": "https://bugzilla.suse.com/1157923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-18660"
},
{
"cve": "CVE-2019-3901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3901"
}
],
"notes": [
{
"category": "general",
"text": "A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for the specified target task to perform an execve() syscall with setuid execution before perf_event_alloc() actually attaches to it, allowing an attacker to bypass the ptrace_may_access() check and the perf_event_exit_task(current) call that is performed in install_exec_creds() during privileged execve() calls. This issue affects kernel versions before 4.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3901",
"url": "https://www.suse.com/security/cve/CVE-2019-3901"
},
{
"category": "external",
"summary": "SUSE Bug 1132374 for CVE-2019-3901",
"url": "https://bugzilla.suse.com/1132374"
},
{
"category": "external",
"summary": "SUSE Bug 1133106 for CVE-2019-3901",
"url": "https://bugzilla.suse.com/1133106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-3901"
},
{
"cve": "CVE-2019-9503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9503"
}
],
"notes": [
{
"category": "general",
"text": "The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the is_wlc_event_frame function will cause this frame to be discarded and unprocessed. If the driver receives the firmware event frame from the host, the appropriate handler is called. This frame validation can be bypassed if the bus used is USB (for instance by a wifi dongle). This can allow firmware event frames from a remote source to be processed. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9503",
"url": "https://www.suse.com/security/cve/CVE-2019-9503"
},
{
"category": "external",
"summary": "SUSE Bug 1132673 for CVE-2019-9503",
"url": "https://bugzilla.suse.com/1132673"
},
{
"category": "external",
"summary": "SUSE Bug 1132828 for CVE-2019-9503",
"url": "https://bugzilla.suse.com/1132828"
},
{
"category": "external",
"summary": "SUSE Bug 1133319 for CVE-2019-9503",
"url": "https://bugzilla.suse.com/1133319"
},
{
"category": "external",
"summary": "SUSE Bug 1156653 for CVE-2019-9503",
"url": "https://bugzilla.suse.com/1156653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1127.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1127.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1127.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-9503"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…