Vulnerability-Lookup

RHSA-2020:4060

Vulnerability from csaf_opensuse - Published: 2020-09-29 00:00 - Updated: 2026-09-20 11:10

Summary

security update for kernel

Severity

Important

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2020:4060. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2020:4060.

Patchnames: RHSA-2020:4060

CVE-2017-18551

4.7 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 13 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2018-20836

6.2 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact low

CVE-2019-12614

6.2 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-15217

4.6 (Medium)


                
                  CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-15807

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-15917

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact important

CVE-2019-16231

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-16233

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-16994

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-17053

4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-17055

4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-18808

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19046

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19055

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact important

CVE-2019-19058

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19059

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19062

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19063

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19332

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19447

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact important

CVE-2019-19523

5.7 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19524

2.4 (Low)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact low

CVE-2019-19530

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19534

2.4 (Low)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact low

CVE-2019-19537

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19767

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-19807

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact important

CVE-2019-20054

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-20095

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact important

CVE-2019-20636

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-9454

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2019-9458

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact important

CVE-2020-10690

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-10732

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact low

CVE-2020-10742

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-10751

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-10942

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-11565

4.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-12770

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-12826

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-14305

4.3 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-1749

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact important

CVE-2020-2732

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-8647

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-8649

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

CVE-2020-9383

4.3 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2017-18551

Threats

Impact moderate

References

167 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2017-18551/	self
https://www.suse.com/security/cve/CVE-2018-20836/	self
https://www.suse.com/security/cve/CVE-2019-12614/	self
https://www.suse.com/security/cve/CVE-2019-15217/	self
https://www.suse.com/security/cve/CVE-2019-15807/	self
https://www.suse.com/security/cve/CVE-2019-15917/	self
https://www.suse.com/security/cve/CVE-2019-16231/	self
https://www.suse.com/security/cve/CVE-2019-16233/	self
https://www.suse.com/security/cve/CVE-2019-16994/	self
https://www.suse.com/security/cve/CVE-2019-17053/	self
https://www.suse.com/security/cve/CVE-2019-17055/	self
https://www.suse.com/security/cve/CVE-2019-18808/	self
https://www.suse.com/security/cve/CVE-2019-19046/	self
https://www.suse.com/security/cve/CVE-2019-19055/	self
https://www.suse.com/security/cve/CVE-2019-19058/	self
https://www.suse.com/security/cve/CVE-2019-19059/	self
https://www.suse.com/security/cve/CVE-2019-19062/	self
https://www.suse.com/security/cve/CVE-2019-19063/	self
https://www.suse.com/security/cve/CVE-2019-19332/	self
https://www.suse.com/security/cve/CVE-2019-19447/	self
https://www.suse.com/security/cve/CVE-2019-19523/	self
https://www.suse.com/security/cve/CVE-2019-19524/	self
https://www.suse.com/security/cve/CVE-2019-19530/	self
https://www.suse.com/security/cve/CVE-2019-19534/	self
https://www.suse.com/security/cve/CVE-2019-19537/	self
https://www.suse.com/security/cve/CVE-2019-19767/	self
https://www.suse.com/security/cve/CVE-2019-19807/	self
https://www.suse.com/security/cve/CVE-2019-20054/	self
https://www.suse.com/security/cve/CVE-2019-20095/	self
https://www.suse.com/security/cve/CVE-2019-20636/	self
https://www.suse.com/security/cve/CVE-2019-9454/	self
https://www.suse.com/security/cve/CVE-2019-9458/	self
https://www.suse.com/security/cve/CVE-2020-10690/	self
https://www.suse.com/security/cve/CVE-2020-10732/	self
https://www.suse.com/security/cve/CVE-2020-10742/	self
https://www.suse.com/security/cve/CVE-2020-10751/	self
https://www.suse.com/security/cve/CVE-2020-10942/	self
https://www.suse.com/security/cve/CVE-2020-11565/	self
https://www.suse.com/security/cve/CVE-2020-12770/	self
https://www.suse.com/security/cve/CVE-2020-12826/	self
https://www.suse.com/security/cve/CVE-2020-14305/	self
https://www.suse.com/security/cve/CVE-2020-1749/	self
https://www.suse.com/security/cve/CVE-2020-2732/	self
https://www.suse.com/security/cve/CVE-2020-8647/	self
https://www.suse.com/security/cve/CVE-2020-8649/	self
https://www.suse.com/security/cve/CVE-2020-9383/	self
https://www.suse.com/security/cve/CVE-2017-18551	external
https://bugzilla.suse.com/1146163	external
https://www.suse.com/security/cve/CVE-2018-20836	external
https://bugzilla.suse.com/1134395	external
https://www.suse.com/security/cve/CVE-2019-12614	external
https://bugzilla.suse.com/1137194	external
https://www.suse.com/security/cve/CVE-2019-15217	external
https://bugzilla.suse.com/1146519	external
https://bugzilla.suse.com/1146547	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158834	external
https://www.suse.com/security/cve/CVE-2019-15807	external
https://bugzilla.suse.com/1148938	external
https://www.suse.com/security/cve/CVE-2019-15917	external
https://bugzilla.suse.com/1149539	external
https://bugzilla.suse.com/1156334	external
https://www.suse.com/security/cve/CVE-2019-16231	external
https://bugzilla.suse.com/1150466	external
https://www.suse.com/security/cve/CVE-2019-16233	external
https://bugzilla.suse.com/1150457	external
https://www.suse.com/security/cve/CVE-2019-16994	external
https://bugzilla.suse.com/1161523	external
https://www.suse.com/security/cve/CVE-2019-17053	external
https://bugzilla.suse.com/1152789	external
https://www.suse.com/security/cve/CVE-2019-17055	external
https://bugzilla.suse.com/1152782	external
https://www.suse.com/security/cve/CVE-2019-18808	external
https://bugzilla.suse.com/1156259	external
https://bugzilla.suse.com/1189884	external
https://bugzilla.suse.com/1190534	external
https://www.suse.com/security/cve/CVE-2019-19046	external
https://bugzilla.suse.com/1157304	external
https://www.suse.com/security/cve/CVE-2019-19055	external
https://bugzilla.suse.com/1157319	external
https://www.suse.com/security/cve/CVE-2019-19058	external
https://bugzilla.suse.com/1157145	external
https://www.suse.com/security/cve/CVE-2019-19059	external
https://bugzilla.suse.com/1157296	external
https://www.suse.com/security/cve/CVE-2019-19062	external
https://bugzilla.suse.com/1157333	external
https://www.suse.com/security/cve/CVE-2019-19063	external
https://bugzilla.suse.com/1157298	external
https://www.suse.com/security/cve/CVE-2019-19332	external
https://bugzilla.suse.com/1158827	external
https://www.suse.com/security/cve/CVE-2019-19447	external
https://bugzilla.suse.com/1158819	external
https://bugzilla.suse.com/1173869	external
https://www.suse.com/security/cve/CVE-2019-19523	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158823	external
https://bugzilla.suse.com/1158834	external
https://www.suse.com/security/cve/CVE-2019-19524	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158413	external
https://bugzilla.suse.com/1158834	external
https://www.suse.com/security/cve/CVE-2019-19530	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158410	external
https://bugzilla.suse.com/1158834	external
https://www.suse.com/security/cve/CVE-2019-19534	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158398	external
https://bugzilla.suse.com/1158834	external
https://www.suse.com/security/cve/CVE-2019-19537	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158834	external
https://bugzilla.suse.com/1158904	external
https://www.suse.com/security/cve/CVE-2019-19767	external
https://bugzilla.suse.com/1159297	external
https://www.suse.com/security/cve/CVE-2019-19807	external
https://bugzilla.suse.com/1159281	external
https://www.suse.com/security/cve/CVE-2019-20054	external
https://bugzilla.suse.com/1159910	external
https://www.suse.com/security/cve/CVE-2019-20095	external
https://bugzilla.suse.com/1159909	external
https://bugzilla.suse.com/1159914	external
https://www.suse.com/security/cve/CVE-2019-20636	external
https://bugzilla.suse.com/1168075	external
https://www.suse.com/security/cve/CVE-2019-9454	external
https://bugzilla.suse.com/1150023	external
https://www.suse.com/security/cve/CVE-2019-9458	external
https://bugzilla.suse.com/1168295	external
https://bugzilla.suse.com/1173963	external
https://www.suse.com/security/cve/CVE-2020-10690	external
https://bugzilla.suse.com/1170056	external
https://www.suse.com/security/cve/CVE-2020-10732	external
https://bugzilla.suse.com/1171220	external
https://www.suse.com/security/cve/CVE-2020-10742	external
https://bugzilla.suse.com/1171984	external
https://www.suse.com/security/cve/CVE-2020-10751	external
https://bugzilla.suse.com/1171189	external
https://bugzilla.suse.com/1174963	external
https://www.suse.com/security/cve/CVE-2020-10942	external
https://bugzilla.suse.com/1167629	external
https://www.suse.com/security/cve/CVE-2020-11565	external
https://bugzilla.suse.com/1168831	external
https://www.suse.com/security/cve/CVE-2020-12770	external
https://bugzilla.suse.com/1171420	external
https://www.suse.com/security/cve/CVE-2020-12826	external
https://bugzilla.suse.com/1171727	external
https://bugzilla.suse.com/1171985	external
https://www.suse.com/security/cve/CVE-2020-14305	external
https://bugzilla.suse.com/1173346	external
https://www.suse.com/security/cve/CVE-2020-1749	external
https://bugzilla.suse.com/1165629	external
https://bugzilla.suse.com/1165631	external
https://bugzilla.suse.com/1177511	external
https://bugzilla.suse.com/1177513	external
https://bugzilla.suse.com/1189302	external
https://www.suse.com/security/cve/CVE-2020-2732	external
https://bugzilla.suse.com/1163971	external
https://www.suse.com/security/cve/CVE-2020-8647	external
https://bugzilla.suse.com/1162929	external
https://bugzilla.suse.com/1164078	external
https://www.suse.com/security/cve/CVE-2020-8649	external
https://bugzilla.suse.com/1162929	external
https://bugzilla.suse.com/1162931	external
https://www.suse.com/security/cve/CVE-2020-9383	external
https://bugzilla.suse.com/1165111	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2020:4060.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2020:4060.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2020:4060",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2020_4060.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-18551 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-18551/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-20836 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-20836/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12614 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12614/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15217 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15217/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15807 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15807/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15917 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15917/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16231 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16231/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16233 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16233/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16994 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16994/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-17053 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-17053/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-17055 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-17055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18808 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18808/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19046 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19046/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19055 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19058 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19058/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19059 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19059/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19062 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19062/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19063 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19063/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19332 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19332/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19447 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19447/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19523 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19523/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19524 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19524/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19530 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19530/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19534 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19534/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19537 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19537/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19767 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19767/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19807 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19807/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-20054 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-20054/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-20095 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-20095/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-20636 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-20636/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9454 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9454/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9458 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9458/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10690 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10690/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10732 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10732/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10742 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10742/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10751 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10751/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10942 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10942/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-11565 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-11565/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-12770 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-12770/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-12826 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-12826/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-14305 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-14305/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-1749 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-1749/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-2732 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-2732/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-8647 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-8647/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-8649 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-8649/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-9383 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-9383/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T11:10:55Z",
      "generator": {
        "date": "2020-09-29T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2020:4060",
      "initial_release_date": "2020-09-29T00:00:00Z",
      "revision_history": [
        {
          "date": "2020-09-29T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:10:55Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
                "product": {
                  "name": "kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
                  "product_id": "kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:3.10.0-1160.el7.noarch",
                "product": {
                  "name": "kernel-doc-0:3.10.0-1160.el7.noarch",
                  "product_id": "kernel-doc-0:3.10.0-1160.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "bpftool-0:3.10.0-1160.el7.x86_64",
                  "product_id": "bpftool-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/bpftool@3.10.0-1160.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-1160.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "kernel-0:3.10.0-1160.el7.x86_64",
                  "product_id": "kernel-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@3.10.0-1160.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "kernel-debug-0:3.10.0-1160.el7.x86_64",
                  "product_id": "kernel-debug-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
                  "product_id": "kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "kernel-devel-0:3.10.0-1160.el7.x86_64",
                  "product_id": "kernel-devel-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-1160.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "kernel-headers-0:3.10.0-1160.el7.x86_64",
                  "product_id": "kernel-headers-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "kernel-tools-0:3.10.0-1160.el7.x86_64",
                  "product_id": "kernel-tools-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
                  "product_id": "kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "perf-0:3.10.0-1160.el7.x86_64",
                  "product_id": "perf-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@3.10.0-1160.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-1160.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-perf-0:3.10.0-1160.el7.x86_64",
                "product": {
                  "name": "python-perf-0:3.10.0-1160.el7.x86_64",
                  "product_id": "python-perf-0:3.10.0-1160.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python-perf@3.10.0-1160.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "bpftool-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "kernel-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-whitelists-0:3.10.0-1160.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch"
        },
        "product_reference": "kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "kernel-debug-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "kernel-devel-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:3.10.0-1160.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch"
        },
        "product_reference": "kernel-doc-0:3.10.0-1160.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "kernel-headers-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "kernel-tools-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "perf-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-perf-0:3.10.0-1160.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        },
        "product_reference": "python-perf-0:3.10.0-1160.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-18551",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-18551"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-18551",
          "url": "https://www.suse.com/security/cve/CVE-2017-18551"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146163 for CVE-2017-18551",
          "url": "https://bugzilla.suse.com/1146163"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-18551"
    },
    {
      "cve": "CVE-2018-20836",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-20836"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-20836",
          "url": "https://www.suse.com/security/cve/CVE-2018-20836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1134395 for CVE-2018-20836",
          "url": "https://bugzilla.suse.com/1134395"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-20836"
    },
    {
      "cve": "CVE-2019-12614",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12614"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop-\u003ename, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12614",
          "url": "https://www.suse.com/security/cve/CVE-2019-12614"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137194 for CVE-2019-12614",
          "url": "https://bugzilla.suse.com/1137194"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-12614"
    },
    {
      "cve": "CVE-2019-15217",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15217"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15217",
          "url": "https://www.suse.com/security/cve/CVE-2019-15217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146519 for CVE-2019-15217",
          "url": "https://bugzilla.suse.com/1146519"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146547 for CVE-2019-15217",
          "url": "https://bugzilla.suse.com/1146547"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-15217",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-15217",
          "url": "https://bugzilla.suse.com/1158834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15217"
    },
    {
      "cve": "CVE-2019-15807",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15807"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15807",
          "url": "https://www.suse.com/security/cve/CVE-2019-15807"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1148938 for CVE-2019-15807",
          "url": "https://bugzilla.suse.com/1148938"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15807"
    },
    {
      "cve": "CVE-2019-15917",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15917"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15917",
          "url": "https://www.suse.com/security/cve/CVE-2019-15917"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1149539 for CVE-2019-15917",
          "url": "https://bugzilla.suse.com/1149539"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156334 for CVE-2019-15917",
          "url": "https://bugzilla.suse.com/1156334"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-15917"
    },
    {
      "cve": "CVE-2019-16231",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16231"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16231",
          "url": "https://www.suse.com/security/cve/CVE-2019-16231"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150466 for CVE-2019-16231",
          "url": "https://bugzilla.suse.com/1150466"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16231"
    },
    {
      "cve": "CVE-2019-16233",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16233"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16233",
          "url": "https://www.suse.com/security/cve/CVE-2019-16233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150457 for CVE-2019-16233",
          "url": "https://bugzilla.suse.com/1150457"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16233"
    },
    {
      "cve": "CVE-2019-16994",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16994"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn-\u003efb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16994",
          "url": "https://www.suse.com/security/cve/CVE-2019-16994"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161523 for CVE-2019-16994",
          "url": "https://bugzilla.suse.com/1161523"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16994"
    },
    {
      "cve": "CVE-2019-17053",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-17053"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-17053",
          "url": "https://www.suse.com/security/cve/CVE-2019-17053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152789 for CVE-2019-17053",
          "url": "https://bugzilla.suse.com/1152789"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-17053"
    },
    {
      "cve": "CVE-2019-17055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-17055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-17055",
          "url": "https://www.suse.com/security/cve/CVE-2019-17055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152782 for CVE-2019-17055",
          "url": "https://bugzilla.suse.com/1152782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-17055"
    },
    {
      "cve": "CVE-2019-18808",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18808"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18808",
          "url": "https://www.suse.com/security/cve/CVE-2019-18808"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156259 for CVE-2019-18808",
          "url": "https://bugzilla.suse.com/1156259"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189884 for CVE-2019-18808",
          "url": "https://bugzilla.suse.com/1189884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190534 for CVE-2019-18808",
          "url": "https://bugzilla.suse.com/1190534"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-18808"
    },
    {
      "cve": "CVE-2019-19046",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19046"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19046",
          "url": "https://www.suse.com/security/cve/CVE-2019-19046"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157304 for CVE-2019-19046",
          "url": "https://bugzilla.suse.com/1157304"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19046"
    },
    {
      "cve": "CVE-2019-19055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19055",
          "url": "https://www.suse.com/security/cve/CVE-2019-19055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157319 for CVE-2019-19055",
          "url": "https://bugzilla.suse.com/1157319"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19055"
    },
    {
      "cve": "CVE-2019-19058",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19058"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19058",
          "url": "https://www.suse.com/security/cve/CVE-2019-19058"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157145 for CVE-2019-19058",
          "url": "https://bugzilla.suse.com/1157145"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19058"
    },
    {
      "cve": "CVE-2019-19059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19059",
          "url": "https://www.suse.com/security/cve/CVE-2019-19059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157296 for CVE-2019-19059",
          "url": "https://bugzilla.suse.com/1157296"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19059"
    },
    {
      "cve": "CVE-2019-19062",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19062"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19062",
          "url": "https://www.suse.com/security/cve/CVE-2019-19062"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157333 for CVE-2019-19062",
          "url": "https://bugzilla.suse.com/1157333"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19062"
    },
    {
      "cve": "CVE-2019-19063",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19063"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19063",
          "url": "https://www.suse.com/security/cve/CVE-2019-19063"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157298 for CVE-2019-19063",
          "url": "https://bugzilla.suse.com/1157298"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19063"
    },
    {
      "cve": "CVE-2019-19332",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19332"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel\u0027s KVM hypervisor handled the \u0027KVM_GET_EMULATED_CPUID\u0027 ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the \u0027/dev/kvm\u0027 device could use this flaw to crash the system, resulting in a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19332",
          "url": "https://www.suse.com/security/cve/CVE-2019-19332"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158827 for CVE-2019-19332",
          "url": "https://bugzilla.suse.com/1158827"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19332"
    },
    {
      "cve": "CVE-2019-19447",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19447"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19447",
          "url": "https://www.suse.com/security/cve/CVE-2019-19447"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158819 for CVE-2019-19447",
          "url": "https://bugzilla.suse.com/1158819"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173869 for CVE-2019-19447",
          "url": "https://bugzilla.suse.com/1173869"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19447"
    },
    {
      "cve": "CVE-2019-19523",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19523"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19523",
          "url": "https://www.suse.com/security/cve/CVE-2019-19523"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-19523",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158823 for CVE-2019-19523",
          "url": "https://bugzilla.suse.com/1158823"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-19523",
          "url": "https://bugzilla.suse.com/1158834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19523"
    },
    {
      "cve": "CVE-2019-19524",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19524"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19524",
          "url": "https://www.suse.com/security/cve/CVE-2019-19524"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-19524",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158413 for CVE-2019-19524",
          "url": "https://bugzilla.suse.com/1158413"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-19524",
          "url": "https://bugzilla.suse.com/1158834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.4,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-19524"
    },
    {
      "cve": "CVE-2019-19530",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19530"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19530",
          "url": "https://www.suse.com/security/cve/CVE-2019-19530"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-19530",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158410 for CVE-2019-19530",
          "url": "https://bugzilla.suse.com/1158410"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-19530",
          "url": "https://bugzilla.suse.com/1158834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19530"
    },
    {
      "cve": "CVE-2019-19534",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19534"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19534",
          "url": "https://www.suse.com/security/cve/CVE-2019-19534"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-19534",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158398 for CVE-2019-19534",
          "url": "https://bugzilla.suse.com/1158398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-19534",
          "url": "https://bugzilla.suse.com/1158834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.4,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-19534"
    },
    {
      "cve": "CVE-2019-19537",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19537"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19537",
          "url": "https://www.suse.com/security/cve/CVE-2019-19537"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-19537",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-19537",
          "url": "https://bugzilla.suse.com/1158834"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158904 for CVE-2019-19537",
          "url": "https://bugzilla.suse.com/1158904"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19537"
    },
    {
      "cve": "CVE-2019-19767",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19767"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19767",
          "url": "https://www.suse.com/security/cve/CVE-2019-19767"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159297 for CVE-2019-19767",
          "url": "https://bugzilla.suse.com/1159297"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19767"
    },
    {
      "cve": "CVE-2019-19807",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19807"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to snd_timer_open and snd_timer_close_locked. The timeri variable was originally intended to be for a newly created timer instance, but was used for a different purpose after refactoring.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19807",
          "url": "https://www.suse.com/security/cve/CVE-2019-19807"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159281 for CVE-2019-19807",
          "url": "https://bugzilla.suse.com/1159281"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19807"
    },
    {
      "cve": "CVE-2019-20054",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-20054"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-20054",
          "url": "https://www.suse.com/security/cve/CVE-2019-20054"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159910 for CVE-2019-20054",
          "url": "https://bugzilla.suse.com/1159910"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-20054"
    },
    {
      "cve": "CVE-2019-20095",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-20095"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-20095",
          "url": "https://www.suse.com/security/cve/CVE-2019-20095"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159909 for CVE-2019-20095",
          "url": "https://bugzilla.suse.com/1159909"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159914 for CVE-2019-20095",
          "url": "https://bugzilla.suse.com/1159914"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-20095"
    },
    {
      "cve": "CVE-2019-20636",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-20636"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-20636",
          "url": "https://www.suse.com/security/cve/CVE-2019-20636"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1168075 for CVE-2019-20636",
          "url": "https://bugzilla.suse.com/1168075"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-20636"
    },
    {
      "cve": "CVE-2019-9454",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9454"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9454",
          "url": "https://www.suse.com/security/cve/CVE-2019-9454"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150023 for CVE-2019-9454",
          "url": "https://bugzilla.suse.com/1150023"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9454"
    },
    {
      "cve": "CVE-2019-9458",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9458"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9458",
          "url": "https://www.suse.com/security/cve/CVE-2019-9458"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1168295 for CVE-2019-9458",
          "url": "https://bugzilla.suse.com/1168295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173963 for CVE-2019-9458",
          "url": "https://bugzilla.suse.com/1173963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9458"
    },
    {
      "cve": "CVE-2020-10690",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10690"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10690",
          "url": "https://www.suse.com/security/cve/CVE-2020-10690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1170056 for CVE-2020-10690",
          "url": "https://bugzilla.suse.com/1170056"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-10690"
    },
    {
      "cve": "CVE-2020-10732",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10732"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10732",
          "url": "https://www.suse.com/security/cve/CVE-2020-10732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171220 for CVE-2020-10732",
          "url": "https://bugzilla.suse.com/1171220"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2020-10732"
    },
    {
      "cve": "CVE-2020-10742",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10742"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality and system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10742",
          "url": "https://www.suse.com/security/cve/CVE-2020-10742"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171984 for CVE-2020-10742",
          "url": "https://bugzilla.suse.com/1171984"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-10742"
    },
    {
      "cve": "CVE-2020-10751",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10751"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10751",
          "url": "https://www.suse.com/security/cve/CVE-2020-10751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171189 for CVE-2020-10751",
          "url": "https://bugzilla.suse.com/1171189"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1174963 for CVE-2020-10751",
          "url": "https://bugzilla.suse.com/1174963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-10751"
    },
    {
      "cve": "CVE-2020-10942",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10942"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10942",
          "url": "https://www.suse.com/security/cve/CVE-2020-10942"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1167629 for CVE-2020-10942",
          "url": "https://bugzilla.suse.com/1167629"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-10942"
    },
    {
      "cve": "CVE-2020-11565",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-11565"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue \"is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-11565",
          "url": "https://www.suse.com/security/cve/CVE-2020-11565"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1168831 for CVE-2020-11565",
          "url": "https://bugzilla.suse.com/1168831"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-11565"
    },
    {
      "cve": "CVE-2020-12770",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-12770"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-12770",
          "url": "https://www.suse.com/security/cve/CVE-2020-12770"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171420 for CVE-2020-12770",
          "url": "https://bugzilla.suse.com/1171420"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-12770"
    },
    {
      "cve": "CVE-2020-12826",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-12826"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary signal to a parent process in a different security domain. Exploitation limitations include the amount of elapsed time before an integer overflow occurs, and the lack of scenarios where signals to a parent process present a substantial operational threat.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-12826",
          "url": "https://www.suse.com/security/cve/CVE-2020-12826"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171727 for CVE-2020-12826",
          "url": "https://bugzilla.suse.com/1171727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171985 for CVE-2020-12826",
          "url": "https://bugzilla.suse.com/1171985"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-12826"
    },
    {
      "cve": "CVE-2020-14305",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-14305"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds memory write flaw was found in how the Linux kernel\u0027s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-14305",
          "url": "https://www.suse.com/security/cve/CVE-2020-14305"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173346 for CVE-2020-14305",
          "url": "https://bugzilla.suse.com/1173346"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-14305"
    },
    {
      "cve": "CVE-2020-1749",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-1749"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn\u0027t correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-1749",
          "url": "https://www.suse.com/security/cve/CVE-2020-1749"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165629 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1165629"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165631 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1165631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177511 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1177511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177513 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1177513"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189302 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1189302"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-1749"
    },
    {
      "cve": "CVE-2020-2732",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-2732"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-2732",
          "url": "https://www.suse.com/security/cve/CVE-2020-2732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1163971 for CVE-2020-2732",
          "url": "https://bugzilla.suse.com/1163971"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.2,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-2732"
    },
    {
      "cve": "CVE-2020-8647",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-8647"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-8647",
          "url": "https://www.suse.com/security/cve/CVE-2020-8647"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162929 for CVE-2020-8647",
          "url": "https://bugzilla.suse.com/1162929"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1164078 for CVE-2020-8647",
          "url": "https://bugzilla.suse.com/1164078"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-8647"
    },
    {
      "cve": "CVE-2020-8649",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-8649"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-8649",
          "url": "https://www.suse.com/security/cve/CVE-2020-8649"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162929 for CVE-2020-8649",
          "url": "https://bugzilla.suse.com/1162929"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162931 for CVE-2020-8649",
          "url": "https://bugzilla.suse.com/1162931"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-8649"
    },
    {
      "cve": "CVE-2020-9383",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-9383"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-9383",
          "url": "https://www.suse.com/security/cve/CVE-2020-9383"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165111 for CVE-2020-9383",
          "url": "https://bugzilla.suse.com/1165111"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-9383"
    }
  ]
}

CVE-2019-17055 (GCVE-0-2019-17055)

Vulnerability from cvelistv5 – Published: 2019-10-01 13:10 – Updated: 2024-08-05 01:33

Summary

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

15 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://seclists.org/bugtraq/2019/Nov/11	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155212/Slack…	x_refsource_MISC
https://usn.ubuntu.com/4185-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4184-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4186-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4185-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4186-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2020:0790	vendor-advisoryx_refsource_REDHAT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:33:16.286Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80"
          },
          {
            "name": "FEDORA-2019-41e28660ae",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/"
          },
          {
            "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/11"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "name": "USN-4185-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4185-1/"
          },
          {
            "name": "USN-4184-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4184-1/"
          },
          {
            "name": "USN-4186-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4186-1/"
          },
          {
            "name": "openSUSE-SU-2019:2503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
          },
          {
            "name": "openSUSE-SU-2019:2507",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
          },
          {
            "name": "USN-4185-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4185-2/"
          },
          {
            "name": "USN-4186-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4186-2/"
          },
          {
            "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "RHSA-2020:0790",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0790"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-11T19:06:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80"
        },
        {
          "name": "FEDORA-2019-41e28660ae",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/"
        },
        {
          "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/11"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        },
        {
          "name": "USN-4185-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4185-1/"
        },
        {
          "name": "USN-4184-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4184-1/"
        },
        {
          "name": "USN-4186-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4186-1/"
        },
        {
          "name": "openSUSE-SU-2019:2503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
        },
        {
          "name": "openSUSE-SU-2019:2507",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
        },
        {
          "name": "USN-4185-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4185-2/"
        },
        {
          "name": "USN-4186-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4186-2/"
        },
        {
          "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "RHSA-2020:0790",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0790"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-17055",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80"
            },
            {
              "name": "FEDORA-2019-41e28660ae",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/"
            },
            {
              "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/11"
            },
            {
              "name": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
            },
            {
              "name": "USN-4185-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4185-1/"
            },
            {
              "name": "USN-4184-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4184-1/"
            },
            {
              "name": "USN-4186-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4186-1/"
            },
            {
              "name": "openSUSE-SU-2019:2503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
            },
            {
              "name": "openSUSE-SU-2019:2507",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
            },
            {
              "name": "USN-4185-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4185-2/"
            },
            {
              "name": "USN-4186-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4186-2/"
            },
            {
              "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            },
            {
              "name": "RHSA-2020:0790",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0790"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-17055",
    "datePublished": "2019-10-01T13:10:41.000Z",
    "dateReserved": "2019-10-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:33:16.286Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-18808 (GCVE-0-2019-18808)

Vulnerability from cvelistv5 – Published: 2019-11-07 15:29 – Updated: 2024-08-05 02:02

Summary

A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

8 references

URL	Tags
https://github.com/torvalds/linux/commit/128c6642…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4526-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4525-1/	vendor-advisoryx_refsource_UBUNTU
http://www.openwall.com/lists/oss-security/2021/09/14/1	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:02:39.733Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "name": "FEDORA-2019-b86a7bdba0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"
          },
          {
            "name": "FEDORA-2019-124a241044",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"
          },
          {
            "name": "openSUSE-SU-2020:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
          },
          {
            "name": "USN-4526-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4526-1/"
          },
          {
            "name": "USN-4525-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4525-1/"
          },
          {
            "name": "[oss-security] 20210914 Disclosure: CVE-2021-3744: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/09/14/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-14T17:06:13.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "name": "FEDORA-2019-b86a7bdba0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"
        },
        {
          "name": "FEDORA-2019-124a241044",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"
        },
        {
          "name": "openSUSE-SU-2020:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
        },
        {
          "name": "USN-4526-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4526-1/"
        },
        {
          "name": "USN-4525-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4525-1/"
        },
        {
          "name": "[oss-security] 20210914 Disclosure: CVE-2021-3744: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/09/14/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-18808",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "FEDORA-2019-b86a7bdba0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"
            },
            {
              "name": "FEDORA-2019-124a241044",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"
            },
            {
              "name": "openSUSE-SU-2020:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
            },
            {
              "name": "USN-4526-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4526-1/"
            },
            {
              "name": "USN-4525-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4525-1/"
            },
            {
              "name": "[oss-security] 20210914 Disclosure: CVE-2021-3744: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/09/14/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-18808",
    "datePublished": "2019-11-07T15:29:46.000Z",
    "dateReserved": "2019-11-07T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:02:39.733Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19046 (GCVE-0-2019-19046)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:23 – Updated: 2024-08-05 02:09 Disputed

Summary

A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

8 references

URL	Tags
https://github.com/torvalds/linux/commit/4aa7afb0…	x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=1157304	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4302-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4325-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4319-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.134Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157304"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "name": "USN-4302-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4302-1/"
          },
          {
            "name": "USN-4325-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4325-1/"
          },
          {
            "name": "USN-4319-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4319-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-22T18:06:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157304"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "name": "USN-4302-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4302-1/"
        },
        {
          "name": "USN-4325-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4325-1/"
        },
        {
          "name": "USN-4319-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4319-1/"
        }
      ],
      "tags": [
        "disputed"
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19046",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "** DISPUTED ** A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1157304",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157304"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "USN-4302-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4302-1/"
            },
            {
              "name": "USN-4325-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4325-1/"
            },
            {
              "name": "USN-4319-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4319-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19046",
    "datePublished": "2019-11-18T05:23:42.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.134Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19055 (GCVE-0-2019-19055)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:23 – Updated: 2024-08-05 02:09 Disputed

Summary

A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

7 references

URL	Tags
https://github.com/torvalds/linux/commit/1399c59f…	x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=1157319	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4226-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4225-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4225-2/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.548Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157319"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "name": "USN-4226-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4226-1/"
          },
          {
            "name": "USN-4225-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4225-1/"
          },
          {
            "name": "USN-4225-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4225-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-23T17:06:06.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157319"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "name": "USN-4226-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4226-1/"
        },
        {
          "name": "USN-4225-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4225-1/"
        },
        {
          "name": "USN-4225-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4225-2/"
        }
      ],
      "tags": [
        "disputed"
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19055",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "** DISPUTED ** A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1157319",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157319"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "USN-4226-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4226-1/"
            },
            {
              "name": "USN-4225-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4225-1/"
            },
            {
              "name": "USN-4225-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4225-2/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19055",
    "datePublished": "2019-11-18T05:23:54.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19058 (GCVE-0-2019-19058)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:23 – Updated: 2024-08-05 02:09

Summary

A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

8 references

URL	Tags
https://github.com/torvalds/linux/commit/b4b814fe…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4300-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4301-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4302-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.134Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/b4b814fec1a5a849383f7b3886b654a13abbda7d"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "name": "USN-4300-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4300-1/"
          },
          {
            "name": "USN-4301-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4301-1/"
          },
          {
            "name": "USN-4302-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4302-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-04T14:06:03.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/b4b814fec1a5a849383f7b3886b654a13abbda7d"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "name": "USN-4300-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4300-1/"
        },
        {
          "name": "USN-4301-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4301-1/"
        },
        {
          "name": "USN-4302-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4302-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19058",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/b4b814fec1a5a849383f7b3886b654a13abbda7d",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/b4b814fec1a5a849383f7b3886b654a13abbda7d"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "USN-4300-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4300-1/"
            },
            {
              "name": "USN-4301-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4301-1/"
            },
            {
              "name": "USN-4302-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4302-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19058",
    "datePublished": "2019-11-18T05:23:58.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.134Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19059 (GCVE-0-2019-19059)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:24 – Updated: 2024-08-05 02:09

Summary

Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

6 references

URL	Tags
https://github.com/torvalds/linux/commit/0f4f1994…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
https://usn.ubuntu.com/4300-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4301-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.525Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "name": "USN-4300-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4300-1/"
          },
          {
            "name": "USN-4301-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4301-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-02T23:06:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "name": "USN-4300-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4300-1/"
        },
        {
          "name": "USN-4301-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4301-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19059",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "USN-4300-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4300-1/"
            },
            {
              "name": "USN-4301-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4301-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19059",
    "datePublished": "2019-11-18T05:24:00.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.525Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19062 (GCVE-0-2019-19062)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:24 – Updated: 2024-08-05 02:09

Summary

A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

15 references

URL	Tags
https://github.com/torvalds/linux/commit/ffdde593…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Jan/10	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155890/Slack…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4254-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4254-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4258-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4284-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.532Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ffdde5932042600c6807d46c1550b28b0db6a3bc"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/10"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
          },
          {
            "name": "USN-4254-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-1/"
          },
          {
            "name": "USN-4254-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-2/"
          },
          {
            "name": "USN-4258-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4258-1/"
          },
          {
            "name": "USN-4287-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-1/"
          },
          {
            "name": "USN-4287-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-2/"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "USN-4284-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4284-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-02T20:06:23.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/ffdde5932042600c6807d46c1550b28b0db6a3bc"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/10"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        },
        {
          "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
        },
        {
          "name": "USN-4254-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-1/"
        },
        {
          "name": "USN-4254-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-2/"
        },
        {
          "name": "USN-4258-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4258-1/"
        },
        {
          "name": "USN-4287-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-1/"
        },
        {
          "name": "USN-4287-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-2/"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "USN-4284-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4284-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19062",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/ffdde5932042600c6807d46c1550b28b0db6a3bc",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/ffdde5932042600c6807d46c1550b28b0db6a3bc"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/10"
            },
            {
              "name": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
            },
            {
              "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
            },
            {
              "name": "USN-4254-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-1/"
            },
            {
              "name": "USN-4254-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-2/"
            },
            {
              "name": "USN-4258-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4258-1/"
            },
            {
              "name": "USN-4287-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-1/"
            },
            {
              "name": "USN-4287-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-2/"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            },
            {
              "name": "USN-4284-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4284-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19062",
    "datePublished": "2019-11-18T05:24:04.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.532Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19063 (GCVE-0-2019-19063)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:24 – Updated: 2024-08-05 02:09

Summary

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

14 references

URL	Tags
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Jan/10	mailing-listx_refsource_BUGTRAQ
https://usn.ubuntu.com/4254-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4254-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4285-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4284-1/	vendor-advisoryx_refsource_UBUNTU
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/3f936169…	x_refsource_MISC
http://packetstormsecurity.com/files/155890/Slack…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:39.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/10"
          },
          {
            "name": "USN-4254-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-1/"
          },
          {
            "name": "USN-4254-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-2/"
          },
          {
            "name": "USN-4285-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4285-1/"
          },
          {
            "name": "USN-4287-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-1/"
          },
          {
            "name": "USN-4287-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-2/"
          },
          {
            "name": "USN-4284-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4284-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/3f93616951138a598d930dcaec40f2bfd9ce43bb"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-14T17:20:10.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/10"
        },
        {
          "name": "USN-4254-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-1/"
        },
        {
          "name": "USN-4254-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-2/"
        },
        {
          "name": "USN-4285-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4285-1/"
        },
        {
          "name": "USN-4287-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-1/"
        },
        {
          "name": "USN-4287-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-2/"
        },
        {
          "name": "USN-4284-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4284-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/3f93616951138a598d930dcaec40f2bfd9ce43bb"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19063",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/10"
            },
            {
              "name": "USN-4254-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-1/"
            },
            {
              "name": "USN-4254-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-2/"
            },
            {
              "name": "USN-4285-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4285-1/"
            },
            {
              "name": "USN-4287-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-1/"
            },
            {
              "name": "USN-4287-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-2/"
            },
            {
              "name": "USN-4284-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4284-1/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/3f93616951138a598d930dcaec40f2bfd9ce43bb",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/3f93616951138a598d930dcaec40f2bfd9ce43bb"
            },
            {
              "name": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19063",
    "datePublished": "2019-11-18T05:24:05.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:39.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19332 (GCVE-0-2019-19332)

Vulnerability from cvelistv5 – Published: 2020-01-09 14:41 – Updated: 2024-08-05 02:16

Summary

An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.

Severity

6.1 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE

CWE-787

Assigner

redhat redhat root Scorecard

References

14 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://www.openwall.com/lists/oss-security/2019/…	x_refsource_MISC
https://lore.kernel.org/kvm/000000000000ea5ec2059…	x_refsource_MISC
http://packetstormsecurity.com/files/155890/Slack…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4254-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4254-2/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2020020…	x_refsource_CONFIRM
https://usn.ubuntu.com/4258-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4284-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Impacted products

1 product

Vendor	Product	Version
Linux	Kernel	Affected: 3.13 through 5.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:16:47.112Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19332"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2019/12/16/1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/kvm/000000000000ea5ec20598d90e50%40google.com/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
          },
          {
            "name": "USN-4254-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-1/"
          },
          {
            "name": "USN-4254-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200204-0002/"
          },
          {
            "name": "USN-4258-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4258-1/"
          },
          {
            "name": "USN-4287-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-1/"
          },
          {
            "name": "USN-4287-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-2/"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "USN-4284-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4284-1/"
          },
          {
            "name": "openSUSE-SU-2020:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.13 through 5.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel\u0027s KVM hypervisor handled the \u0027KVM_GET_EMULATED_CPUID\u0027 ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the \u0027/dev/kvm\u0027 device could use this flaw to crash the system, resulting in a denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-13T13:06:31.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19332"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2019/12/16/1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/kvm/000000000000ea5ec20598d90e50%40google.com/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        },
        {
          "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
        },
        {
          "name": "USN-4254-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-1/"
        },
        {
          "name": "USN-4254-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200204-0002/"
        },
        {
          "name": "USN-4258-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4258-1/"
        },
        {
          "name": "USN-4287-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-1/"
        },
        {
          "name": "USN-4287-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-2/"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "USN-4284-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4284-1/"
        },
        {
          "name": "openSUSE-SU-2020:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-19332",
    "datePublished": "2020-01-09T14:41:03.000Z",
    "dateReserved": "2019-11-27T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:16:47.112Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19447 (GCVE-0-2019-19447)

Vulnerability from cvelistv5 – Published: 2019-12-08 00:48 – Updated: 2024-08-05 02:16

Summary

In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

6 references

URL	Tags
https://github.com/bobfuzzer/CVE/tree/master/CVE-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:16:47.116Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "openSUSE-SU-2020:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
          },
          {
            "name": "[debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html"
          },
          {
            "name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-10T12:04:09.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "openSUSE-SU-2020:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
        },
        {
          "name": "[debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html"
        },
        {
          "name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19447",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447",
              "refsource": "MISC",
              "url": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            },
            {
              "name": "openSUSE-SU-2020:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
            },
            {
              "name": "[debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html"
            },
            {
              "name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19447",
    "datePublished": "2019-12-08T00:48:36.000Z",
    "dateReserved": "2019-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:16:47.116Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2020:4060

CVE-2019-17055 (GCVE-0-2019-17055)

CVE-2019-18808 (GCVE-0-2019-18808)

CVE-2019-19046 (GCVE-0-2019-19046)

CVE-2019-19055 (GCVE-0-2019-19055)

CVE-2019-19058 (GCVE-0-2019-19058)

CVE-2019-19059 (GCVE-0-2019-19059)

CVE-2019-19062 (GCVE-0-2019-19062)

CVE-2019-19063 (GCVE-0-2019-19063)

CVE-2019-19332 (GCVE-0-2019-19332)

CVE-2019-19447 (GCVE-0-2019-19447)

Tags

Sightings

Nomenclature

Related by attack behaviour