SUSE-SU-2018:2719-1

Vulnerability from csaf_suse - Published: 2018-09-14 14:06 - Updated: 2026-09-20 12:55
Summary
Security update for openssh-openssl1
Severity
Important
Notes
Title of the patch: Security update for openssh-openssl1
Description of the patch: This update for openssh-openssl1 fixes the following issues: These security issues were fixed: - CVE-2016-10708: Prevent NULL pointer dereference via an out-of-sequence NEWKEYS message allowed remote attackers to cause a denial of service (bsc#1076957). - CVE-2017-15906: The process_open function did not properly prevent write operations in readonly mode, which allowed attackers to create zero-length files (bsc#1065000). - CVE-2016-10012: The shared memory manager (associated with pre-authentication compression) did not ensure that a bounds check is enforced by all compilers, which might have allowed local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures (bsc#1016370). - CVE-2008-1483: Prevent local users from hijacking forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port. This problem was reontroduced by another patch and was previously fixed by another update (bsc#1069509). These non-security issues were fixed: - Remove duplicate KEX method (bsc#1053972) - New switch for printing diagnostic messages in sftp client's batch mode (bsc#1023275) - Enable case-insensitive hostname matching (bsc#1017099)
Patchnames: secsp3-openssh-openssl1-13777
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2008-1483
8.2 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2016-10012
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 10 products, the same list as for CVE-2008-1483
Threats
Impact moderate
CVE-2016-10708
5.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 10 products, the same list as for CVE-2008-1483
Threats
Impact moderate
CVE-2017-15906
4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected products
Recommended 10 products, the same list as for CVE-2008-1483
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1016370 self
https://bugzilla.suse.com/1017099 self
https://bugzilla.suse.com/1023275 self
https://bugzilla.suse.com/1053972 self
https://bugzilla.suse.com/1065000 self
https://bugzilla.suse.com/1069509 self
https://bugzilla.suse.com/1076957 self
https://www.suse.com/security/cve/CVE-2008-1483/ self
https://www.suse.com/security/cve/CVE-2016-10012/ self
https://www.suse.com/security/cve/CVE-2016-10708/ self
https://www.suse.com/security/cve/CVE-2017-15906/ self
https://www.suse.com/security/cve/CVE-2008-1483 external
https://bugzilla.suse.com/1069509 external
https://bugzilla.suse.com/373527 external
https://bugzilla.suse.com/585630 external
https://bugzilla.suse.com/647633 external
https://bugzilla.suse.com/706386 external
https://www.suse.com/security/cve/CVE-2016-10012 external
https://bugzilla.suse.com/1006166 external
https://bugzilla.suse.com/1016336 external
https://bugzilla.suse.com/1016369 external
https://bugzilla.suse.com/1016370 external
https://bugzilla.suse.com/1017870 external
https://bugzilla.suse.com/1026634 external
https://bugzilla.suse.com/1035742 external
https://bugzilla.suse.com/1073044 external
https://bugzilla.suse.com/1092582 external
https://bugzilla.suse.com/1138392 external
https://www.suse.com/security/cve/CVE-2016-10708 external
https://bugzilla.suse.com/1076957 external
https://bugzilla.suse.com/1106726 external
https://bugzilla.suse.com/1138392 external
https://www.suse.com/security/cve/CVE-2017-15906 external
https://bugzilla.suse.com/1064285 external
https://bugzilla.suse.com/1065000 external
https://bugzilla.suse.com/1074115 external
https://bugzilla.suse.com/1079488 external
https://bugzilla.suse.com/1090163 external
https://bugzilla.suse.com/1099316 external
https://bugzilla.suse.com/1138392 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssh-openssl1",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openssh-openssl1 fixes the following issues:\n\nThese security issues were fixed:\n\n- CVE-2016-10708: Prevent NULL pointer dereference via an out-of-sequence\n  NEWKEYS message allowed remote attackers to cause a denial of service\n  (bsc#1076957).\n- CVE-2017-15906: The process_open function did not properly prevent write\n  operations in readonly mode, which allowed attackers to create zero-length\n  files (bsc#1065000).\n- CVE-2016-10012: The shared memory manager (associated with pre-authentication\n  compression) did not ensure that a bounds check is enforced by all compilers,\n  which might have allowed local users to gain privileges by leveraging access to\n  a sandboxed privilege-separation process, related to the m_zback and m_zlib\n  data structures (bsc#1016370).\n- CVE-2008-1483: Prevent local users from hijacking forwarded X connections by\n  causing ssh to set DISPLAY to :10, even when another process is listening on\n  the associated port. This problem was reontroduced by another patch and was\n  previously fixed by another update (bsc#1069509).\n\nThese non-security issues were fixed:\n\n- Remove duplicate KEX method (bsc#1053972)\n- New switch for printing diagnostic messages in sftp client\u0027s batch mode (bsc#1023275)\n- Enable case-insensitive hostname matching (bsc#1017099)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "secsp3-openssh-openssl1-13777",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2719-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2018:2719-1",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182719-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2018:2719-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2018-September/004564.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1016370",
        "url": "https://bugzilla.suse.com/1016370"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1017099",
        "url": "https://bugzilla.suse.com/1017099"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1023275",
        "url": "https://bugzilla.suse.com/1023275"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1053972",
        "url": "https://bugzilla.suse.com/1053972"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065000",
        "url": "https://bugzilla.suse.com/1065000"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1069509",
        "url": "https://bugzilla.suse.com/1069509"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1076957",
        "url": "https://bugzilla.suse.com/1076957"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2008-1483 page",
        "url": "https://www.suse.com/security/cve/CVE-2008-1483/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10012 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10012/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10708 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10708/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-15906 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-15906/"
      }
    ],
    "title": "Security update for openssh-openssl1",
    "tracking": {
      "current_release_date": "2026-09-20T12:55:43Z",
      "generator": {
        "date": "2018-09-14T14:06:53Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2018:2719-1",
      "initial_release_date": "2018-09-14T14:06:53Z",
      "revision_history": [
        {
          "date": "2018-09-14T14:06:53Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T12:55:43Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-0:6.6p1-19.3.1.i586",
                "product": {
                  "name": "openssh-openssl1-0:6.6p1-19.3.1.i586",
                  "product_id": "openssh-openssl1-0:6.6p1-19.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1@6.6p1-19.3.1?arch=i586\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
                "product": {
                  "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
                  "product_id": "openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1-helpers@6.6p1-19.3.1?arch=i586\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-0:6.6p1-19.3.1.ia64",
                "product": {
                  "name": "openssh-openssl1-0:6.6p1-19.3.1.ia64",
                  "product_id": "openssh-openssl1-0:6.6p1-19.3.1.ia64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1@6.6p1-19.3.1?arch=ia64\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
                "product": {
                  "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
                  "product_id": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1-helpers@6.6p1-19.3.1?arch=ia64\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-0:6.6p1-19.3.1.ppc64",
                "product": {
                  "name": "openssh-openssl1-0:6.6p1-19.3.1.ppc64",
                  "product_id": "openssh-openssl1-0:6.6p1-19.3.1.ppc64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1@6.6p1-19.3.1?arch=ppc64\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
                "product": {
                  "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
                  "product_id": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1-helpers@6.6p1-19.3.1?arch=ppc64\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-0:6.6p1-19.3.1.s390x",
                "product": {
                  "name": "openssh-openssl1-0:6.6p1-19.3.1.s390x",
                  "product_id": "openssh-openssl1-0:6.6p1-19.3.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1@6.6p1-19.3.1?arch=s390x\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
                "product": {
                  "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
                  "product_id": "openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1-helpers@6.6p1-19.3.1?arch=s390x\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-0:6.6p1-19.3.1.x86_64",
                "product": {
                  "name": "openssh-openssl1-0:6.6p1-19.3.1.x86_64",
                  "product_id": "openssh-openssl1-0:6.6p1-19.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1@6.6p1-19.3.1?arch=x86_64\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64",
                "product": {
                  "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64",
                  "product_id": "openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-openssl1-helpers@6.6p1-19.3.1?arch=x86_64\u0026upstream=openssh-openssl1-0:6.6p1-19.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11-SECURITY",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11-SECURITY",
                  "product_id": "SUSE Linux Enterprise Server 11-SECURITY",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:security"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-0:6.6p1-19.3.1.i586 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586"
        },
        "product_reference": "openssh-openssl1-0:6.6p1-19.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-0:6.6p1-19.3.1.ia64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64"
        },
        "product_reference": "openssh-openssl1-0:6.6p1-19.3.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-0:6.6p1-19.3.1.ppc64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64"
        },
        "product_reference": "openssh-openssl1-0:6.6p1-19.3.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-0:6.6p1-19.3.1.s390x as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x"
        },
        "product_reference": "openssh-openssl1-0:6.6p1-19.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-0:6.6p1-19.3.1.x86_64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64"
        },
        "product_reference": "openssh-openssl1-0:6.6p1-19.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.i586 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586"
        },
        "product_reference": "openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64"
        },
        "product_reference": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64"
        },
        "product_reference": "openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x"
        },
        "product_reference": "openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
        },
        "product_reference": "openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-1483",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2008-1483"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2008-1483",
          "url": "https://www.suse.com/security/cve/CVE-2008-1483"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1069509 for CVE-2008-1483",
          "url": "https://bugzilla.suse.com/1069509"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 373527 for CVE-2008-1483",
          "url": "https://bugzilla.suse.com/373527"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 585630 for CVE-2008-1483",
          "url": "https://bugzilla.suse.com/585630"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 647633 for CVE-2008-1483",
          "url": "https://bugzilla.suse.com/647633"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 706386 for CVE-2008-1483",
          "url": "https://bugzilla.suse.com/706386"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-09-14T14:06:53Z",
          "details": "important"
        }
      ],
      "title": "CVE-2008-1483"
    },
    {
      "cve": "CVE-2016-10012",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10012"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10012",
          "url": "https://www.suse.com/security/cve/CVE-2016-10012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1006166 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1006166"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1016336 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1016336"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1016369 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1016369"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1016370 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1016370"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017870 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1017870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1026634 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1026634"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1035742 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1035742"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073044 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1073044"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1092582 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1092582"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2016-10012",
          "url": "https://bugzilla.suse.com/1138392"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-09-14T14:06:53Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10012"
    },
    {
      "cve": "CVE-2016-10708",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10708"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10708",
          "url": "https://www.suse.com/security/cve/CVE-2016-10708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1076957 for CVE-2016-10708",
          "url": "https://bugzilla.suse.com/1076957"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106726 for CVE-2016-10708",
          "url": "https://bugzilla.suse.com/1106726"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2016-10708",
          "url": "https://bugzilla.suse.com/1138392"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-09-14T14:06:53Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10708"
    },
    {
      "cve": "CVE-2017-15906",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-15906"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-15906",
          "url": "https://www.suse.com/security/cve/CVE-2017-15906"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1064285 for CVE-2017-15906",
          "url": "https://bugzilla.suse.com/1064285"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1065000 for CVE-2017-15906",
          "url": "https://bugzilla.suse.com/1065000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074115 for CVE-2017-15906",
          "url": "https://bugzilla.suse.com/1074115"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1079488 for CVE-2017-15906",
          "url": "https://bugzilla.suse.com/1079488"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1090163 for CVE-2017-15906",
          "url": "https://bugzilla.suse.com/1090163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1099316 for CVE-2017-15906",
          "url": "https://bugzilla.suse.com/1099316"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2017-15906",
          "url": "https://bugzilla.suse.com/1138392"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-0:6.6p1-19.3.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-0:6.6p1-19.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-09-14T14:06:53Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-15906"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.