CVE-2018-5390 (GCVE-0-2018-5390)

Vulnerability from cvelistv5 – Published: 2018-08-06 20:00 – Updated: 2024-08-05 05:33

Title

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

Summary

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-400

Assigner

certcc

References

42 references

URL	Tags
https://access.redhat.com/errata/RHSA-2018:2785	vendor-advisoryx_refsource_REDHAT
https://www.kb.cert.org/vuls/id/962459	third-party-advisoryx_refsource_CERT-VN
https://usn.ubuntu.com/3741-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2776	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2933	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2403	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2395	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3763-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2384	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3741-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2402	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3742-2/	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id/1041434	vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3732-2/	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/104976	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://www.securitytracker.com/id/1041424	vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3742-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2924	vendor-advisoryx_refsource_REDHAT
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
https://access.redhat.com/errata/RHSA-2018:2789	vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4266	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:2645	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3732-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2791	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2790	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2019/06/28/2	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/07/06/3	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/07/06/4	mailing-listx_refsource_MLIST
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://www.oracle.com/technetwork/security-advis…	x_refsource_CONFIRM
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-2018081…	x_refsource_CONFIRM
http://www.arubanetworks.com/assets/alert/ARUBA-P…	x_refsource_CONFIRM
https://www.synology.com/support/security/Synolog…	x_refsource_CONFIRM
https://support.f5.com/csp/article/K95343321	x_refsource_CONFIRM
https://www.a10networks.com/support/security-advi…	x_refsource_CONFIRM
https://git.kernel.org/pub/scm/linux/kernel/git/d…	x_refsource_CONFIRM
https://support.f5.com/csp/article/K95343321?utm_…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Linux	Linux Kernel	Affected: 4.9 , < 4.9* (custom)

Date Public

2018-07-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:33:44.409Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:2785",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2785"
          },
          {
            "name": "VU#962459",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/962459"
          },
          {
            "name": "USN-3741-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-2/"
          },
          {
            "name": "RHSA-2018:2776",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2776"
          },
          {
            "name": "RHSA-2018:2933",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2933"
          },
          {
            "name": "RHSA-2018:2403",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2403"
          },
          {
            "name": "RHSA-2018:2395",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2395"
          },
          {
            "name": "USN-3763-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3763-1/"
          },
          {
            "name": "RHSA-2018:2384",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2384"
          },
          {
            "name": "USN-3741-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-1/"
          },
          {
            "name": "RHSA-2018:2402",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2402"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3742-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-2/"
          },
          {
            "name": "1041434",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041434"
          },
          {
            "name": "USN-3732-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3732-2/"
          },
          {
            "name": "104976",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104976"
          },
          {
            "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
          },
          {
            "name": "1041424",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041424"
          },
          {
            "name": "USN-3742-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-1/"
          },
          {
            "name": "RHSA-2018:2924",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2924"
          },
          {
            "name": "20180824 Linux and FreeBSD Kernels TCP Reassembly Denial of Service Vulnerabilities Affecting Cisco Products: August 2018",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp"
          },
          {
            "name": "RHSA-2018:2789",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2789"
          },
          {
            "name": "DSA-4266",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4266"
          },
          {
            "name": "RHSA-2018:2645",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2645"
          },
          {
            "name": "USN-3732-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3732-1/"
          },
          {
            "name": "RHSA-2018:2791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2791"
          },
          {
            "name": "RHSA-2018:2790",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2790"
          },
          {
            "name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
          },
          {
            "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
          },
          {
            "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180815-0003/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/support/security/Synology_SA_18_41"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K95343321"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4.9*",
              "status": "affected",
              "version": "4.9",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-07-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:22:59.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "RHSA-2018:2785",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2785"
        },
        {
          "name": "VU#962459",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/962459"
        },
        {
          "name": "USN-3741-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-2/"
        },
        {
          "name": "RHSA-2018:2776",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2776"
        },
        {
          "name": "RHSA-2018:2933",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2933"
        },
        {
          "name": "RHSA-2018:2403",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2403"
        },
        {
          "name": "RHSA-2018:2395",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2395"
        },
        {
          "name": "USN-3763-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3763-1/"
        },
        {
          "name": "RHSA-2018:2384",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2384"
        },
        {
          "name": "USN-3741-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-1/"
        },
        {
          "name": "RHSA-2018:2402",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2402"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3742-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-2/"
        },
        {
          "name": "1041434",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041434"
        },
        {
          "name": "USN-3732-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3732-2/"
        },
        {
          "name": "104976",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104976"
        },
        {
          "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
        },
        {
          "name": "1041424",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041424"
        },
        {
          "name": "USN-3742-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-1/"
        },
        {
          "name": "RHSA-2018:2924",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2924"
        },
        {
          "name": "20180824 Linux and FreeBSD Kernels TCP Reassembly Denial of Service Vulnerabilities Affecting Cisco Products: August 2018",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp"
        },
        {
          "name": "RHSA-2018:2789",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2789"
        },
        {
          "name": "DSA-4266",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4266"
        },
        {
          "name": "RHSA-2018:2645",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2645"
        },
        {
          "name": "USN-3732-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3732-1/"
        },
        {
          "name": "RHSA-2018:2791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2791"
        },
        {
          "name": "RHSA-2018:2790",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2790"
        },
        {
          "name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
        },
        {
          "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
        },
        {
          "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180815-0003/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/support/security/Synology_SA_18_41"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K95343321"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2018-5390",
          "STATE": "PUBLIC",
          "TITLE": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Linux Kernel",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003e=",
                            "version_affected": "\u003e=",
                            "version_name": "4.9",
                            "version_value": "4.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Linux"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-400"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:2785",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2785"
            },
            {
              "name": "VU#962459",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/962459"
            },
            {
              "name": "USN-3741-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-2/"
            },
            {
              "name": "RHSA-2018:2776",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2776"
            },
            {
              "name": "RHSA-2018:2933",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2933"
            },
            {
              "name": "RHSA-2018:2403",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2403"
            },
            {
              "name": "RHSA-2018:2395",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2395"
            },
            {
              "name": "USN-3763-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3763-1/"
            },
            {
              "name": "RHSA-2018:2384",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2384"
            },
            {
              "name": "USN-3741-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-1/"
            },
            {
              "name": "RHSA-2018:2402",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2402"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "USN-3742-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-2/"
            },
            {
              "name": "1041434",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041434"
            },
            {
              "name": "USN-3732-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3732-2/"
            },
            {
              "name": "104976",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104976"
            },
            {
              "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
            },
            {
              "name": "1041424",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041424"
            },
            {
              "name": "USN-3742-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-1/"
            },
            {
              "name": "RHSA-2018:2924",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2924"
            },
            {
              "name": "20180824 Linux and FreeBSD Kernels TCP Reassembly Denial of Service Vulnerabilities Affecting Cisco Products: August 2018",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp"
            },
            {
              "name": "RHSA-2018:2789",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2789"
            },
            {
              "name": "DSA-4266",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4266"
            },
            {
              "name": "RHSA-2018:2645",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2645"
            },
            {
              "name": "USN-3732-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3732-1/"
            },
            {
              "name": "RHSA-2018:2791",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2791"
            },
            {
              "name": "RHSA-2018:2790",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2790"
            },
            {
              "name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
            },
            {
              "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
            },
            {
              "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
              "refsource": "CONFIRM",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180815-0003/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180815-0003/"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_18_41",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/support/security/Synology_SA_18_41"
            },
            {
              "name": "https://support.f5.com/csp/article/K95343321",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K95343321"
            },
            {
              "name": "https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack",
              "refsource": "CONFIRM",
              "url": "https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e"
            },
            {
              "name": "https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2018-5390",
    "datePublished": "2018-08-06T20:00:00.000Z",
    "dateReserved": "2018-01-12T00:00:00.000Z",
    "dateUpdated": "2024-08-05T05:33:44.409Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2018-5390",
      "date": "2026-07-28",
      "epss": "0.7372",
      "percentile": "0.99418"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6BBD7A51-0590-4DDF-8249-5AFA8D645CB6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33C068A4-3780-4EAB-A937-6082DF847564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"51EF4996-72F4-4FA4-814F-F5991E7A8318\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AF83BB87-B203-48F9-9D06-48A5FE399050\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16E6D998-B41D-4B49-9E00-8336D2E40A4A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1C8D871B-AEA1-4407-AEE3-47EC782250FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"98381E61-F082-4302-B51F-5648884F998B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D99A687E-EAE6-417E-A88E-D0082BC194CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2EDC8561-5E0A-4692-BB71-C88ED7A1229F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6C81647C-9A53-481D-A54C-36770A093F90\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"44B067C7-735E-43C9-9188-7E1522A02491\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A8442C20-41F9-47FD-9A12-E724D3A31FD7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"13E02156-E748-4820-B76F-7074793837E1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6755B6AD-0422-467B-8115-34A60B1D1A40\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D5F7E11E-FB34-4467-8919-2B6BEAABF665\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.9\", \"versionEndExcluding\": \"4.18\", \"matchCriteriaId\": \"D6E2A48A-1AFB-4878-AE78-18613DE9334F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:4.18:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"0758920B-F8FC-44AB-92E3-CB0B0A5EDA76\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:4.18:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"81EBA79F-0ABF-4213-8BEF-9A927F9E24D4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:4.18:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"364BE028-0C54-4254-9261-59D97C0EDC1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:4.18:rc4:*:*:*:*:*:*\", \"matchCriteriaId\": \"C5CD0194-46B1-4CCC-9829-8ED014B77660\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:4.18:rc5:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB2B91AF-ACE1-4F6F-B2D0-9D4B7D8D20CE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:4.18:rc6:*:*:*:*:*:*\", \"matchCriteriaId\": \"30FBD992-DD41-441E-A6C7-D39DAC45DA34\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*\", \"matchCriteriaId\": \"8D305F7A-D159-4716-AB26-5E38BB5CD991\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B5A6F2F3-4894-4392-8296-3B8DD2679084\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:aruba_airwave_amp:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"8.2.7.1\", \"matchCriteriaId\": \"4A3E8408-DE01-4B3C-9FDF-A51261C524BD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.6.0\", \"versionEndIncluding\": \"6.6.9\", \"matchCriteriaId\": \"0E49DB15-06E7-4709-933E-890A7E65A240\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7.0\", \"versionEndIncluding\": \"6.7.5\", \"matchCriteriaId\": \"A29A8C01-7E4E-4662-B4F3-07DEF07CC600\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"41E6AF24-0676-4B70-A289-7B81321194DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"6BB42D3A-71EE-4367-9F65-86404D74E59D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"1331467F-B278-485E-AD91-7D0643C2F3DB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_access_policy_manager:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"44E8F4B6-ACF1-4F2C-A2A4-DF7382CCE628\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"195704A8-4911-4A61-8369-711D403052F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"E5011C2D-FBB5-4117-BB97-11DE70117345\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"E866C4E5-D739-4352-9B6D-9753B4C78A24\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D1FDA72E-991D-4451-9C8E-E738F4D12728\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"DDE5A2D0-C268-4D2D-A001-AEC17E92B1DA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"79344F94-2CB8-4F08-9373-61614A38476C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"42D16634-442B-4674-B11E-6748D28764BD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_analytics:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"622C877B-760A-4C50-9FDF-998C010B864E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"7FA10863-C4C8-4658-8EEA-BC71B3522F36\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"E5D00EED-F95D-4458-BDC4-3390DE85348B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"1D91EC11-DD9A-434B-9EB4-14AA0E977D8D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"292EC144-CBA2-4275-9F70-4ED65A505B39\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"E6EC3436-7FAE-4311-8103-7ADBAF40E1C1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"397AC4A5-B67C-483B-84F7-8CB294BB460C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"E697E4FD-1882-4BF8-9B9F-FB7DFD19497B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_application_security_manager:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80509490-50DA-42F8-8A4A-A6F6B95649BA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"18A39E28-E7BB-47A3-988B-4EBF070D3538\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"1466F808-2596-4028-8884-27EDD5CACB47\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"394DF290-9328-4FAD-B04E-61F62B916148\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_domain_name_system:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D7BBEC67-BD2E-49D5-8294-977D975D98D0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1.\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"D931BC21-AF80-400C-A7E9-2C4AB19D748A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"6A11E433-943D-4D92-B45E-3FA268094278\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"96AA67E0-3471-4699-87A7-E47DD8E313B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_edge_gateway:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB76D898-4C7C-40E9-8539-E2A1BC7A5A66\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"8C3C9586-D4ED-4486-9C1F-B357F34F8A84\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"D4C3D6F5-D94D-46A3-991C-A11275B59F8E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"6114B091-1612-4EA2-81D4-2E5455A345F7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_fraud_protection_service:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"86D68F26-EF89-4016-BD3A-637951752AAA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"9F002114-483A-462C-B0BD-4E1591009935\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"57CCB85A-6F90-4DB7-B0F8-AE5250E1DCFE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"36F60067-2623-42F9-8B4F-C24F3268DDB9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_global_traffic_manager:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ADAD6E9A-F8B5-4B2D-B687-AEAB518B8F19\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"6DE3443E-9D07-4A82-B110-02ADDA9FDEF3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"60189636-02D6-44CA-BE2A-7777E3C409CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"68E2840B-96F4-4437-91D1-4AFE99E54D6A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_link_controller:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"23E592A7-B530-4932-A81D-D1B9ABD64047\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"5D08BA8F-4949-47EC-8EEF-312DC70043B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.0.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"47D07AA7-1E0E-4FC3-B8BF-05729619B0AA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*\", \"versionStartExcluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"A197CF35-47EE-4DAE-BC51-90663870B9B9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_local_traffic_manager:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8E734E1C-A92F-4394-8F33-4429161BE47C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"4C9A0A9D-40AF-46DC-B577-DA73B4C2970B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"5AD75094-3248-4D37-969E-75272F6F31D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"15F4D416-10F4-4C08-A25D-0795F7FE0FBE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7CF10213-FBE4-47A5-8EF2-B45BF15BEB6D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.5.1\", \"versionEndIncluding\": \"11.6.3\", \"matchCriteriaId\": \"A36B6B7D-3900-43D4-B241-E58A1377B4DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1.0\", \"versionEndIncluding\": \"12.1.3\", \"matchCriteriaId\": \"E7860523-E8B3-4BEE-853A-6F0B5BCDDA5A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0.0\", \"versionEndIncluding\": \"13.1.1\", \"matchCriteriaId\": \"D6944128-3A30-4835-A125-3EA7571D7DC0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:big-ip_webaccelerator:14.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A5A85C15-B821-4992-9B06-45767E7467D2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:traffix_systems_signaling_delivery_controller:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.0.0\", \"versionEndIncluding\": \"5.1.0\", \"matchCriteriaId\": \"A87510FE-775A-44FB-9792-074CD5DE5C38\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:f5:traffix_systems_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B5497D9-9022-4788-87DB-6C4B4116509A\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:a10networks:advanced_core_operating_system:3.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB85F4D0-A104-4954-8D73-B9980C8E93E0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:a10networks:advanced_core_operating_system:3.2.2:p5:*:*:*:*:*:*\", \"matchCriteriaId\": \"CECB4DA3-3842-4102-8451-43EC00CBAEA8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3D286AC5-DB3E-4FAE-8441-A4D98B1F1160\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.0:p11:*:*:*:*:*:*\", \"matchCriteriaId\": \"8DE427D5-6E9A-4AC3-830D-7D235DE97389\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.1:p8:*:*:*:*:*:*\", \"matchCriteriaId\": \"F32591D5-D7F6-4C45-B1B5-1D1F8C649DF0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"032B2E4E-381E-4662-A6CF-8FA517233681\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.2:p4:*:*:*:*:*:*\", \"matchCriteriaId\": \"BA708DD0-8A88-4B2B-9B57-A08491DE4696\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0013CA3E-0E73-45EA-B2E9-7EA038BAB336\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.4:p1:*:*:*:*:*:*\", \"matchCriteriaId\": \"F993C993-D118-45A3-9F95-382B54E25439\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:collaboration_meeting_rooms:1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7E53CEDB-F536-4DA0-917C-C220A3102B90\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:digital_network_architecture_center:1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"27A026D0-AA0D-417A-A06B-8785E5FFCBC9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:expressway:x8.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"31DF55CF-FEDE-43DE-8F55-3264DB7CDD71\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:expressway:x8.10.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A4C837B-4648-4764-B190-36381EE7E664\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:expressway:x8.10.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F044DA47-D8FA-4EF9-B28C-C69D0DE8C3DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:expressway:x8.10.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E600BCEC-2466-4348-ACE3-955469AA1C9E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:expressway:x8.10.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AB8DD876-7E51-43A9-8944-B4DEE9E9EDD3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:expressway:x8.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"431A3000-D903-4B57-9B54-CC650105B044\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:expressway_series:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E8E7428A-D2A5-4B77-8562-F75BB8C72976\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:meeting_management:1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"84E53549-337C-423F-AB34-F2559C1F225C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:meeting_management:1.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EABDA6F4-99E7-4354-9760-E9891B47DC8A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_assurance_engine:2.1\\\\(1a\\\\):*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD40D143-B4B4-4C2A-8D9E-D928459FC59E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:threat_grid-cloud:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B2B5B87A-CECF-48BF-833E-6E4A6DF647CC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:webex_hybrid_data_security:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F6A108A5-ADB1-4328-B3C0-9C3CC2CD1346\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:webex_video_mesh:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE0F9723-F9BD-422D-8414-040C01C9C0D0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B534882-60A5-4098-A439-A47CBC546E53\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB1C3395-1865-4436-81E0-3821B5BB99D2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"86ACAFA3-7F76-428A-A6EE-87284FB30B01\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8908328C-FC17-4BDC-B369-36942225DFAD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"988EDFD9-4652-4460-BE48-62219B8A0A6D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD9DD18A-43B9-4B43-AF9F-236D42651E46\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:telepresence_video_communication_server:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"177FA398-F812-4E8D-99A3-3F7E0F690CE6\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A8F173C-2D38-42B2-B86F-72B53A96D05D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"27E03126-0FF6-4D4E-8766-A4F0B20741AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F24CB2EC-A79E-4C56-8F03-86D53A9B28A3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C4F2333B-BE03-4D6C-AA16-1E3EB170496E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B199BF45-F9EF-49A0-B2D5-9B9FA6AA1208\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:telepresence_conductor:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2C65475E-2641-404B-8316-6B6A5029617D\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.\"}, {\"lang\": \"es\", \"value\": \"El kernel de Linux en versiones 4.9 y siguientes pueden forzarse a realizar llamadas muy caras a tcp_collapse_ofo_queue() y tcp_prune_ofo_queue() para cada paquete entrante, lo que puede conducir a una denegaci\\u00f3n de servicio.\"}]",
      "id": "CVE-2018-5390",
      "lastModified": "2024-11-21T04:08:43.610",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:C\", \"baseScore\": 7.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2018-08-06T20:29:01.570",
      "references": "[{\"url\": \"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2019/06/28/2\", \"source\": \"cret@cert.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2019/07/06/3\", \"source\": \"cret@cert.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2019/07/06/4\", \"source\": \"cret@cert.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/104976\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1041424\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1041434\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2384\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2395\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2402\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2403\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2645\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2776\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2785\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2789\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2790\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2791\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2924\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2933\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2948\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e\", \"source\": \"cret@cert.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20180815-0003/\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.f5.com/csp/article/K95343321\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp%3Butm_medium=RSS\", \"source\": \"cret@cert.org\"}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3732-1/\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3732-2/\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3741-1/\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3741-2/\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3742-1/\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3742-2/\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3763-1/\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack\", \"source\": \"cret@cert.org\", \"tags\": [\"Mitigation\", \"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2018/dsa-4266\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.kb.cert.org/vuls/id/962459\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujul2020.html\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\", \"source\": \"cret@cert.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.synology.com/support/security/Synology_SA_18_41\", \"source\": \"cret@cert.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2019/06/28/2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2019/07/06/3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2019/07/06/4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/104976\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1041424\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1041434\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2384\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2395\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2402\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2403\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2645\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2776\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2785\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2789\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2790\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2791\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2924\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2933\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2948\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20180815-0003/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.f5.com/csp/article/K95343321\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp%3Butm_medium=RSS\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3732-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3732-2/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3741-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3741-2/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3742-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3742-2/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3763-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mitigation\", \"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2018/dsa-4266\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.kb.cert.org/vuls/id/962459\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujul2020.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.synology.com/support/security/Synology_SA_18_41\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
      "sourceIdentifier": "cret@cert.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"cret@cert.org\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-400\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-400\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2018-5390\",\"sourceIdentifier\":\"cret@cert.org\",\"published\":\"2018-08-06T20:29:01.570\",\"lastModified\":\"2024-11-21T04:08:43.610\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.\"},{\"lang\":\"es\",\"value\":\"El kernel de Linux en versiones 4.9 y siguientes pueden forzarse a realizar llamadas muy caras a tcp_collapse_ofo_queue() y tcp_prune_ofo_queue() para cada paquete entrante, lo que puede conducir a una denegaci\u00f3n de servicio.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"cret@cert.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BBD7A51-0590-4DDF-8249-5AFA8D645CB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF83BB87-B203-48F9-9D06-48A5FE399050\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16E6D998-B41D-4B49-9E00-8336D2E40A4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C8D871B-AEA1-4407-AEE3-47EC782250FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98381E61-F082-4302-B51F-5648884F998B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D99A687E-EAE6-417E-A88E-D0082BC194CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EDC8561-5E0A-4692-BB71-C88ED7A1229F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C81647C-9A53-481D-A54C-36770A093F90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44B067C7-735E-43C9-9188-7E1522A02491\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8442C20-41F9-47FD-9A12-E724D3A31FD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13E02156-E748-4820-B76F-7074793837E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6755B6AD-0422-467B-8115-34A60B1D1A40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5F7E11E-FB34-4467-8919-2B6BEAABF665\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.9\",\"versionEndExcluding\":\"4.18\",\"matchCriteriaId\":\"D6E2A48A-1AFB-4878-AE78-18613DE9334F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:4.18:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0758920B-F8FC-44AB-92E3-CB0B0A5EDA76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:4.18:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"81EBA79F-0ABF-4213-8BEF-9A927F9E24D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:4.18:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"364BE028-0C54-4254-9261-59D97C0EDC1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:4.18:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5CD0194-46B1-4CCC-9829-8ED014B77660\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:4.18:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB2B91AF-ACE1-4F6F-B2D0-9D4B7D8D20CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:4.18:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"30FBD992-DD41-441E-A6C7-D39DAC45DA34\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"8D305F7A-D159-4716-AB26-5E38BB5CD991\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:aruba_airwave_amp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.2.7.1\",\"matchCriteriaId\":\"4A3E8408-DE01-4B3C-9FDF-A51261C524BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.0\",\"versionEndIncluding\":\"6.6.9\",\"matchCriteriaId\":\"0E49DB15-06E7-4709-933E-890A7E65A240\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7.0\",\"versionEndIncluding\":\"6.7.5\",\"matchCriteriaId\":\"A29A8C01-7E4E-4662-B4F3-07DEF07CC600\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"41E6AF24-0676-4B70-A289-7B81321194DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"6BB42D3A-71EE-4367-9F65-86404D74E59D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"1331467F-B278-485E-AD91-7D0643C2F3DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_access_policy_manager:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44E8F4B6-ACF1-4F2C-A2A4-DF7382CCE628\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"195704A8-4911-4A61-8369-711D403052F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"E5011C2D-FBB5-4117-BB97-11DE70117345\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"E866C4E5-D739-4352-9B6D-9753B4C78A24\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1FDA72E-991D-4451-9C8E-E738F4D12728\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"DDE5A2D0-C268-4D2D-A001-AEC17E92B1DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"79344F94-2CB8-4F08-9373-61614A38476C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"42D16634-442B-4674-B11E-6748D28764BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_analytics:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"622C877B-760A-4C50-9FDF-998C010B864E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"7FA10863-C4C8-4658-8EEA-BC71B3522F36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"E5D00EED-F95D-4458-BDC4-3390DE85348B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"1D91EC11-DD9A-434B-9EB4-14AA0E977D8D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"292EC144-CBA2-4275-9F70-4ED65A505B39\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"E6EC3436-7FAE-4311-8103-7ADBAF40E1C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"397AC4A5-B67C-483B-84F7-8CB294BB460C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"E697E4FD-1882-4BF8-9B9F-FB7DFD19497B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_application_security_manager:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80509490-50DA-42F8-8A4A-A6F6B95649BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"18A39E28-E7BB-47A3-988B-4EBF070D3538\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"1466F808-2596-4028-8884-27EDD5CACB47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"394DF290-9328-4FAD-B04E-61F62B916148\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_domain_name_system:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7BBEC67-BD2E-49D5-8294-977D975D98D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1.\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"D931BC21-AF80-400C-A7E9-2C4AB19D748A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"6A11E433-943D-4D92-B45E-3FA268094278\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"96AA67E0-3471-4699-87A7-E47DD8E313B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_edge_gateway:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB76D898-4C7C-40E9-8539-E2A1BC7A5A66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"8C3C9586-D4ED-4486-9C1F-B357F34F8A84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"D4C3D6F5-D94D-46A3-991C-A11275B59F8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"6114B091-1612-4EA2-81D4-2E5455A345F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_fraud_protection_service:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86D68F26-EF89-4016-BD3A-637951752AAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"9F002114-483A-462C-B0BD-4E1591009935\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"57CCB85A-6F90-4DB7-B0F8-AE5250E1DCFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"36F60067-2623-42F9-8B4F-C24F3268DDB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_global_traffic_manager:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ADAD6E9A-F8B5-4B2D-B687-AEAB518B8F19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"6DE3443E-9D07-4A82-B110-02ADDA9FDEF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"60189636-02D6-44CA-BE2A-7777E3C409CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"68E2840B-96F4-4437-91D1-4AFE99E54D6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_link_controller:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23E592A7-B530-4932-A81D-D1B9ABD64047\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"5D08BA8F-4949-47EC-8EEF-312DC70043B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.0.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"47D07AA7-1E0E-4FC3-B8BF-05729619B0AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*\",\"versionStartExcluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"A197CF35-47EE-4DAE-BC51-90663870B9B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_local_traffic_manager:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E734E1C-A92F-4394-8F33-4429161BE47C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"4C9A0A9D-40AF-46DC-B577-DA73B4C2970B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"5AD75094-3248-4D37-969E-75272F6F31D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"15F4D416-10F4-4C08-A25D-0795F7FE0FBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CF10213-FBE4-47A5-8EF2-B45BF15BEB6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5.1\",\"versionEndIncluding\":\"11.6.3\",\"matchCriteriaId\":\"A36B6B7D-3900-43D4-B241-E58A1377B4DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndIncluding\":\"12.1.3\",\"matchCriteriaId\":\"E7860523-E8B3-4BEE-853A-6F0B5BCDDA5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndIncluding\":\"13.1.1\",\"matchCriteriaId\":\"D6944128-3A30-4835-A125-3EA7571D7DC0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:big-ip_webaccelerator:14.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5A85C15-B821-4992-9B06-45767E7467D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:traffix_systems_signaling_delivery_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.0.0\",\"versionEndIncluding\":\"5.1.0\",\"matchCriteriaId\":\"A87510FE-775A-44FB-9792-074CD5DE5C38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:traffix_systems_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B5497D9-9022-4788-87DB-6C4B4116509A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:a10networks:advanced_core_operating_system:3.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB85F4D0-A104-4954-8D73-B9980C8E93E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:a10networks:advanced_core_operating_system:3.2.2:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"CECB4DA3-3842-4102-8451-43EC00CBAEA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D286AC5-DB3E-4FAE-8441-A4D98B1F1160\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.0:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DE427D5-6E9A-4AC3-830D-7D235DE97389\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.1:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"F32591D5-D7F6-4C45-B1B5-1D1F8C649DF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"032B2E4E-381E-4662-A6CF-8FA517233681\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.2:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA708DD0-8A88-4B2B-9B57-A08491DE4696\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0013CA3E-0E73-45EA-B2E9-7EA038BAB336\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.4:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F993C993-D118-45A3-9F95-382B54E25439\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:collaboration_meeting_rooms:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E53CEDB-F536-4DA0-917C-C220A3102B90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:digital_network_architecture_center:1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27A026D0-AA0D-417A-A06B-8785E5FFCBC9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:expressway:x8.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31DF55CF-FEDE-43DE-8F55-3264DB7CDD71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:expressway:x8.10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A4C837B-4648-4764-B190-36381EE7E664\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:expressway:x8.10.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F044DA47-D8FA-4EF9-B28C-C69D0DE8C3DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:expressway:x8.10.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E600BCEC-2466-4348-ACE3-955469AA1C9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:expressway:x8.10.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB8DD876-7E51-43A9-8944-B4DEE9E9EDD3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:expressway:x8.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"431A3000-D903-4B57-9B54-CC650105B044\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:expressway_series:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8E7428A-D2A5-4B77-8562-F75BB8C72976\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:meeting_management:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84E53549-337C-423F-AB34-F2559C1F225C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:meeting_management:1.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EABDA6F4-99E7-4354-9760-E9891B47DC8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_assurance_engine:2.1\\\\(1a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD40D143-B4B4-4C2A-8D9E-D928459FC59E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:threat_grid-cloud:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2B5B87A-CECF-48BF-833E-6E4A6DF647CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:webex_hybrid_data_security:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6A108A5-ADB1-4328-B3C0-9C3CC2CD1346\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:webex_video_mesh:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE0F9723-F9BD-422D-8414-040C01C9C0D0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B534882-60A5-4098-A439-A47CBC546E53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB1C3395-1865-4436-81E0-3821B5BB99D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86ACAFA3-7F76-428A-A6EE-87284FB30B01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8908328C-FC17-4BDC-B369-36942225DFAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"988EDFD9-4652-4460-BE48-62219B8A0A6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD9DD18A-43B9-4B43-AF9F-236D42651E46\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:telepresence_video_communication_server:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"177FA398-F812-4E8D-99A3-3F7E0F690CE6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A8F173C-2D38-42B2-B86F-72B53A96D05D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27E03126-0FF6-4D4E-8766-A4F0B20741AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F24CB2EC-A79E-4C56-8F03-86D53A9B28A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4F2333B-BE03-4D6C-AA16-1E3EB170496E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B199BF45-F9EF-49A0-B2D5-9B9FA6AA1208\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:telepresence_conductor:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C65475E-2641-404B-8316-6B6A5029617D\"}]}]}],\"references\":[{\"url\":\"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2019/06/28/2\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2019/07/06/3\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2019/07/06/4\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/104976\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1041424\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1041434\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2384\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2395\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2402\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2403\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2645\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2776\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2785\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2789\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2790\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2791\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2924\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2933\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2948\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e\",\"source\":\"cret@cert.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180815-0003/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K95343321\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp%3Butm_medium=RSS\",\"source\":\"cret@cert.org\"},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3732-1/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3732-2/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3741-1/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3741-2/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3742-1/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3742-2/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3763-1/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack\",\"source\":\"cret@cert.org\",\"tags\":[\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2018/dsa-4266\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.kb.cert.org/vuls/id/962459\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.synology.com/support/security/Synology_SA_18_41\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2019/06/28/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2019/07/06/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2019/07/06/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/104976\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1041424\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1041434\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2384\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2395\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2402\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2403\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2645\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2776\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2785\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2789\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2790\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2791\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2924\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2933\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2948\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180815-0003/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K95343321\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp%3Butm_medium=RSS\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3732-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3732-2/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3741-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3741-2/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3742-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3742-2/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3763-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2018/dsa-4266\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.kb.cert.org/vuls/id/962459\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.synology.com/support/security/Synology_SA_18_41\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-06-28T06:15:47+00:00",
      "cve": "CVE-2018-5390",
      "id": "CVE-2018-5390",
      "initial_release_date": "2018-08-06T00:00:00+00:00",
      "product_status:fixed": "945",
      "product_status:known_affected": "1",
      "product_status:known_not_affected": "32",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: TCP segments with random offsets allow a remote denial of service (SegmentSmack)",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2018/cve-2018-5390.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-26T00:21:53Z",
      "cve": "CVE-2018-5390",
      "id": "CVE-2018-5390",
      "initial_release_date": "2023-02-15T04:31:38Z",
      "product_status:known_affected": "173",
      "product_status:known_not_affected": "236",
      "product_status:recommended": "867",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2018-5390",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2018-5390.json",
      "version": "21"
    }
  }
}

SUSE-SU-2019:1767-1

Vulnerability from csaf_suse - Published: 2019-07-08 12:32 - Updated: 2019-07-08 12:32

Summary

Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2)

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2)

Description of the patch: This update for the Linux Kernel 4.4.121-92_114 fixes several issues. The following security issues were fixed: - CVE-2019-11487: The Linux kernel allowed page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests (bsc#1133191). - CVE-2018-5390: Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (bsc#1102682).

Patchnames: SUSE-2019-1767,SUSE-SLE-SAP-12-SP1-2019-1767,SUSE-SLE-SAP-12-SP2-2019-1766,SUSE-SLE-SERVER-12-SP1-2019-1767,SUSE-SLE-SERVER-12-SP2-2019-1766

CVE-2018-5390

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-11487

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

18 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1102682	self
https://bugzilla.suse.com/1133191	self
https://www.suse.com/security/cve/CVE-2018-5390/	self
https://www.suse.com/security/cve/CVE-2019-11487/	self
https://www.suse.com/security/cve/CVE-2018-5390	external
https://bugzilla.suse.com/1087082	external
https://bugzilla.suse.com/1102340	external
https://bugzilla.suse.com/1102682	external
https://bugzilla.suse.com/1103097	external
https://bugzilla.suse.com/1103098	external
https://bugzilla.suse.com/1156434	external
https://www.suse.com/security/cve/CVE-2019-11487	external
https://bugzilla.suse.com/1133190	external
https://bugzilla.suse.com/1133191	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2)",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for the Linux Kernel 4.4.121-92_114 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2019-11487: The Linux kernel allowed page-\u003e_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests (bsc#1133191).\n- CVE-2018-5390: Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (bsc#1102682).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-1767,SUSE-SLE-SAP-12-SP1-2019-1767,SUSE-SLE-SAP-12-SP2-2019-1766,SUSE-SLE-SERVER-12-SP1-2019-1767,SUSE-SLE-SERVER-12-SP2-2019-1766",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1767-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:1767-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191767-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:1767-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-July/005666.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1102682",
        "url": "https://bugzilla.suse.com/1102682"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133191",
        "url": "https://bugzilla.suse.com/1133191"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5390 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5390/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11487 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11487/"
      }
    ],
    "title": "Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2)",
    "tracking": {
      "current_release_date": "2019-07-08T12:32:02Z",
      "generator": {
        "date": "2019-07-08T12:32:02Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:1767-1",
      "initial_release_date": "2019-07-08T12:32:02Z",
      "revision_history": [
        {
          "date": "2019-07-08T12:32:02Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
                "product": {
                  "name": "kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
                  "product_id": "kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
                "product": {
                  "name": "kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
                  "product_id": "kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
                "product": {
                  "name": "kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
                  "product_id": "kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
                "product": {
                  "name": "kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
                  "product_id": "kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le"
        },
        "product_reference": "kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le"
        },
        "product_reference": "kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-5390",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5390"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5390",
          "url": "https://www.suse.com/security/cve/CVE-2018-5390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087082 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1087082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102340 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102682 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102682"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103097 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103097"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103098 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103098"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156434 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1156434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-08T12:32:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5390"
    },
    {
      "cve": "CVE-2019-11487",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11487"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel before 5.1-rc5 allows page-\u003e_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11487",
          "url": "https://www.suse.com/security/cve/CVE-2019-11487"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133190 for CVE-2019-11487",
          "url": "https://bugzilla.suse.com/1133190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133191 for CVE-2019-11487",
          "url": "https://bugzilla.suse.com/1133191"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_115-xen-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-2-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-08T12:32:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11487"
    }
  ]
}

SUSE-SU-2019:1870-1

Vulnerability from csaf_suse - Published: 2019-07-17 12:57 - Updated: 2019-07-17 12:57

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5390 aka 'SegmentSmack': A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the worst case scenario during IP and/or TCP fragment reassembly (bsc#1102340) - CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name was not called before register_netdevice. This allowed local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. (bnc#1135603) - CVE-2018-20836: A race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, could have lead to a use-after-free. (bnc#1134395) - CVE-2019-12614: An unchecked kstrdup might have allowed an attacker to cause denial of service (a NULL pointer dereference and system crash). (bnc#1137194) - CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may have returned NULL. If the caller did not check for this, it would trigger a NULL pointer dereference. This would cause denial of service. (bnc#1138293) - CVE-2019-12456: An issue in the MPT3COMMAND case in _ctl_ioctl_main() allowed local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc_number between two kernel reads of that value, aka a 'double fetch' vulnerability. (bsc#1136922) - CVE-2019-11487: An attacker could have triggered use-after-free via page reference count overflow on slow filesystems with at least of 140 GiB of RAM available. (bnc#1133190) The following non-security bugs were fixed: - fuse: Don't access pipe->buffers without pipe_lock() (Prerequisity for CVE-2019-11487, bsc#1133190). - fuse: call pipe_buf_release() under pipe lock (Prerequisity for CVE-2019-11487, bsc#1133190). - mm: /proc/pid/maps: Check permissions when opening proc pid maps (bsc#1130159). - pipe: add pipe_buf_get() helper (Prerequisity for CVE-2019-11487, bsc#1133190). - tcp: refine memory limit test in tcp_fragment() after CVE-2019-11478 fix (bsc#1139751). - x86/bugs: do not default to IBRS even on SKL (bsc#1112824).

Patchnames: SUSE-2019-1870,SUSE-SLE-Module-Public-Cloud-12-2019-1870,SUSE-SLE-SAP-12-SP1-2019-1870,SUSE-SLE-SERVER-12-SP1-2019-1870

CVE-2018-20836

6.2 (Medium)


                        
                          CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 36 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix

Threats

Impact low

CVE-2018-5390

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 36 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2018-7191

5.5 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 36 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-11487

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 36 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-12456

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 36 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-12614

6.2 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 36 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-12818

4.1 (Medium)


                        
                          CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 36 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64	—	Vendor Fix

Threats

Impact low

References

42 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1102340	self
https://bugzilla.suse.com/1112824	self
https://bugzilla.suse.com/1130159	self
https://bugzilla.suse.com/1133190	self
https://bugzilla.suse.com/1134395	self
https://bugzilla.suse.com/1135603	self
https://bugzilla.suse.com/1136922	self
https://bugzilla.suse.com/1137194	self
https://bugzilla.suse.com/1138293	self
https://bugzilla.suse.com/1139751	self
https://www.suse.com/security/cve/CVE-2018-20836/	self
https://www.suse.com/security/cve/CVE-2018-5390/	self
https://www.suse.com/security/cve/CVE-2018-7191/	self
https://www.suse.com/security/cve/CVE-2019-11487/	self
https://www.suse.com/security/cve/CVE-2019-12456/	self
https://www.suse.com/security/cve/CVE-2019-12614/	self
https://www.suse.com/security/cve/CVE-2019-12818/	self
https://www.suse.com/security/cve/CVE-2018-20836	external
https://bugzilla.suse.com/1134395	external
https://www.suse.com/security/cve/CVE-2018-5390	external
https://bugzilla.suse.com/1087082	external
https://bugzilla.suse.com/1102340	external
https://bugzilla.suse.com/1102682	external
https://bugzilla.suse.com/1103097	external
https://bugzilla.suse.com/1103098	external
https://bugzilla.suse.com/1156434	external
https://www.suse.com/security/cve/CVE-2018-7191	external
https://bugzilla.suse.com/1135603	external
https://www.suse.com/security/cve/CVE-2019-11487	external
https://bugzilla.suse.com/1133190	external
https://bugzilla.suse.com/1133191	external
https://www.suse.com/security/cve/CVE-2019-12456	external
https://bugzilla.suse.com/1136922	external
https://bugzilla.suse.com/1136993	external
https://www.suse.com/security/cve/CVE-2019-12614	external
https://bugzilla.suse.com/1137194	external
https://www.suse.com/security/cve/CVE-2019-12818	external
https://bugzilla.suse.com/1138293	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2018-5390 aka \u0027SegmentSmack\u0027: A remote attacker even with relatively low bandwidth could have caused lots of CPU usage\n  by triggering the worst case scenario during IP and/or TCP fragment reassembly (bsc#1102340)\n- CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name was not called before register_netdevice. This allowed local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. (bnc#1135603)\n- CVE-2018-20836: A race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, could have lead to a use-after-free. (bnc#1134395)\n- CVE-2019-12614: An unchecked kstrdup might have allowed an attacker to cause denial of service (a NULL pointer dereference and system crash). (bnc#1137194)\n- CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may have returned NULL. If the caller did not check for this, it would trigger a NULL pointer dereference. This would cause denial of service. (bnc#1138293)\n- CVE-2019-12456: An issue in the MPT3COMMAND case in _ctl_ioctl_main() allowed local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc_number between two kernel reads of that value, aka a \u0027double fetch\u0027 vulnerability. (bsc#1136922)\n- CVE-2019-11487: An attacker could have triggered use-after-free via page reference count overflow on slow filesystems with at least of 140 GiB of RAM available. (bnc#1133190)\n\nThe following non-security bugs were fixed:\n\n- fuse: Don\u0027t access pipe-\u003ebuffers without pipe_lock() (Prerequisity for CVE-2019-11487, bsc#1133190).\n- fuse: call pipe_buf_release() under pipe lock (Prerequisity for CVE-2019-11487, bsc#1133190).\n- mm: /proc/pid/maps: Check permissions when opening proc pid maps (bsc#1130159).\n- pipe: add pipe_buf_get() helper (Prerequisity for CVE-2019-11487, bsc#1133190).\n- tcp: refine memory limit test in tcp_fragment() after CVE-2019-11478 fix (bsc#1139751).\n- x86/bugs: do not default to IBRS even on SKL (bsc#1112824).\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-1870,SUSE-SLE-Module-Public-Cloud-12-2019-1870,SUSE-SLE-SAP-12-SP1-2019-1870,SUSE-SLE-SERVER-12-SP1-2019-1870",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1870-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:1870-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:1870-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-July/005724.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1102340",
        "url": "https://bugzilla.suse.com/1102340"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112824",
        "url": "https://bugzilla.suse.com/1112824"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1130159",
        "url": "https://bugzilla.suse.com/1130159"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133190",
        "url": "https://bugzilla.suse.com/1133190"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1134395",
        "url": "https://bugzilla.suse.com/1134395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135603",
        "url": "https://bugzilla.suse.com/1135603"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136922",
        "url": "https://bugzilla.suse.com/1136922"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137194",
        "url": "https://bugzilla.suse.com/1137194"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138293",
        "url": "https://bugzilla.suse.com/1138293"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139751",
        "url": "https://bugzilla.suse.com/1139751"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-20836 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-20836/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5390 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5390/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-7191 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-7191/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11487 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11487/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12456 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12456/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12614 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12614/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12818 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12818/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2019-07-17T12:57:10Z",
      "generator": {
        "date": "2019-07-17T12:57:10Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:1870-1",
      "initial_release_date": "2019-07-17T12:57:10Z",
      "revision_history": [
        {
          "date": "2019-07-17T12:57:10Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-3.12.74-60.64.118.1.noarch",
                "product": {
                  "name": "kernel-devel-3.12.74-60.64.118.1.noarch",
                  "product_id": "kernel-devel-3.12.74-60.64.118.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-3.12.74-60.64.118.1.noarch",
                "product": {
                  "name": "kernel-docs-3.12.74-60.64.118.1.noarch",
                  "product_id": "kernel-docs-3.12.74-60.64.118.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-3.12.74-60.64.118.1.noarch",
                "product": {
                  "name": "kernel-macros-3.12.74-60.64.118.1.noarch",
                  "product_id": "kernel-macros-3.12.74-60.64.118.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-3.12.74-60.64.118.1.noarch",
                "product": {
                  "name": "kernel-source-3.12.74-60.64.118.1.noarch",
                  "product_id": "kernel-source-3.12.74-60.64.118.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-3.12.74-60.64.118.1.noarch",
                "product": {
                  "name": "kernel-source-vanilla-3.12.74-60.64.118.1.noarch",
                  "product_id": "kernel-source-vanilla-3.12.74-60.64.118.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-debug-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-debug-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-base-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-debug-base-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-debug-base-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-debug-devel-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-debug-devel-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-extra-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-debug-extra-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-debug-extra-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-default-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-default-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-default-base-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-default-base-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-default-devel-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-extra-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-default-extra-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-default-extra-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-obs-build-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-obs-build-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-obs-qa-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-obs-qa-3.12.74-60.64.118.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-3.12.74-60.64.118.1.ppc64le",
                "product": {
                  "name": "kernel-syms-3.12.74-60.64.118.1.ppc64le",
                  "product_id": "kernel-syms-3.12.74-60.64.118.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-default-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-default-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-default-base-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-default-base-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-default-devel-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-default-devel-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-extra-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-default-extra-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-default-extra-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-man-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-default-man-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-default-man-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-obs-build-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-obs-build-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-obs-qa-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-obs-qa-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-syms-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-syms-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-vanilla-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-vanilla-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-devel-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-vanilla-devel-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-vanilla-devel-3.12.74-60.64.118.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-zfcpdump-3.12.74-60.64.118.1.s390x",
                "product": {
                  "name": "kernel-zfcpdump-3.12.74-60.64.118.1.s390x",
                  "product_id": "kernel-zfcpdump-3.12.74-60.64.118.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-debug-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-debug-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-base-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-debug-base-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-debug-base-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-debug-devel-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-debug-devel-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-extra-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-debug-extra-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-debug-extra-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-default-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-default-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-default-base-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-default-base-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-default-devel-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-default-devel-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-extra-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-default-extra-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-default-extra-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-ec2-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-ec2-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-ec2-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-ec2-base-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-ec2-base-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-ec2-base-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-ec2-devel-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-ec2-extra-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-obs-build-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-obs-build-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-obs-qa-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-obs-qa-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-syms-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-syms-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-vanilla-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-devel-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-devel-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-vanilla-devel-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-xen-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-xen-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-xen-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-xen-base-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-xen-base-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-xen-base-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-xen-devel-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-xen-extra-3.12.74-60.64.118.1.x86_64",
                "product": {
                  "name": "kernel-xen-extra-3.12.74-60.64.118.1.x86_64",
                  "product_id": "kernel-xen-extra-3.12.74-60.64.118.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
                "product": {
                  "name": "kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
                  "product_id": "kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
                "product": {
                  "name": "kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
                  "product_id": "kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Public Cloud 12",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Public Cloud 12",
                  "product_id": "SUSE Linux Enterprise Module for Public Cloud 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-public-cloud:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-ec2-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 12",
          "product_id": "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-ec2-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-ec2-devel-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 12",
          "product_id": "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-ec2-extra-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 12",
          "product_id": "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-default-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-default-base-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-default-devel-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-3.12.74-60.64.118.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch"
        },
        "product_reference": "kernel-devel-3.12.74-60.64.118.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-3.12.74-60.64.118.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch"
        },
        "product_reference": "kernel-macros-3.12.74-60.64.118.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-3.12.74-60.64.118.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch"
        },
        "product_reference": "kernel-source-3.12.74-60.64.118.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-syms-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-xen-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-xen-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-xen-base-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-xen-base-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-xen-devel-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-3.12.74-60.64.118.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le"
        },
        "product_reference": "kernel-default-3.12.74-60.64.118.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-3.12.74-60.64.118.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x"
        },
        "product_reference": "kernel-default-3.12.74-60.64.118.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-default-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-3.12.74-60.64.118.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le"
        },
        "product_reference": "kernel-default-base-3.12.74-60.64.118.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-3.12.74-60.64.118.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x"
        },
        "product_reference": "kernel-default-base-3.12.74-60.64.118.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-default-base-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-3.12.74-60.64.118.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le"
        },
        "product_reference": "kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-3.12.74-60.64.118.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x"
        },
        "product_reference": "kernel-default-devel-3.12.74-60.64.118.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-default-devel-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-man-3.12.74-60.64.118.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x"
        },
        "product_reference": "kernel-default-man-3.12.74-60.64.118.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-3.12.74-60.64.118.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch"
        },
        "product_reference": "kernel-devel-3.12.74-60.64.118.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-3.12.74-60.64.118.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch"
        },
        "product_reference": "kernel-macros-3.12.74-60.64.118.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-3.12.74-60.64.118.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch"
        },
        "product_reference": "kernel-source-3.12.74-60.64.118.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-3.12.74-60.64.118.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le"
        },
        "product_reference": "kernel-syms-3.12.74-60.64.118.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-3.12.74-60.64.118.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x"
        },
        "product_reference": "kernel-syms-3.12.74-60.64.118.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-syms-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-xen-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-xen-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-xen-base-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-xen-base-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-xen-devel-3.12.74-60.64.118.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64"
        },
        "product_reference": "kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-20836",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-20836"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-20836",
          "url": "https://www.suse.com/security/cve/CVE-2018-20836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1134395 for CVE-2018-20836",
          "url": "https://bugzilla.suse.com/1134395"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-17T12:57:10Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-20836"
    },
    {
      "cve": "CVE-2018-5390",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5390"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5390",
          "url": "https://www.suse.com/security/cve/CVE-2018-5390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087082 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1087082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102340 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102682 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102682"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103097 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103097"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103098 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103098"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156434 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1156434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-17T12:57:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5390"
    },
    {
      "cve": "CVE-2018-7191",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-7191"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-7191",
          "url": "https://www.suse.com/security/cve/CVE-2018-7191"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135603 for CVE-2018-7191",
          "url": "https://bugzilla.suse.com/1135603"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-17T12:57:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-7191"
    },
    {
      "cve": "CVE-2019-11487",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11487"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel before 5.1-rc5 allows page-\u003e_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11487",
          "url": "https://www.suse.com/security/cve/CVE-2019-11487"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133190 for CVE-2019-11487",
          "url": "https://bugzilla.suse.com/1133190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133191 for CVE-2019-11487",
          "url": "https://bugzilla.suse.com/1133191"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-17T12:57:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11487"
    },
    {
      "cve": "CVE-2019-12456",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12456"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c in the Linux kernel through 5.1.5. It allows local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc_number between two kernel reads of that value, aka a \"double fetch\" vulnerability. NOTE: a third party reports that this is unexploitable because the doubly fetched value is not used",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12456",
          "url": "https://www.suse.com/security/cve/CVE-2019-12456"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136922 for CVE-2019-12456",
          "url": "https://bugzilla.suse.com/1136922"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136993 for CVE-2019-12456",
          "url": "https://bugzilla.suse.com/1136993"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-17T12:57:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-12456"
    },
    {
      "cve": "CVE-2019-12614",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12614"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop-\u003ename, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12614",
          "url": "https://www.suse.com/security/cve/CVE-2019-12614"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137194 for CVE-2019-12614",
          "url": "https://bugzilla.suse.com/1137194"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-17T12:57:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-12614"
    },
    {
      "cve": "CVE-2019-12818",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12818"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfc_llcp_build_gb in net/nfc/llcp_core.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12818",
          "url": "https://www.suse.com/security/cve/CVE-2019-12818"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138293 for CVE-2019-12818",
          "url": "https://bugzilla.suse.com/1138293"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-17T12:57:10Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-12818"
    }
  ]
}

SUSE-SU-2019:2230-1

Vulnerability from csaf_suse - Published: 2019-08-28 05:58 - Updated: 2019-08-28 05:58

Summary

Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2)

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2)

Description of the patch: This update for the Linux Kernel 4.4.121-92_117 fixes one issue. The following security issue was fixed: - CVE-2018-5390: Fixed expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which could have led to a denial of service (bsc#1102682).

Patchnames: SUSE-2019-2230,SUSE-SLE-SAP-12-SP2-2019-2230,SUSE-SLE-SERVER-12-SP2-2019-2230

CVE-2018-5390

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

13 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1102682	self
https://www.suse.com/security/cve/CVE-2018-5390/	self
https://www.suse.com/security/cve/CVE-2018-5390	external
https://bugzilla.suse.com/1087082	external
https://bugzilla.suse.com/1102340	external
https://bugzilla.suse.com/1102682	external
https://bugzilla.suse.com/1103097	external
https://bugzilla.suse.com/1103098	external
https://bugzilla.suse.com/1156434	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2)",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for the Linux Kernel 4.4.121-92_117 fixes one issue.\n\nThe following security issue was fixed:\n\n- CVE-2018-5390: Fixed expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which could have led to a denial of service (bsc#1102682).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-2230,SUSE-SLE-SAP-12-SP2-2019-2230,SUSE-SLE-SERVER-12-SP2-2019-2230",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2230-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:2230-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192230-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:2230-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-August/005845.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1102682",
        "url": "https://bugzilla.suse.com/1102682"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5390 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5390/"
      }
    ],
    "title": "Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2)",
    "tracking": {
      "current_release_date": "2019-08-28T05:58:51Z",
      "generator": {
        "date": "2019-08-28T05:58:51Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:2230-1",
      "initial_release_date": "2019-08-28T05:58:51Z",
      "revision_history": [
        {
          "date": "2019-08-28T05:58:51Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
                "product": {
                  "name": "kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
                  "product_id": "kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64",
                "product": {
                  "name": "kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64",
                  "product_id": "kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le"
        },
        "product_reference": "kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le"
        },
        "product_reference": "kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-5390",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5390"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5390",
          "url": "https://www.suse.com/security/cve/CVE-2018-5390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087082 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1087082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102340 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102682 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102682"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103097 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103097"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103098 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103098"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156434 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1156434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-2-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-28T05:58:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5390"
    }
  ]
}

SUSE-SU-2019:2601-1

Vulnerability from csaf_suse - Published: 2019-10-08 12:35 - Updated: 2019-10-08 12:35

Summary

Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)

Description of the patch: This update for the Linux Kernel 4.4.121-92_120 fixes several issues. The following security issues were fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021). - CVE-2018-5390: Fixed a denial of service ('SegmentSmack') in tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet (bsc#1102682).

Patchnames: SUSE-2019-2601,SUSE-SLE-SAP-12-SP2-2019-2601,SUSE-SLE-SERVER-12-SP2-2019-2601

CVE-2018-5390

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-14835

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

18 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1102682	self
https://bugzilla.suse.com/1151021	self
https://www.suse.com/security/cve/CVE-2018-5390/	self
https://www.suse.com/security/cve/CVE-2019-14835/	self
https://www.suse.com/security/cve/CVE-2018-5390	external
https://bugzilla.suse.com/1087082	external
https://bugzilla.suse.com/1102340	external
https://bugzilla.suse.com/1102682	external
https://bugzilla.suse.com/1103097	external
https://bugzilla.suse.com/1103098	external
https://bugzilla.suse.com/1156434	external
https://www.suse.com/security/cve/CVE-2019-14835	external
https://bugzilla.suse.com/1150112	external
https://bugzilla.suse.com/1151021	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for the Linux Kernel 4.4.121-92_120 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).\n- CVE-2018-5390: Fixed a denial of service (\u0027SegmentSmack\u0027) in tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet (bsc#1102682).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-2601,SUSE-SLE-SAP-12-SP2-2019-2601,SUSE-SLE-SERVER-12-SP2-2019-2601",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2601-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:2601-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192601-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:2601-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-October/005994.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1102682",
        "url": "https://bugzilla.suse.com/1102682"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1151021",
        "url": "https://bugzilla.suse.com/1151021"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5390 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5390/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-14835 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-14835/"
      }
    ],
    "title": "Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)",
    "tracking": {
      "current_release_date": "2019-10-08T12:35:10Z",
      "generator": {
        "date": "2019-10-08T12:35:10Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:2601-1",
      "initial_release_date": "2019-10-08T12:35:10Z",
      "revision_history": [
        {
          "date": "2019-10-08T12:35:10Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
                "product": {
                  "name": "kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
                  "product_id": "kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
                "product": {
                  "name": "kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
                  "product_id": "kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le"
        },
        "product_reference": "kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le"
        },
        "product_reference": "kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-5390",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5390"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5390",
          "url": "https://www.suse.com/security/cve/CVE-2018-5390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087082 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1087082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102340 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102682 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102682"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103097 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103097"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103098 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103098"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156434 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1156434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-08T12:35:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5390"
    },
    {
      "cve": "CVE-2019-14835",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-14835"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel\u0027s vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-14835",
          "url": "https://www.suse.com/security/cve/CVE-2019-14835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150112 for CVE-2019-14835",
          "url": "https://bugzilla.suse.com/1150112"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1151021 for CVE-2019-14835",
          "url": "https://bugzilla.suse.com/1151021"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_120-default-2-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-08T12:35:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-14835"
    }
  ]
}

SUSE-SU-2019:2821-1

Vulnerability from csaf_suse - Published: 2019-10-30 10:32 - Updated: 2019-10-30 10:32

Summary

Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP1)

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP1)

Description of the patch: This update for the Linux Kernel 3.12.74-60_64_110 fixes several issues. The following security issues were fixed: - CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108). - CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).

Patchnames: SUSE-2019-2821,SUSE-SLE-SAP-12-SP1-2019-2821,SUSE-SLE-SERVER-12-SP1-2019-2821

CVE-2018-5390

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-10220

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-11477

8.2 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2019-11478

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2019-11487

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-14835

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-17133

8.8 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-3846

7.5 (High)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

61 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1102682	self
https://bugzilla.suse.com/1103203	self
https://bugzilla.suse.com/1133191	self
https://bugzilla.suse.com/1136446	self
https://bugzilla.suse.com/1137597	self
https://bugzilla.suse.com/1140747	self
https://bugzilla.suse.com/1144903	self
https://bugzilla.suse.com/1151021	self
https://bugzilla.suse.com/1153108	self
https://bugzilla.suse.com/1153158	self
https://bugzilla.suse.com/1153161	self
https://bugzilla.suse.com/904970	self
https://bugzilla.suse.com/907150	self
https://bugzilla.suse.com/920615	self
https://bugzilla.suse.com/920633	self
https://bugzilla.suse.com/930408	self
https://www.suse.com/security/cve/CVE-2018-5390/	self
https://www.suse.com/security/cve/CVE-2019-10220/	self
https://www.suse.com/security/cve/CVE-2019-11477/	self
https://www.suse.com/security/cve/CVE-2019-11478/	self
https://www.suse.com/security/cve/CVE-2019-11487/	self
https://www.suse.com/security/cve/CVE-2019-14835/	self
https://www.suse.com/security/cve/CVE-2019-17133/	self
https://www.suse.com/security/cve/CVE-2019-3846/	self
https://www.suse.com/security/cve/CVE-2018-5390	external
https://bugzilla.suse.com/1087082	external
https://bugzilla.suse.com/1102340	external
https://bugzilla.suse.com/1102682	external
https://bugzilla.suse.com/1103097	external
https://bugzilla.suse.com/1103098	external
https://bugzilla.suse.com/1156434	external
https://www.suse.com/security/cve/CVE-2019-10220	external
https://bugzilla.suse.com/1144903	external
https://bugzilla.suse.com/1153108	external
https://www.suse.com/security/cve/CVE-2019-11477	external
https://bugzilla.suse.com/1132686	external
https://bugzilla.suse.com/1137586	external
https://bugzilla.suse.com/1142129	external
https://bugzilla.suse.com/1153242	external
https://www.suse.com/security/cve/CVE-2019-11478	external
https://bugzilla.suse.com/1132686	external
https://bugzilla.suse.com/1137586	external
https://bugzilla.suse.com/1142129	external
https://bugzilla.suse.com/1143542	external
https://www.suse.com/security/cve/CVE-2019-11487	external
https://bugzilla.suse.com/1133190	external
https://bugzilla.suse.com/1133191	external
https://www.suse.com/security/cve/CVE-2019-14835	external
https://bugzilla.suse.com/1150112	external
https://bugzilla.suse.com/1151021	external
https://www.suse.com/security/cve/CVE-2019-17133	external
https://bugzilla.suse.com/1153158	external
https://bugzilla.suse.com/1153161	external
https://www.suse.com/security/cve/CVE-2019-3846	external
https://bugzilla.suse.com/1136424	external
https://bugzilla.suse.com/1136446	external
https://bugzilla.suse.com/1156330	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP1)",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for the Linux Kernel 3.12.74-60_64_110 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108).\n- CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-2821,SUSE-SLE-SAP-12-SP1-2019-2821,SUSE-SLE-SERVER-12-SP1-2019-2821",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2821-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:2821-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192821-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:2821-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-October/006072.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1102682",
        "url": "https://bugzilla.suse.com/1102682"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1103203",
        "url": "https://bugzilla.suse.com/1103203"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133191",
        "url": "https://bugzilla.suse.com/1133191"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136446",
        "url": "https://bugzilla.suse.com/1136446"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137597",
        "url": "https://bugzilla.suse.com/1137597"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140747",
        "url": "https://bugzilla.suse.com/1140747"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144903",
        "url": "https://bugzilla.suse.com/1144903"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1151021",
        "url": "https://bugzilla.suse.com/1151021"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153108",
        "url": "https://bugzilla.suse.com/1153108"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153158",
        "url": "https://bugzilla.suse.com/1153158"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153161",
        "url": "https://bugzilla.suse.com/1153161"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 904970",
        "url": "https://bugzilla.suse.com/904970"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 907150",
        "url": "https://bugzilla.suse.com/907150"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 920615",
        "url": "https://bugzilla.suse.com/920615"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 920633",
        "url": "https://bugzilla.suse.com/920633"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930408",
        "url": "https://bugzilla.suse.com/930408"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5390 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5390/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10220 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10220/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11477 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11477/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11478 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11478/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11487 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11487/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-14835 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-14835/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-17133 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-17133/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-3846 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-3846/"
      }
    ],
    "title": "Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP1)",
    "tracking": {
      "current_release_date": "2019-10-30T10:32:41Z",
      "generator": {
        "date": "2019-10-30T10:32:41Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:2821-1",
      "initial_release_date": "2019-10-30T10:32:41Z",
      "revision_history": [
        {
          "date": "2019-10-30T10:32:41Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
                "product": {
                  "name": "kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
                  "product_id": "kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
                "product": {
                  "name": "kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
                  "product_id": "kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-5390",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5390"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5390",
          "url": "https://www.suse.com/security/cve/CVE-2018-5390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087082 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1087082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102340 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102682 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1102682"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103097 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103097"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1103098 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1103098"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156434 for CVE-2018-5390",
          "url": "https://bugzilla.suse.com/1156434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-30T10:32:41Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5390"
    },
    {
      "cve": "CVE-2019-10220",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10220"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10220",
          "url": "https://www.suse.com/security/cve/CVE-2019-10220"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144903 for CVE-2019-10220",
          "url": "https://bugzilla.suse.com/1144903"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1153108 for CVE-2019-10220",
          "url": "https://bugzilla.suse.com/1153108"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-30T10:32:41Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10220"
    },
    {
      "cve": "CVE-2019-11477",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11477"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Jonathan Looney discovered that the TCP_SKB_CB(skb)-\u003etcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11477",
          "url": "https://www.suse.com/security/cve/CVE-2019-11477"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1132686 for CVE-2019-11477",
          "url": "https://bugzilla.suse.com/1132686"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137586 for CVE-2019-11477",
          "url": "https://bugzilla.suse.com/1137586"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142129 for CVE-2019-11477",
          "url": "https://bugzilla.suse.com/1142129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1153242 for CVE-2019-11477",
          "url": "https://bugzilla.suse.com/1153242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-30T10:32:41Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-11477"
    },
    {
      "cve": "CVE-2019-11478",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11478"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11478",
          "url": "https://www.suse.com/security/cve/CVE-2019-11478"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1132686 for CVE-2019-11478",
          "url": "https://bugzilla.suse.com/1132686"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137586 for CVE-2019-11478",
          "url": "https://bugzilla.suse.com/1137586"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142129 for CVE-2019-11478",
          "url": "https://bugzilla.suse.com/1142129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143542 for CVE-2019-11478",
          "url": "https://bugzilla.suse.com/1143542"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-30T10:32:41Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-11478"
    },
    {
      "cve": "CVE-2019-11487",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11487"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel before 5.1-rc5 allows page-\u003e_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11487",
          "url": "https://www.suse.com/security/cve/CVE-2019-11487"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133190 for CVE-2019-11487",
          "url": "https://bugzilla.suse.com/1133190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133191 for CVE-2019-11487",
          "url": "https://bugzilla.suse.com/1133191"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-30T10:32:41Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11487"
    },
    {
      "cve": "CVE-2019-14835",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-14835"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel\u0027s vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-14835",
          "url": "https://www.suse.com/security/cve/CVE-2019-14835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150112 for CVE-2019-14835",
          "url": "https://bugzilla.suse.com/1150112"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1151021 for CVE-2019-14835",
          "url": "https://bugzilla.suse.com/1151021"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-30T10:32:41Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-14835"
    },
    {
      "cve": "CVE-2019-17133",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-17133"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-17133",
          "url": "https://www.suse.com/security/cve/CVE-2019-17133"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1153158 for CVE-2019-17133",
          "url": "https://bugzilla.suse.com/1153158"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1153161 for CVE-2019-17133",
          "url": "https://bugzilla.suse.com/1153161"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-30T10:32:41Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-17133"
    },
    {
      "cve": "CVE-2019-3846",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-3846"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-3846",
          "url": "https://www.suse.com/security/cve/CVE-2019-3846"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136424 for CVE-2019-3846",
          "url": "https://bugzilla.suse.com/1136424"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136446 for CVE-2019-3846",
          "url": "https://bugzilla.suse.com/1136446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156330 for CVE-2019-3846",
          "url": "https://bugzilla.suse.com/1156330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-default-6-2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_110-xen-6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-10-30T10:32:41Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-3846"
    }
  ]
}

ubuntu-cve-2018-5390

Vulnerability from osv_ubuntu

Published

2018-08-06 17:00

Modified

2026-04-22 07:38

Summary

Details

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 (High)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      high

References

URL

Type

	https://ubuntu.com/security/CVE-2018-5390	REPORT
	https://www.kb.cert.org/vuls/id/962459	REPORT
	https://ubuntu.com/security/notices/USN-3732-1	ADVISORY
	https://ubuntu.com/security/notices/USN-3732-2	ADVISORY
	https://ubuntu.com/security/notices/USN-3741-1	ADVISORY
	https://ubuntu.com/security/notices/USN-3741-2	ADVISORY
	https://ubuntu.com/security/notices/USN-3742-1	ADVISORY
	https://ubuntu.com/security/notices/USN-3742-2	ADVISORY
	https://ubuntu.com/security/notices/USN-3763-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-5390	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "block-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "block-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "block-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "block-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "block-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "block-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "crypto-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "crypto-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "crypto-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "crypto-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "crypto-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "crypto-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fat-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fat-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fat-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fat-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fat-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fat-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fb-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "firewire-core-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "firewire-core-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "firewire-core-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "firewire-core-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "firewire-core-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "floppy-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "floppy-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "floppy-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "floppy-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "floppy-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-core-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-core-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-core-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-core-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-core-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-core-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-secondary-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-secondary-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-secondary-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-secondary-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-secondary-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "fs-secondary-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "input-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "input-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "input-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "input-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "input-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "input-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ipmi-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ipmi-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ipmi-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ipmi-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ipmi-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ipmi-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "irda-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "irda-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "irda-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "irda-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "irda-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "irda-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "kernel-image-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "kernel-image-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "kernel-image-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "kernel-image-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "kernel-image-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "kernel-image-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-cloud-tools-3.13.0-155",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-cloud-tools-3.13.0-155-generic",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-cloud-tools-3.13.0-155-lowlatency",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-headers-3.13.0-155",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-headers-3.13.0-155-generic",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-headers-3.13.0-155-generic-lpae",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-headers-3.13.0-155-lowlatency",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-headers-3.13.0-155-powerpc-e500",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-headers-3.13.0-155-powerpc-e500mc",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-headers-3.13.0-155-powerpc-smp",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-headers-3.13.0-155-powerpc64-emb",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-headers-3.13.0-155-powerpc64-smp",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-image-3.13.0-155-generic",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-image-3.13.0-155-generic-lpae",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-image-3.13.0-155-lowlatency",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-image-3.13.0-155-powerpc-e500",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-image-3.13.0-155-powerpc-e500mc",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-image-3.13.0-155-powerpc-smp",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-image-3.13.0-155-powerpc64-emb",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-image-3.13.0-155-powerpc64-smp",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-image-extra-3.13.0-155-generic",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-source-3.13.0",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-3.13.0-155",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-3.13.0-155-generic",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-3.13.0-155-generic-lpae",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-3.13.0-155-lowlatency",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-3.13.0-155-powerpc-e500",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-3.13.0-155-powerpc-e500mc",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-3.13.0-155-powerpc-smp",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-3.13.0-155-powerpc64-emb",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-3.13.0-155-powerpc64-smp",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-tools-common",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-udebs-generic",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-udebs-generic-lpae",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-udebs-powerpc-e500",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-udebs-powerpc-e500mc",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-udebs-powerpc-smp",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "linux-udebs-powerpc64-smp",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "md-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "md-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "md-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "md-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "md-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "md-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "message-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "message-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "message-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "message-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "message-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "mouse-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "mouse-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "mouse-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "mouse-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "mouse-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "mouse-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "multipath-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "multipath-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "multipath-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "multipath-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "multipath-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "multipath-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nfs-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nfs-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nfs-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nfs-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nfs-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nfs-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-pcmcia-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-shared-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-shared-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-shared-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-shared-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-shared-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-shared-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-usb-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-usb-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-usb-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-usb-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-usb-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "nic-usb-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "parport-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "parport-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "parport-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "parport-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "parport-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "parport-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "pata-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "pata-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "pata-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "pata-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "pata-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "pcmcia-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "pcmcia-storage-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "plip-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "plip-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "plip-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "plip-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "plip-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "plip-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ppp-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ppp-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ppp-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ppp-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ppp-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "ppp-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "sata-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "sata-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "sata-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "sata-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "sata-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "sata-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "scsi-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "scsi-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "scsi-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "scsi-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "scsi-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "scsi-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "serial-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "speakup-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "speakup-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "speakup-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "speakup-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "speakup-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "speakup-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "squashfs-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "squashfs-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "squashfs-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "squashfs-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "squashfs-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "squashfs-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "storage-core-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "storage-core-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "storage-core-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "storage-core-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "storage-core-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "storage-core-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "usb-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "usb-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "usb-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "usb-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "usb-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "usb-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "virtio-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "virtio-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "virtio-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "virtio-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "virtio-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "vlan-modules-3.13.0-155-generic-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "vlan-modules-3.13.0-155-generic-lpae-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "vlan-modules-3.13.0-155-powerpc-e500-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "vlan-modules-3.13.0-155-powerpc-e500mc-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "vlan-modules-3.13.0-155-powerpc-smp-di",
            "binary_version": "3.13.0-155.205"
          },
          {
            "binary_name": "vlan-modules-3.13.0-155-powerpc64-smp-di",
            "binary_version": "3.13.0-155.205"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "linux",
        "purl": "pkg:deb/ubuntu/linux@3.13.0-155.205?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.13.0-155.205"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "3.11.0-12.19",
        "3.12.0-1.3",
        "3.12.0-2.5",
        "3.12.0-2.7",
        "3.12.0-3.8",
        "3.12.0-3.9",
        "3.12.0-4.10",
        "3.12.0-4.12",
        "3.12.0-5.13",
        "3.12.0-7.15",
        "3.13.0-1.16",
        "3.13.0-2.17",
        "3.13.0-3.18",
        "3.13.0-4.19",
        "3.13.0-5.20",
        "3.13.0-6.23",
        "3.13.0-7.25",
        "3.13.0-7.26",
        "3.13.0-8.27",
        "3.13.0-8.28",
        "3.13.0-10.30",
        "3.13.0-11.31",
        "3.13.0-12.32",
        "3.13.0-13.33",
        "3.13.0-14.34",
        "3.13.0-15.35",
        "3.13.0-16.36",
        "3.13.0-17.37",
        "3.13.0-18.38",
        "3.13.0-19.39",
        "3.13.0-19.40",
        "3.13.0-20.42",
        "3.13.0-21.43",
        "3.13.0-22.44",
        "3.13.0-23.45",
        "3.13.0-24.46",
        "3.13.0-24.47",
        "3.13.0-27.50",
        "3.13.0-29.53",
        "3.13.0-30.54",
        "3.13.0-30.55",
        "3.13.0-32.57",
        "3.13.0-33.58",
        "3.13.0-34.60",
        "3.13.0-35.62",
        "3.13.0-36.63",
        "3.13.0-37.64",
        "3.13.0-39.66",
        "3.13.0-40.69",
        "3.13.0-41.70",
        "3.13.0-43.72",
        "3.13.0-44.73",
        "3.13.0-45.74",
        "3.13.0-46.75",
        "3.13.0-46.76",
        "3.13.0-46.77",
        "3.13.0-46.79",
        "3.13.0-48.80",
        "3.13.0-49.81",
        "3.13.0-49.83",
        "3.13.0-51.84",
        "3.13.0-52.85",
        "3.13.0-52.86",
        "3.13.0-53.88",
        "3.13.0-53.89",
        "3.13.0-54.91",
        "3.13.0-55.92",
        "3.13.0-55.94",
        "3.13.0-57.95",
        "3.13.0-58.97",
        "3.13.0-59.98",
        "3.13.0-61.100",
        "3.13.0-62.102",
        "3.13.0-63.103",
        "3.13.0-65.105",
        "3.13.0-65.106",
        "3.13.0-66.108",
        "3.13.0-67.110",
        "3.13.0-68.111",
        "3.13.0-70.113",
        "3.13.0-71.114",
        "3.13.0-73.116",
        "3.13.0-74.118",
        "3.13.0-76.120",
        "3.13.0-77.121",
        "3.13.0-79.123",
        "3.13.0-83.127",
        "3.13.0-85.129",
        "3.13.0-86.130",
        "3.13.0-86.131",
        "3.13.0-87.133",
        "3.13.0-88.135",
        "3.13.0-91.138",
        "3.13.0-92.139",
        "3.13.0-93.140",
        "3.13.0-95.142",
        "3.13.0-96.143",
        "3.13.0-98.145",
        "3.13.0-100.147",
        "3.13.0-101.148",
        "3.13.0-103.150",
        "3.13.0-105.152",
        "3.13.0-106.153",
        "3.13.0-107.154",
        "3.13.0-108.155",
        "3.13.0-109.156",
        "3.13.0-110.157",
        "3.13.0-111.158",
        "3.13.0-112.159",
        "3.13.0-113.160",
        "3.13.0-115.162",
        "3.13.0-116.163",
        "3.13.0-117.164",
        "3.13.0-119.166",
        "3.13.0-121.170",
        "3.13.0-123.172",
        "3.13.0-125.174",
        "3.13.0-126.175",
        "3.13.0-128.177",
        "3.13.0-129.178",
        "3.13.0-132.181",
        "3.13.0-133.182",
        "3.13.0-135.184",
        "3.13.0-137.186",
        "3.13.0-139.188",
        "3.13.0-141.190",
        "3.13.0-142.191",
        "3.13.0-143.192",
        "3.13.0-144.193",
        "3.13.0-145.194",
        "3.13.0-147.196",
        "3.13.0-149.199",
        "3.13.0-151.201",
        "3.13.0-153.203"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-aws-cloud-tools-4.4.0-1027",
            "binary_version": "4.4.0-1027.30"
          },
          {
            "binary_name": "linux-aws-headers-4.4.0-1027",
            "binary_version": "4.4.0-1027.30"
          },
          {
            "binary_name": "linux-aws-tools-4.4.0-1027",
            "binary_version": "4.4.0-1027.30"
          },
          {
            "binary_name": "linux-cloud-tools-4.4.0-1027-aws",
            "binary_version": "4.4.0-1027.30"
          },
          {
            "binary_name": "linux-headers-4.4.0-1027-aws",
            "binary_version": "4.4.0-1027.30"
          },
          {
            "binary_name": "linux-image-4.4.0-1027-aws",
            "binary_version": "4.4.0-1027.30"
          },
          {
            "binary_name": "linux-tools-4.4.0-1027-aws",
            "binary_version": "4.4.0-1027.30"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "linux-aws",
        "purl": "pkg:deb/ubuntu/linux-aws@4.4.0-1027.30?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0-1027.30"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.4.0-1002.2",
        "4.4.0-1003.3",
        "4.4.0-1005.5",
        "4.4.0-1006.6",
        "4.4.0-1009.9",
        "4.4.0-1010.10",
        "4.4.0-1011.11",
        "4.4.0-1012.12",
        "4.4.0-1014.14",
        "4.4.0-1016.16",
        "4.4.0-1017.17",
        "4.4.0-1019.19",
        "4.4.0-1022.22",
        "4.4.0-1023.23",
        "4.4.0-1024.25",
        "4.4.0-1025.26"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "block-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "block-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "block-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "block-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "block-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fb-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "floppy-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "floppy-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "floppy-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "floppy-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "input-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "input-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "input-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "input-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "input-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-4.4.0-133-lowlatency",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.4.0-133",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-generic-lpae",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-lowlatency",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-powerpc-e500mc",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-powerpc-smp",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-powerpc64-emb",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-powerpc64-smp",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-image-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-image-4.4.0-133-generic-lpae",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-image-4.4.0-133-lowlatency",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-image-4.4.0-133-powerpc-e500mc",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-image-4.4.0-133-powerpc-smp",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-image-4.4.0-133-powerpc64-emb",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-image-4.4.0-133-powerpc64-smp",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-image-extra-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-lts-xenial-cloud-tools-4.4.0-133",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-lts-xenial-tools-4.4.0-133",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-lts-xenial-udebs-generic",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-lts-xenial-udebs-generic-lpae",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-lts-xenial-udebs-powerpc-e500mc",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-lts-xenial-udebs-powerpc-smp",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-lts-xenial-udebs-powerpc64-smp",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-generic-lpae",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-lowlatency",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-powerpc-e500mc",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-powerpc-smp",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-powerpc64-emb",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-powerpc64-smp",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "md-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "md-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "md-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "md-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "md-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "message-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "message-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "message-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "message-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-pcmcia-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "pata-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "pata-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "pata-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "pata-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "pcmcia-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "pcmcia-storage-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "serial-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "virtio-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "virtio-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "virtio-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "virtio-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159~14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "linux-lts-xenial",
        "purl": "pkg:deb/ubuntu/linux-lts-xenial@4.4.0-133.159~14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0-133.159~14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.4.0-13.29~14.04.1",
        "4.4.0-14.30~14.04.2",
        "4.4.0-15.31~14.04.1",
        "4.4.0-18.34~14.04.1",
        "4.4.0-21.37~14.04.1",
        "4.4.0-22.39~14.04.1",
        "4.4.0-22.40~14.04.1",
        "4.4.0-24.43~14.04.1",
        "4.4.0-28.47~14.04.1",
        "4.4.0-31.50~14.04.1",
        "4.4.0-34.53~14.04.1",
        "4.4.0-36.55~14.04.1",
        "4.4.0-38.57~14.04.1",
        "4.4.0-42.62~14.04.1",
        "4.4.0-45.66~14.04.1",
        "4.4.0-47.68~14.04.1",
        "4.4.0-51.72~14.04.1",
        "4.4.0-53.74~14.04.1",
        "4.4.0-57.78~14.04.1",
        "4.4.0-59.80~14.04.1",
        "4.4.0-62.83~14.04.1",
        "4.4.0-63.84~14.04.2",
        "4.4.0-64.85~14.04.1",
        "4.4.0-66.87~14.04.1",
        "4.4.0-67.88~14.04.1",
        "4.4.0-70.91~14.04.1",
        "4.4.0-71.92~14.04.1",
        "4.4.0-72.93~14.04.1",
        "4.4.0-75.96~14.04.1",
        "4.4.0-78.99~14.04.2",
        "4.4.0-79.100~14.04.1",
        "4.4.0-81.104~14.04.1",
        "4.4.0-83.106~14.04.1",
        "4.4.0-87.110~14.04.1",
        "4.4.0-89.112~14.04.1",
        "4.4.0-91.114~14.04.1",
        "4.4.0-92.115~14.04.1",
        "4.4.0-93.116~14.04.1",
        "4.4.0-96.119~14.04.1",
        "4.4.0-97.120~14.04.1",
        "4.4.0-98.121~14.04.1",
        "4.4.0-101.124~14.04.1",
        "4.4.0-103.126~14.04.1",
        "4.4.0-104.127~14.04.1",
        "4.4.0-108.131~14.04.1",
        "4.4.0-109.132~14.04.1",
        "4.4.0-111.134~14.04.1",
        "4.4.0-112.135~14.04.1",
        "4.4.0-116.140~14.04.1",
        "4.4.0-119.143~14.04.1",
        "4.4.0-121.145~14.04.1",
        "4.4.0-124.148~14.04.1",
        "4.4.0-127.153~14.04.1",
        "4.4.0-128.154~14.04.1",
        "4.4.0-130.156~14.04.1",
        "4.4.0-131.157~14.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "block-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "block-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "block-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "block-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "block-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "crypto-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "dasd-extra-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "dasd-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fat-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fb-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "firewire-core-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "firewire-core-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "firewire-core-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "firewire-core-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "floppy-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "floppy-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "floppy-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "floppy-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "input-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "input-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "input-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "input-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "input-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "irda-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "kernel-image-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-cloud-tools-4.4.0-133",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-cloud-tools-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-cloud-tools-4.4.0-133-lowlatency",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-headers-4.4.0-133",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-generic-lpae",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-lowlatency",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-powerpc-e500mc",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-powerpc-smp",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-powerpc64-emb",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-headers-4.4.0-133-powerpc64-smp",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-image-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-image-4.4.0-133-generic-lpae",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-image-4.4.0-133-lowlatency",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-image-4.4.0-133-powerpc-e500mc",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-image-4.4.0-133-powerpc-smp",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-image-4.4.0-133-powerpc64-emb",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-image-4.4.0-133-powerpc64-smp",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-image-extra-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-source-4.4.0",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-tools-4.4.0-133",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-generic",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-generic-lpae",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-lowlatency",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-powerpc-e500mc",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-powerpc-smp",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-powerpc64-emb",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-tools-4.4.0-133-powerpc64-smp",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-tools-common",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-udebs-generic",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-udebs-generic-lpae",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-udebs-powerpc-e500mc",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-udebs-powerpc-smp",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "linux-udebs-powerpc64-smp",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "md-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "md-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "md-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "md-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "md-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "message-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "message-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "message-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "message-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "mouse-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "multipath-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nfs-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-pcmcia-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "parport-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "pata-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "pata-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "pata-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "pata-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "pcmcia-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "pcmcia-storage-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "plip-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "ppp-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "sata-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "scsi-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "serial-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "speakup-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "usb-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "virtio-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "virtio-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "virtio-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "virtio-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-generic-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-generic-lpae-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-powerpc-e500mc-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-powerpc-smp-di",
            "binary_version": "4.4.0-133.159"
          },
          {
            "binary_name": "vlan-modules-4.4.0-133-powerpc64-smp-di",
            "binary_version": "4.4.0-133.159"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux",
        "purl": "pkg:deb/ubuntu/linux@4.4.0-133.159?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0-133.159"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.0-16.19",
        "4.2.0-17.21",
        "4.2.0-19.23",
        "4.3.0-1.10",
        "4.3.0-2.11",
        "4.3.0-5.16",
        "4.3.0-6.17",
        "4.3.0-7.18",
        "4.4.0-2.16",
        "4.4.0-4.19",
        "4.4.0-6.21",
        "4.4.0-7.22",
        "4.4.0-8.23",
        "4.4.0-9.24",
        "4.4.0-10.25",
        "4.4.0-11.26",
        "4.4.0-12.28",
        "4.4.0-13.29",
        "4.4.0-14.30",
        "4.4.0-15.31",
        "4.4.0-16.32",
        "4.4.0-17.33",
        "4.4.0-18.34",
        "4.4.0-21.37",
        "4.4.0-22.39",
        "4.4.0-22.40",
        "4.4.0-24.43",
        "4.4.0-28.47",
        "4.4.0-31.50",
        "4.4.0-34.53",
        "4.4.0-36.55",
        "4.4.0-38.57",
        "4.4.0-42.62",
        "4.4.0-43.63",
        "4.4.0-45.66",
        "4.4.0-47.68",
        "4.4.0-51.72",
        "4.4.0-53.74",
        "4.4.0-57.78",
        "4.4.0-59.80",
        "4.4.0-62.83",
        "4.4.0-63.84",
        "4.4.0-64.85",
        "4.4.0-65.86",
        "4.4.0-66.87",
        "4.4.0-67.88",
        "4.4.0-70.91",
        "4.4.0-71.92",
        "4.4.0-72.93",
        "4.4.0-75.96",
        "4.4.0-77.98",
        "4.4.0-78.99",
        "4.4.0-79.100",
        "4.4.0-81.104",
        "4.4.0-83.106",
        "4.4.0-87.110",
        "4.4.0-89.112",
        "4.4.0-91.114",
        "4.4.0-92.115",
        "4.4.0-93.116",
        "4.4.0-96.119",
        "4.4.0-97.120",
        "4.4.0-98.121",
        "4.4.0-101.124",
        "4.4.0-103.126",
        "4.4.0-104.127",
        "4.4.0-108.131",
        "4.4.0-109.132",
        "4.4.0-112.135",
        "4.4.0-116.140",
        "4.4.0-119.143",
        "4.4.0-121.145",
        "4.4.0-122.146",
        "4.4.0-124.148",
        "4.4.0-127.153",
        "4.4.0-128.154",
        "4.4.0-130.156",
        "4.4.0-131.157"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-aws-cloud-tools-4.4.0-1065",
            "binary_version": "4.4.0-1065.75"
          },
          {
            "binary_name": "linux-aws-headers-4.4.0-1065",
            "binary_version": "4.4.0-1065.75"
          },
          {
            "binary_name": "linux-aws-tools-4.4.0-1065",
            "binary_version": "4.4.0-1065.75"
          },
          {
            "binary_name": "linux-cloud-tools-4.4.0-1065-aws",
            "binary_version": "4.4.0-1065.75"
          },
          {
            "binary_name": "linux-headers-4.4.0-1065-aws",
            "binary_version": "4.4.0-1065.75"
          },
          {
            "binary_name": "linux-image-4.4.0-1065-aws",
            "binary_version": "4.4.0-1065.75"
          },
          {
            "binary_name": "linux-tools-4.4.0-1065-aws",
            "binary_version": "4.4.0-1065.75"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux-aws",
        "purl": "pkg:deb/ubuntu/linux-aws@4.4.0-1065.75?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0-1065.75"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.4.0-1001.10",
        "4.4.0-1003.12",
        "4.4.0-1004.13",
        "4.4.0-1007.16",
        "4.4.0-1009.18",
        "4.4.0-1011.20",
        "4.4.0-1012.21",
        "4.4.0-1013.22",
        "4.4.0-1016.25",
        "4.4.0-1017.26",
        "4.4.0-1018.27",
        "4.4.0-1020.29",
        "4.4.0-1022.31",
        "4.4.0-1026.35",
        "4.4.0-1028.37",
        "4.4.0-1030.39",
        "4.4.0-1031.40",
        "4.4.0-1032.41",
        "4.4.0-1035.44",
        "4.4.0-1037.46",
        "4.4.0-1038.47",
        "4.4.0-1039.48",
        "4.4.0-1041.50",
        "4.4.0-1043.52",
        "4.4.0-1044.53",
        "4.4.0-1047.56",
        "4.4.0-1048.57",
        "4.4.0-1049.58",
        "4.4.0-1050.59",
        "4.4.0-1052.61",
        "4.4.0-1054.63",
        "4.4.0-1055.64",
        "4.4.0-1057.66",
        "4.4.0-1060.69",
        "4.4.0-1061.70",
        "4.4.0-1062.71",
        "4.4.0-1063.72"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-azure-cloud-tools-4.15.0-1019",
            "binary_version": "4.15.0-1019.19~16.04.1"
          },
          {
            "binary_name": "linux-azure-headers-4.15.0-1019",
            "binary_version": "4.15.0-1019.19~16.04.1"
          },
          {
            "binary_name": "linux-azure-tools-4.15.0-1019",
            "binary_version": "4.15.0-1019.19~16.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19~16.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19~16.04.1"
          },
          {
            "binary_name": "linux-modules-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19~16.04.1"
          },
          {
            "binary_name": "linux-modules-extra-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19~16.04.1"
          },
          {
            "binary_name": "linux-tools-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19~16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux-azure",
        "purl": "pkg:deb/ubuntu/linux-azure@4.15.0-1019.19~16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-1019.19~16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.11.0-1009.9",
        "4.11.0-1011.11",
        "4.11.0-1013.13",
        "4.11.0-1014.14",
        "4.11.0-1015.15",
        "4.11.0-1016.16",
        "4.13.0-1005.7",
        "4.13.0-1006.8",
        "4.13.0-1007.9",
        "4.13.0-1009.12",
        "4.13.0-1011.14",
        "4.13.0-1012.15",
        "4.13.0-1014.17",
        "4.13.0-1016.19",
        "4.13.0-1018.21",
        "4.15.0-1013.13~16.04.2",
        "4.15.0-1014.14~16.04.1",
        "4.15.0-1018.18~16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-euclid-headers-4.4.0-9029",
            "binary_version": "4.4.0-9029.31"
          },
          {
            "binary_name": "linux-euclid-tools-4.4.0-9029",
            "binary_version": "4.4.0-9029.31"
          },
          {
            "binary_name": "linux-headers-4.4.0-9029-euclid",
            "binary_version": "4.4.0-9029.31"
          },
          {
            "binary_name": "linux-image-4.4.0-9029-euclid",
            "binary_version": "4.4.0-9029.31"
          },
          {
            "binary_name": "linux-image-extra-4.4.0-9029-euclid",
            "binary_version": "4.4.0-9029.31"
          },
          {
            "binary_name": "linux-tools-4.4.0-9029-euclid",
            "binary_version": "4.4.0-9029.31"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux-euclid",
        "purl": "pkg:deb/ubuntu/linux-euclid@4.4.0-9029.31?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0-9029.31"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.4.0-9019.20",
        "4.4.0-9020.21",
        "4.4.0-9021.22",
        "4.4.0-9022.23",
        "4.4.0-9023.24",
        "4.4.0-9025.27",
        "4.4.0-9026.28",
        "4.4.0-9027.29",
        "4.4.0-9028.30"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-gcp-headers-4.15.0-1015",
            "binary_version": "4.15.0-1015.15~16.04.1"
          },
          {
            "binary_name": "linux-gcp-tools-4.15.0-1015",
            "binary_version": "4.15.0-1015.15~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15~16.04.1"
          },
          {
            "binary_name": "linux-image-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15~16.04.1"
          },
          {
            "binary_name": "linux-modules-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15~16.04.1"
          },
          {
            "binary_name": "linux-modules-extra-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15~16.04.1"
          },
          {
            "binary_name": "linux-tools-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15~16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux-gcp",
        "purl": "pkg:deb/ubuntu/linux-gcp@4.15.0-1015.15~16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-1015.15~16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.10.0-1004.4",
        "4.10.0-1006.6",
        "4.10.0-1007.7",
        "4.10.0-1008.8",
        "4.10.0-1009.9",
        "4.13.0-1002.5",
        "4.13.0-1006.9",
        "4.13.0-1007.10",
        "4.13.0-1008.11",
        "4.13.0-1011.15",
        "4.13.0-1012.16",
        "4.13.0-1013.17",
        "4.13.0-1015.19",
        "4.13.0-1017.21",
        "4.13.0-1019.23",
        "4.15.0-1014.14~16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "block-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "block-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "crypto-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "crypto-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "dasd-extra-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "dasd-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "fat-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "fat-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "fb-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "floppy-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "input-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "input-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "irda-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "irda-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "kernel-image-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "kernel-image-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-30",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-30-generic-lpae",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-hwe-cloud-tools-4.15.0-30",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-hwe-tools-4.15.0-30",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-hwe-udebs-generic",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-hwe-udebs-generic-lpae",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-image-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-image-4.15.0-30-generic-lpae",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-image-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-modules-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-modules-4.15.0-30-generic-lpae",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-modules-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-modules-extra-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-source-4.15.0",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-tools-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-tools-4.15.0-30-generic-lpae",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "linux-tools-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "md-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "md-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "message-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "mouse-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "mouse-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "multipath-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "multipath-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "nfs-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "nfs-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "nic-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "nic-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "nic-pcmcia-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "parport-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "parport-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "pata-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "pcmcia-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "pcmcia-storage-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "plip-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "plip-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "ppp-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "ppp-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "sata-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "sata-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "scsi-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "scsi-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "serial-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "usb-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "usb-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "virtio-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "vlan-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          },
          {
            "binary_name": "vlan-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32~16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux-hwe",
        "purl": "pkg:deb/ubuntu/linux-hwe@4.15.0-30.32~16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-30.32~16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.8.0-36.36~16.04.1",
        "4.8.0-39.42~16.04.1",
        "4.8.0-41.44~16.04.1",
        "4.8.0-42.45~16.04.1",
        "4.8.0-44.47~16.04.1",
        "4.8.0-45.48~16.04.1",
        "4.8.0-46.49~16.04.1",
        "4.8.0-49.52~16.04.1",
        "4.8.0-51.54~16.04.1",
        "4.8.0-52.55~16.04.1",
        "4.8.0-53.56~16.04.1",
        "4.8.0-54.57~16.04.1",
        "4.8.0-56.61~16.04.1",
        "4.8.0-58.63~16.04.1",
        "4.10.0-27.30~16.04.2",
        "4.10.0-28.32~16.04.2",
        "4.10.0-30.34~16.04.1",
        "4.10.0-32.36~16.04.1",
        "4.10.0-33.37~16.04.1",
        "4.10.0-35.39~16.04.1",
        "4.10.0-37.41~16.04.1",
        "4.10.0-38.42~16.04.1",
        "4.10.0-40.44~16.04.1",
        "4.10.0-42.46~16.04.1",
        "4.13.0-26.29~16.04.2",
        "4.13.0-31.34~16.04.1",
        "4.13.0-32.35~16.04.1",
        "4.13.0-36.40~16.04.1",
        "4.13.0-37.42~16.04.1",
        "4.13.0-38.43~16.04.1",
        "4.13.0-39.44~16.04.1",
        "4.13.0-41.46~16.04.1",
        "4.13.0-43.48~16.04.1",
        "4.13.0-45.50~16.04.1",
        "4.15.0-24.26~16.04.1",
        "4.15.0-29.31~16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-cloud-tools-4.4.0-1031-kvm",
            "binary_version": "4.4.0-1031.37"
          },
          {
            "binary_name": "linux-headers-4.4.0-1031-kvm",
            "binary_version": "4.4.0-1031.37"
          },
          {
            "binary_name": "linux-image-4.4.0-1031-kvm",
            "binary_version": "4.4.0-1031.37"
          },
          {
            "binary_name": "linux-kvm-cloud-tools-4.4.0-1031",
            "binary_version": "4.4.0-1031.37"
          },
          {
            "binary_name": "linux-kvm-headers-4.4.0-1031",
            "binary_version": "4.4.0-1031.37"
          },
          {
            "binary_name": "linux-kvm-tools-4.4.0-1031",
            "binary_version": "4.4.0-1031.37"
          },
          {
            "binary_name": "linux-tools-4.4.0-1031-kvm",
            "binary_version": "4.4.0-1031.37"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux-kvm",
        "purl": "pkg:deb/ubuntu/linux-kvm@4.4.0-1031.37?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0-1031.37"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.4.0-1004.9",
        "4.4.0-1007.12",
        "4.4.0-1008.13",
        "4.4.0-1009.14",
        "4.4.0-1010.15",
        "4.4.0-1012.17",
        "4.4.0-1013.18",
        "4.4.0-1015.20",
        "4.4.0-1017.22",
        "4.4.0-1019.24",
        "4.4.0-1020.25",
        "4.4.0-1021.26",
        "4.4.0-1023.28",
        "4.4.0-1026.31",
        "4.4.0-1027.32",
        "4.4.0-1029.34"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-headers-4.4.0-1094-raspi2",
            "binary_version": "4.4.0-1094.102"
          },
          {
            "binary_name": "linux-image-4.4.0-1094-raspi2",
            "binary_version": "4.4.0-1094.102"
          },
          {
            "binary_name": "linux-raspi2-headers-4.4.0-1094",
            "binary_version": "4.4.0-1094.102"
          },
          {
            "binary_name": "linux-raspi2-tools-4.4.0-1094",
            "binary_version": "4.4.0-1094.102"
          },
          {
            "binary_name": "linux-tools-4.4.0-1094-raspi2",
            "binary_version": "4.4.0-1094.102"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux-raspi2",
        "purl": "pkg:deb/ubuntu/linux-raspi2@4.4.0-1094.102?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0-1094.102"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.0-1013.19",
        "4.2.0-1014.21",
        "4.3.0-1006.6",
        "4.4.0-1003.4",
        "4.4.0-1004.5",
        "4.4.0-1009.10",
        "4.4.0-1010.12",
        "4.4.0-1010.13",
        "4.4.0-1012.16",
        "4.4.0-1016.22",
        "4.4.0-1017.23",
        "4.4.0-1019.25",
        "4.4.0-1021.27",
        "4.4.0-1023.29",
        "4.4.0-1027.33",
        "4.4.0-1029.36",
        "4.4.0-1034.41",
        "4.4.0-1038.45",
        "4.4.0-1040.47",
        "4.4.0-1042.49",
        "4.4.0-1044.51",
        "4.4.0-1046.53",
        "4.4.0-1048.55",
        "4.4.0-1050.57",
        "4.4.0-1051.58",
        "4.4.0-1052.59",
        "4.4.0-1054.61",
        "4.4.0-1055.62",
        "4.4.0-1057.64",
        "4.4.0-1059.67",
        "4.4.0-1061.69",
        "4.4.0-1065.73",
        "4.4.0-1067.75",
        "4.4.0-1069.77",
        "4.4.0-1070.78",
        "4.4.0-1071.79",
        "4.4.0-1074.82",
        "4.4.0-1075.83",
        "4.4.0-1076.84",
        "4.4.0-1077.85",
        "4.4.0-1079.87",
        "4.4.0-1080.88",
        "4.4.0-1082.90",
        "4.4.0-1085.93",
        "4.4.0-1086.94",
        "4.4.0-1087.95",
        "4.4.0-1089.97",
        "4.4.0-1090.98",
        "4.4.0-1091.99",
        "4.4.0-1092.100"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-headers-4.4.0-1098-snapdragon",
            "binary_version": "4.4.0-1098.103"
          },
          {
            "binary_name": "linux-image-4.4.0-1098-snapdragon",
            "binary_version": "4.4.0-1098.103"
          },
          {
            "binary_name": "linux-snapdragon-headers-4.4.0-1098",
            "binary_version": "4.4.0-1098.103"
          },
          {
            "binary_name": "linux-snapdragon-tools-4.4.0-1098",
            "binary_version": "4.4.0-1098.103"
          },
          {
            "binary_name": "linux-tools-4.4.0-1098-snapdragon",
            "binary_version": "4.4.0-1098.103"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux-snapdragon",
        "purl": "pkg:deb/ubuntu/linux-snapdragon@4.4.0-1098.103?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0-1098.103"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.4.0-1012.12",
        "4.4.0-1013.14",
        "4.4.0-1013.15",
        "4.4.0-1015.18",
        "4.4.0-1019.22",
        "4.4.0-1020.23",
        "4.4.0-1022.25",
        "4.4.0-1024.27",
        "4.4.0-1026.29",
        "4.4.0-1030.33",
        "4.4.0-1032.36",
        "4.4.0-1035.39",
        "4.4.0-1039.43",
        "4.4.0-1042.46",
        "4.4.0-1044.48",
        "4.4.0-1046.50",
        "4.4.0-1047.51",
        "4.4.0-1048.52",
        "4.4.0-1050.54",
        "4.4.0-1051.55",
        "4.4.0-1053.57",
        "4.4.0-1054.58",
        "4.4.0-1055.59",
        "4.4.0-1057.61",
        "4.4.0-1058.62",
        "4.4.0-1059.63",
        "4.4.0-1061.66",
        "4.4.0-1063.68",
        "4.4.0-1067.72",
        "4.4.0-1069.74",
        "4.4.0-1071.76",
        "4.4.0-1072.77",
        "4.4.0-1073.78",
        "4.4.0-1076.81",
        "4.4.0-1077.82",
        "4.4.0-1078.83",
        "4.4.0-1079.84",
        "4.4.0-1081.86",
        "4.4.0-1082.87",
        "4.4.0-1084.89",
        "4.4.0-1087.92",
        "4.4.0-1088.93",
        "4.4.0-1090.95",
        "4.4.0-1092.97",
        "4.4.0-1093.98",
        "4.4.0-1094.99",
        "4.4.0-1095.100",
        "4.4.0-1096.101"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "block-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "block-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "block-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "crypto-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "crypto-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "crypto-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "dasd-extra-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "dasd-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fat-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fat-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fat-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fb-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "firewire-core-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "floppy-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fs-core-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fs-core-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fs-core-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fs-secondary-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fs-secondary-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "fs-secondary-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "input-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "input-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "input-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "ipmi-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "ipmi-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "ipmi-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "irda-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "irda-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "irda-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "kernel-image-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "kernel-image-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "kernel-image-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-cloud-tools-4.15.0-30",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-cloud-tools-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-cloud-tools-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-headers-4.15.0-30",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-headers-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-headers-4.15.0-30-generic-lpae",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-headers-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-headers-4.15.0-30-snapdragon",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-image-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-image-4.15.0-30-generic-lpae",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-image-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-image-4.15.0-30-snapdragon",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-modules-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-modules-4.15.0-30-generic-lpae",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-modules-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-modules-4.15.0-30-snapdragon",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-modules-extra-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-source-4.15.0",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-tools-4.15.0-30",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-tools-4.15.0-30-generic",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-tools-4.15.0-30-generic-lpae",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-tools-4.15.0-30-lowlatency",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-tools-4.15.0-30-snapdragon",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-tools-common",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-tools-host",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-udebs-generic",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-udebs-generic-lpae",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "linux-udebs-snapdragon",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "md-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "md-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "md-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "message-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "message-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "mouse-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "mouse-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "mouse-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "multipath-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "multipath-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "multipath-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nfs-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nfs-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nfs-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-pcmcia-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-shared-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-shared-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-shared-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-usb-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-usb-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "nic-usb-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "parport-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "parport-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "parport-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "pata-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "pcmcia-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "pcmcia-storage-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "plip-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "plip-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "plip-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "ppp-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "ppp-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "ppp-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "sata-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "sata-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "sata-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "scsi-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "scsi-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "scsi-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "serial-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "storage-core-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "storage-core-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "storage-core-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "usb-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "usb-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "usb-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "virtio-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "virtio-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "vlan-modules-4.15.0-30-generic-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "vlan-modules-4.15.0-30-generic-lpae-di",
            "binary_version": "4.15.0-30.32"
          },
          {
            "binary_name": "vlan-modules-4.15.0-30-snapdragon-di",
            "binary_version": "4.15.0-30.32"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux",
        "purl": "pkg:deb/ubuntu/linux@4.15.0-30.32?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-30.32"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.13.0-16.19",
        "4.13.0-17.20",
        "4.13.0-25.29",
        "4.13.0-32.35",
        "4.15.0-10.11",
        "4.15.0-12.13",
        "4.15.0-13.14",
        "4.15.0-15.16",
        "4.15.0-19.20",
        "4.15.0-20.21",
        "4.15.0-22.24",
        "4.15.0-23.25",
        "4.15.0-24.26",
        "4.15.0-29.31"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-aws-headers-4.15.0-1017",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-aws-tools-4.15.0-1017",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-headers-4.15.0-1017-aws",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-image-4.15.0-1017-aws",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-modules-4.15.0-1017-aws",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-tools-4.15.0-1017-aws",
            "binary_version": "4.15.0-1017.17"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-aws",
        "purl": "pkg:deb/ubuntu/linux-aws@4.15.0-1017.17?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-1017.17"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.15.0-1001.1",
        "4.15.0-1003.3",
        "4.15.0-1005.5",
        "4.15.0-1006.6",
        "4.15.0-1007.7",
        "4.15.0-1009.9",
        "4.15.0-1010.10",
        "4.15.0-1011.11",
        "4.15.0-1016.16"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-azure-cloud-tools-4.15.0-1019",
            "binary_version": "4.15.0-1019.19"
          },
          {
            "binary_name": "linux-azure-headers-4.15.0-1019",
            "binary_version": "4.15.0-1019.19"
          },
          {
            "binary_name": "linux-azure-tools-4.15.0-1019",
            "binary_version": "4.15.0-1019.19"
          },
          {
            "binary_name": "linux-cloud-tools-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19"
          },
          {
            "binary_name": "linux-headers-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19"
          },
          {
            "binary_name": "linux-modules-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19"
          },
          {
            "binary_name": "linux-modules-extra-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19"
          },
          {
            "binary_name": "linux-tools-4.15.0-1019-azure",
            "binary_version": "4.15.0-1019.19"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-azure",
        "purl": "pkg:deb/ubuntu/linux-azure@4.15.0-1019.19?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-1019.19"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.15.0-1002.2",
        "4.15.0-1003.3",
        "4.15.0-1004.4",
        "4.15.0-1008.8",
        "4.15.0-1009.9",
        "4.15.0-1012.12",
        "4.15.0-1013.13",
        "4.15.0-1014.14",
        "4.15.0-1018.18"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-gcp-headers-4.15.0-1015",
            "binary_version": "4.15.0-1015.15"
          },
          {
            "binary_name": "linux-gcp-tools-4.15.0-1015",
            "binary_version": "4.15.0-1015.15"
          },
          {
            "binary_name": "linux-headers-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15"
          },
          {
            "binary_name": "linux-image-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15"
          },
          {
            "binary_name": "linux-modules-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15"
          },
          {
            "binary_name": "linux-modules-extra-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15"
          },
          {
            "binary_name": "linux-tools-4.15.0-1015-gcp",
            "binary_version": "4.15.0-1015.15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-gcp",
        "purl": "pkg:deb/ubuntu/linux-gcp@4.15.0-1015.15?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-1015.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.15.0-1001.1",
        "4.15.0-1003.3",
        "4.15.0-1005.5",
        "4.15.0-1006.6",
        "4.15.0-1008.8",
        "4.15.0-1009.9",
        "4.15.0-1010.10",
        "4.15.0-1014.14"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-headers-4.15.0-1017-kvm",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-image-4.15.0-1017-kvm",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-kvm-headers-4.15.0-1017",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-kvm-tools-4.15.0-1017",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-modules-4.15.0-1017-kvm",
            "binary_version": "4.15.0-1017.17"
          },
          {
            "binary_name": "linux-tools-4.15.0-1017-kvm",
            "binary_version": "4.15.0-1017.17"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-kvm",
        "purl": "pkg:deb/ubuntu/linux-kvm@4.15.0-1017.17?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-1017.17"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.15.0-1002.2",
        "4.15.0-1003.3",
        "4.15.0-1004.4",
        "4.15.0-1006.6",
        "4.15.0-1008.8",
        "4.15.0-1010.10",
        "4.15.0-1011.11",
        "4.15.0-1012.12",
        "4.15.0-1016.16"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "block-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "crypto-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "fat-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "fb-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "firewire-core-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "floppy-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "fs-core-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "fs-secondary-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "input-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "ipmi-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "irda-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "kernel-image-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "linux-headers-4.15.0-1013-oem",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-1013-oem",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "linux-modules-4.15.0-1013-oem",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "linux-oem-headers-4.15.0-1013",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "linux-oem-tools-4.15.0-1013",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "linux-tools-4.15.0-1013-oem",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "linux-udebs-oem",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "md-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "message-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "mouse-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "multipath-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "nfs-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "nic-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "nic-pcmcia-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "nic-shared-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "nic-usb-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "parport-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "pata-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "pcmcia-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "pcmcia-storage-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "plip-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "ppp-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "sata-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "scsi-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "serial-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "storage-core-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "usb-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "virtio-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          },
          {
            "binary_name": "vlan-modules-4.15.0-1013-oem-di",
            "binary_version": "4.15.0-1013.16"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-oem",
        "purl": "pkg:deb/ubuntu/linux-oem@4.15.0-1013.16?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-1013.16"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.15.0-1002.3",
        "4.15.0-1004.5",
        "4.15.0-1006.9",
        "4.15.0-1008.11",
        "4.15.0-1009.12",
        "4.15.0-1012.15"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-headers-4.15.0-1018-raspi2",
            "binary_version": "4.15.0-1018.19"
          },
          {
            "binary_name": "linux-image-4.15.0-1018-raspi2",
            "binary_version": "4.15.0-1018.19"
          },
          {
            "binary_name": "linux-modules-4.15.0-1018-raspi2",
            "binary_version": "4.15.0-1018.19"
          },
          {
            "binary_name": "linux-raspi2-headers-4.15.0-1018",
            "binary_version": "4.15.0-1018.19"
          },
          {
            "binary_name": "linux-raspi2-tools-4.15.0-1018",
            "binary_version": "4.15.0-1018.19"
          },
          {
            "binary_name": "linux-tools-4.15.0-1018-raspi2",
            "binary_version": "4.15.0-1018.19"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-raspi2",
        "purl": "pkg:deb/ubuntu/linux-raspi2@4.15.0-1018.19?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.15.0-1018.19"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.13.0-1005.5",
        "4.13.0-1006.6",
        "4.13.0-1008.8",
        "4.15.0-1006.7",
        "4.15.0-1009.10",
        "4.15.0-1010.11",
        "4.15.0-1011.12",
        "4.15.0-1012.13",
        "4.15.0-1013.14",
        "4.15.0-1017.18"
      ]
    }
  ],
  "aliases": [],
  "details": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.",
  "id": "UBUNTU-CVE-2018-5390",
  "modified": "2026-04-22T07:38:32Z",
  "published": "2018-08-06T17:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5390"
    },
    {
      "type": "REPORT",
      "url": "https://www.kb.cert.org/vuls/id/962459"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3732-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3732-2"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3741-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3741-2"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3742-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3742-2"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3763-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5390"
    }
  ],
  "related": [
    "USN-3732-1",
    "USN-3732-2",
    "USN-3741-1",
    "USN-3741-2",
    "USN-3742-1",
    "USN-3742-2",
    "USN-3763-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "high",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-5390"
  ]
}

VAR-201808-1002

Vulnerability from variot - Updated: 2024-07-23 20:20

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service. An input validation error vulnerability exists in the Linux kernel version 4.9+. Description:

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. (BZ#1594915)

As a consequence, the virtualized guests sometimes mishandled the request to perform the microcode update and became unresponsive in the early boot stage. (BZ#1618386)
========================================================================== Ubuntu Security Notice USN-3742-3 August 21, 2018

linux-lts-trusty regressions

A security issue affects these releases of Ubuntu and its derivatives:

Ubuntu 12.04 ESM

Summary:

USN-3742-2 introduced regressions in the Linux Hardware Enablement (HWE) kernel for Ubuntu 12.04 ESM.

Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise ESM

Details:

USN-3742-2 introduced mitigations in the Linux Hardware Enablement (HWE) kernel for Ubuntu 12.04 ESM to address L1 Terminal Fault (L1TF) vulnerabilities (CVE-2018-3620, CVE-2018-3646). Unfortunately, the update introduced regressions that caused kernel panics when booting in some environments as well as preventing Java applications from starting.

We apologize for the inconvenience.

Original advisory details:

It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault (L1TF). A local attacker in a guest virtual machine could use this to expose sensitive information (memory from other guests or the host OS). (CVE-2018-3646)

Andrey Konovalov discovered an out-of-bounds read in the POSIX timers subsystem in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. A remote attacker could use this to cause a denial of service. A remote attacker could use this to cause a denial of service. (CVE-2018-5391)

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.04 ESM: linux-image-3.13.0-156-generic 3.13.0-156.206~precise1 linux-image-3.13.0-156-generic-lpae 3.13.0-156.206~precise1 linux-image-generic-lpae-lts-trusty 3.13.0.156.146 linux-image-generic-lts-trusty 3.13.0.156.146

After a standard system update you need to reboot your computer to make all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. 6.6) - noarch, x86_64

Bug Fix(es):

After updating the system to prevent the L1 Terminal Fault (L1TF) vulnerability, only one thread was detected on systems that offer processing of two threads on a single processor core. With this update, the "__max_smt_threads()" function has been fixed. (BZ#1625334)
Previously, a kernel panic occurred when the kernel tried to make an out of bound access to the array that describes the L1 Terminal Fault (L1TF) mitigation state on systems without Extended Page Tables (EPT) support. This update extends the array of mitigation states to cover all the states, which effectively prevents out of bound array access. Also, this update enables rejecting invalid, irrelevant values, that might be erroneously provided by the userspace. (BZ#1629633)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security and bug fix update Advisory ID: RHSA-2018:2384-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2018:2384 Issue date: 2018-08-14 CVE Names: CVE-2017-13215 CVE-2018-3620 CVE-2018-3646 CVE-2018-3693 CVE-2018-5390 CVE-2018-7566 CVE-2018-10675 ==================================================================== 1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) - noarch, ppc64le, s390x Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) - noarch, ppc64le

Description:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of instructions (a commonly used performance optimisation) in combination with handling of page-faults caused by terminated virtual to physical address resolving process. As a result, an unprivileged attacker could use this flaw to read privileged memory of the kernel or other processes and/or cross guest/host boundaries to read host memory by conducting targeted cache side-channel attacks. (CVE-2018-3620, CVE-2018-3646)
An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions past bounds check. The flaw relies on the presence of a precisely-defined instruction sequence in the privileged code and the fact that memory writes occur to an address which depends on the untrusted value. Such writes cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to influence speculative execution and/or read privileged memory by conducting targeted cache side-channel attacks. (CVE-2018-3693)
A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A remote attacker could use this flaw to trigger time and calculation expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() functions by sending specially modified packets within ongoing TCP sessions which could lead to a CPU saturation and hence a denial of service on the system. Maintaining the denial of service condition requires continuous two-way TCP sessions to a reachable open port, thus the attacks cannot be performed using spoofed IP addresses. (CVE-2018-5390)
kernel: crypto: privilege escalation in skcipher_recvmsg function (CVE-2017-13215)
kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact (CVE-2018-10675)
kernel: race condition in snd_seq_write() may lead to UAF or OOB access (CVE-2018-7566)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Intel OSSIRT (Intel.com) for reporting CVE-2018-3620 and CVE-2018-3646; Vladimir Kiriansky (MIT) and Carl Waldspurger (Carl Waldspurger Consulting) for reporting CVE-2018-3693; and Juha-Matti Tilli (Aalto University, Department of Communications and Networking and Nokia Bell Labs) for reporting CVE-2018-5390.

Bug Fix(es):

These updated kernel packages include also numerous bug fixes. Space precludes documenting all of the bug fixes in this advisory. See the descriptions in the related Knowledge Article:

https://access.redhat.com/articles/3527791

Solution:

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Bugs fixed (https://bugzilla.redhat.com/):

1535173 - CVE-2017-13215 kernel: crypto: privilege escalation in skcipher_recvmsg function 1550142 - CVE-2018-7566 kernel: race condition in snd_seq_write() may lead to UAF or OOB-access 1575065 - CVE-2018-10675 kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact 1581650 - CVE-2018-3693 Kernel: speculative bounds check bypass store 1585005 - CVE-2018-3646 Kernel: hw: cpu: L1 terminal fault (L1TF) 1601704 - CVE-2018-5390 kernel: TCP segments with random offsets allow a remote denial of service (SegmentSmack)

Package List:

Red Hat Enterprise Linux Client (v. 7):

Source: kernel-3.10.0-862.11.6.el7.src.rpm

noarch: kernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm kernel-doc-3.10.0-862.11.6.el7.noarch.rpm

x86_64: kernel-3.10.0-862.11.6.el7.x86_64.rpm kernel-debug-3.10.0-862.11.6.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm kernel-debug-devel-3.10.0-862.11.6.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm kernel-devel-3.10.0-862.11.6.el7.x86_64.rpm kernel-headers-3.10.0-862.11.6.el7.x86_64.rpm kernel-tools-3.10.0-862.11.6.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm kernel-tools-libs-3.10.0-862.11.6.el7.x86_64.rpm perf-3.10.0-862.11.6.el7.x86_64.rpm perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm python-perf-3.10.0-862.11.6.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm

Red Hat Enterprise Linux Client Optional (v. 7):

x86_64: kernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-862.11.6.el7.x86_64.rpm perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source: kernel-3.10.0-862.11.6.el7.src.rpm

noarch: kernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm kernel-doc-3.10.0-862.11.6.el7.noarch.rpm

Red Hat Enterprise Linux ComputeNode Optional (v. 7):

Red Hat Enterprise Linux Server (v. 7):

Source: kernel-3.10.0-862.11.6.el7.src.rpm

noarch: kernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm kernel-doc-3.10.0-862.11.6.el7.noarch.rpm

ppc64: kernel-3.10.0-862.11.6.el7.ppc64.rpm kernel-bootwrapper-3.10.0-862.11.6.el7.ppc64.rpm kernel-debug-3.10.0-862.11.6.el7.ppc64.rpm kernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm kernel-debug-devel-3.10.0-862.11.6.el7.ppc64.rpm kernel-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-862.11.6.el7.ppc64.rpm kernel-devel-3.10.0-862.11.6.el7.ppc64.rpm kernel-headers-3.10.0-862.11.6.el7.ppc64.rpm kernel-tools-3.10.0-862.11.6.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm kernel-tools-libs-3.10.0-862.11.6.el7.ppc64.rpm perf-3.10.0-862.11.6.el7.ppc64.rpm perf-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm python-perf-3.10.0-862.11.6.el7.ppc64.rpm python-perf-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm

ppc64le: kernel-3.10.0-862.11.6.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-862.11.6.el7.ppc64le.rpm kernel-debug-3.10.0-862.11.6.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm kernel-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-862.11.6.el7.ppc64le.rpm kernel-devel-3.10.0-862.11.6.el7.ppc64le.rpm kernel-headers-3.10.0-862.11.6.el7.ppc64le.rpm kernel-tools-3.10.0-862.11.6.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm kernel-tools-libs-3.10.0-862.11.6.el7.ppc64le.rpm perf-3.10.0-862.11.6.el7.ppc64le.rpm perf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm python-perf-3.10.0-862.11.6.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm

s390x: kernel-3.10.0-862.11.6.el7.s390x.rpm kernel-debug-3.10.0-862.11.6.el7.s390x.rpm kernel-debug-debuginfo-3.10.0-862.11.6.el7.s390x.rpm kernel-debug-devel-3.10.0-862.11.6.el7.s390x.rpm kernel-debuginfo-3.10.0-862.11.6.el7.s390x.rpm kernel-debuginfo-common-s390x-3.10.0-862.11.6.el7.s390x.rpm kernel-devel-3.10.0-862.11.6.el7.s390x.rpm kernel-headers-3.10.0-862.11.6.el7.s390x.rpm kernel-kdump-3.10.0-862.11.6.el7.s390x.rpm kernel-kdump-debuginfo-3.10.0-862.11.6.el7.s390x.rpm kernel-kdump-devel-3.10.0-862.11.6.el7.s390x.rpm perf-3.10.0-862.11.6.el7.s390x.rpm perf-debuginfo-3.10.0-862.11.6.el7.s390x.rpm python-perf-3.10.0-862.11.6.el7.s390x.rpm python-perf-debuginfo-3.10.0-862.11.6.el7.s390x.rpm

Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7):

noarch: kernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm kernel-doc-3.10.0-862.11.6.el7.noarch.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

ppc64: kernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm kernel-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-862.11.6.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm kernel-tools-libs-devel-3.10.0-862.11.6.el7.ppc64.rpm perf-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm python-perf-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm

ppc64le: kernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm kernel-debug-devel-3.10.0-862.11.6.el7.ppc64le.rpm kernel-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-862.11.6.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-862.11.6.el7.ppc64le.rpm perf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm

Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7):

noarch: kernel-doc-3.10.0-862.11.6.el7.noarch.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source: kernel-3.10.0-862.11.6.el7.src.rpm

noarch: kernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm kernel-doc-3.10.0-862.11.6.el7.noarch.rpm

Red Hat Enterprise Linux Workstation Optional (v. 7):

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/

References:

https://access.redhat.com/security/cve/CVE-2017-13215 https://access.redhat.com/security/cve/CVE-2018-3620 https://access.redhat.com/security/cve/CVE-2018-3646 https://access.redhat.com/security/cve/CVE-2018-3693 https://access.redhat.com/security/cve/CVE-2018-5390 https://access.redhat.com/security/cve/CVE-2018-7566 https://access.redhat.com/security/cve/CVE-2018-10675 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/security/vulnerabilities/L1TF https://access.redhat.com/articles/3527791

Contact:

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/

iQIVAwUBW3MjONzjgjWX9erEAQioYA/9Ge//K50oCrGaDEMuI2PHYLcztiZt9meh C578LP6sC/HT17VAbV8C+Tvy9QBCU80t4mGU4GOPu8Q5HzZQv45n0NtdRTGCC+yb A1bFcf0vhXIALNsuDEZN9g5SwUBapxkRoh43R+E7ITCQWp0XIPaSjYgGNqpTTuD/ lxRCzc10HhxW+pUY+ERFcK6c0poc14FtSqM3GqZe10FhkykdIlmngFjkthjzefXO dUkYDy53G+iAdTrVFI03h3Wt+UBMmNwKtu8ydqtAxZ0zDZIP5ijASOtM4mlf77ec VsNn7OWythkpTcpa+Sh5+dk6DK+lU2vziVsEocYNpzB+T/aHC9n/+I8ibfp3B4DC k4lYqZJQDFR2jVABjkOVS9dWFlOYKFmU2JBwsqdRvt3rgVFXEH3n5OQydHGFskmP NFwDbRAFlwo3zjd9KuiQzdFTOensc35+eSHykY8nxY2hGMH5gGccShFL4C7N2mtx s8JnzA/Zj00VHMg8qIHGfQ7RSd/xyEJ5vn87WZcTshTNli6x1/0VnzpTKG85Ga+K S2EJDXFP9LqCT98TL1RDJmCTtfDjU3I/gbgu5xFaofQZfV48qAUomUQ2E+MhQAOX eBr/OvlfFP8HEwVEJBDtXKxxs1LgmjTSqOtfP8AvS5zI9/Y6o56i0d7Ng1CcaGKP lZgWJhC3Yik=i4St -----END PGP SIGNATURE-----

-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . 7.3) - ppc64, ppc64le, x86_64

Consequently, the node was not available. This update fixes an irq latency source in memory compaction. As a result, nodes no longer get into "NodeNotReady" state under the described circumstances. (BZ#1596281)
Previously, the kernel source code was missing support to report the Speculative Store Bypass Disable (SSBD) vulnerability status on IBM Power Systems and the little-endian variants of IBM Power Systems. As a consequence, the /sys/devices/system/cpu/vulnerabilities/spec_store_bypass file incorrectly reported "Not affected" on both CPU architectures. This fix updates the kernel source code to properly report the SSBD status either as "Vulnerable" or "Mitigation: Kernel entry/exit barrier (TYPE)" where TYPE is one of "eieio", "hwsync", "fallback", or "unknown". As a consequence, the VMs sometimes became unresponsive when booting. This update applies an upstream patch to avoid early microcode update when running under a hypervisor. As a result, kernel hangs no longer occur in the described scenario. (BZ#1618388)

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201808-1002",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "big-ip advanced firewall manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "big-ip application acceleration manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "expressway",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.11"
      },
      {
        "model": "collaboration meeting rooms",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.0"
      },
      {
        "model": "telepresence conductor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "xc4.3.3"
      },
      {
        "model": "big-ip domain name system",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "expressway series",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "enterprise linux server eus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.5"
      },
      {
        "model": "telepresence conductor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "xc4.3.1"
      },
      {
        "model": "big-ip application security manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "big-ip fraud protection service",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "big-ip analytics",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "big-ip global traffic manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "big-ip fraud protection service",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "enterprise linux server aus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.3"
      },
      {
        "model": "big-ip advanced firewall manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "enterprise linux server eus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "6.7"
      },
      {
        "model": "big-ip edge gateway",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "big-ip link controller",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "big-ip application acceleration manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "big-ip webaccelerator",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "enterprise linux server aus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.4"
      },
      {
        "model": "big-ip application acceleration manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "big-ip application acceleration manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "big-ip link controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "big-ip application security manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "traffix systems signaling delivery controller",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "5.0.0"
      },
      {
        "model": "big-ip domain name system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "digital network architecture center",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.2"
      },
      {
        "model": "big-ip application security manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "18.04"
      },
      {
        "model": "big-ip application acceleration manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "enterprise linux server aus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.2"
      },
      {
        "model": "telepresence video communication server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.11"
      },
      {
        "model": "virtualization",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "4.0"
      },
      {
        "model": "aruba airwave amp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "hp",
        "version": "8.2.7.1"
      },
      {
        "model": "big-ip policy enforcement manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "kernel",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "linux",
        "version": "4.9"
      },
      {
        "model": "big-ip advanced firewall manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "big-ip application acceleration manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "enterprise linux server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.0"
      },
      {
        "model": "big-ip edge gateway",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "big-ip policy enforcement manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "enterprise linux server eus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.3"
      },
      {
        "model": "big-ip edge gateway",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "expressway",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10.1"
      },
      {
        "model": "big-ip webaccelerator",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "big-ip link controller",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "aruba clearpass policy manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "hp",
        "version": "6.6.0"
      },
      {
        "model": "big-ip fraud protection service",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "big-ip global traffic manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "advanced core operating system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "a10networks",
        "version": "4.1.4"
      },
      {
        "model": "expressway",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10.3"
      },
      {
        "model": "big-ip local traffic manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.0.0"
      },
      {
        "model": "enterprise linux desktop",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.0"
      },
      {
        "model": "enterprise linux server eus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.4"
      },
      {
        "model": "big-ip edge gateway",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "big-ip analytics",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "expressway",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10.4"
      },
      {
        "model": "big-ip domain name system",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "big-ip domain name system",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "big-ip edge gateway",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "model": "big-ip analytics",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "aruba clearpass policy manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "hp",
        "version": "6.7.5"
      },
      {
        "model": "threat grid-cloud",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "telepresence conductor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "xc4.3.2"
      },
      {
        "model": "enterprise linux server eus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.2"
      },
      {
        "model": "traffix systems signaling delivery controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "4.4.0"
      },
      {
        "model": "webex hybrid data security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "big-ip access policy manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "big-ip fraud protection service",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "enterprise linux server tus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "6.6"
      },
      {
        "model": "big-ip advanced firewall manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "big-ip edge gateway",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "14.04"
      },
      {
        "model": "telepresence video communication server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10.1"
      },
      {
        "model": "big-ip fraud protection service",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "big-ip global traffic manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "big-ip local traffic manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "big-ip webaccelerator",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "kernel",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "linux",
        "version": "4.18"
      },
      {
        "model": "big-ip webaccelerator",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "big-ip link controller",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "big-ip advanced firewall manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "telepresence video communication server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10.4"
      },
      {
        "model": "big-ip advanced firewall manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "big-ip application acceleration manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "big-ip domain name system",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "big-ip webaccelerator",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "advanced core operating system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "a10networks",
        "version": "4.1.1"
      },
      {
        "model": "big-ip application security manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "big-ip analytics",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "big-ip global traffic manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "big-ip global traffic manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "big-ip local traffic manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "big-ip link controller",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "enterprise linux server eus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "6.4"
      },
      {
        "model": "big-ip link controller",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "enterprise linux server tus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.3"
      },
      {
        "model": "big-ip policy enforcement manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "enterprise linux server aus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "6.4"
      },
      {
        "model": "big-ip local traffic manager",
        "scope": "gt",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "big-ip policy enforcement manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.1.1"
      },
      {
        "model": "advanced core operating system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "a10networks",
        "version": "4.1.0"
      },
      {
        "model": "big-ip application security manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "8.0"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "16.04"
      },
      {
        "model": "big-ip application security manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "big-ip fraud protection service",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "enterprise linux server tus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.4"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "12.04"
      },
      {
        "model": "big-ip advanced firewall manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "expressway",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10.2"
      },
      {
        "model": "advanced core operating system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "a10networks",
        "version": "3.2.2"
      },
      {
        "model": "kernel",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "linux",
        "version": "4.18"
      },
      {
        "model": "big-ip global traffic manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "big-ip local traffic manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "meeting management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.0"
      },
      {
        "model": "big-ip link controller",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "big-ip policy enforcement manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "big-ip fraud protection service",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "big-ip policy enforcement manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "telepresence video communication server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10.3"
      },
      {
        "model": "big-ip edge gateway",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1."
      },
      {
        "model": "enterprise linux server tus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.2"
      },
      {
        "model": "big-ip domain name system",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "expressway",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10"
      },
      {
        "model": "big-ip local traffic manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "big-ip application security manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "aruba clearpass policy manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "hp",
        "version": "6.7.0"
      },
      {
        "model": "aruba clearpass policy manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "hp",
        "version": "6.6.9"
      },
      {
        "model": "big-ip analytics",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.3"
      },
      {
        "model": "meeting management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.0.1"
      },
      {
        "model": "big-ip domain name system",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "13.0.0"
      },
      {
        "model": "big-ip policy enforcement manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "big-ip webaccelerator",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "enterprise linux server aus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "6.6"
      },
      {
        "model": "telepresence video communication server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10.2"
      },
      {
        "model": "big-ip analytics",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.5.1"
      },
      {
        "model": "big-ip webaccelerator",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "f5",
        "version": "14.0.0"
      },
      {
        "model": "big-ip analytics",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "network assurance engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.1\\(1a\\)"
      },
      {
        "model": "big-ip global traffic manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "big-ip local traffic manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "enterprise linux server aus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "6.5"
      },
      {
        "model": "webex video mesh",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "telepresence conductor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "xc4.3"
      },
      {
        "model": "traffix systems signaling delivery controller",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "5.1.0"
      },
      {
        "model": "telepresence video communication server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "x8.10"
      },
      {
        "model": "enterprise linux workstation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.0"
      },
      {
        "model": "advanced core operating system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "a10networks",
        "version": "4.1.2"
      },
      {
        "model": "telepresence conductor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "xc4.3.4"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "adtran",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "akamai",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "amazon",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "arista",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "check point",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "debian gnu linux",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "f5",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "juniper",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "ubuntu",
        "version": null
      },
      {
        "model": "big-ip application security manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "f5",
        "version": "12.1.1"
      },
      {
        "model": "big-ip application security manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "f5",
        "version": "11.6.3"
      },
      {
        "model": "big-ip application security manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "f5",
        "version": "11.6.2"
      },
      {
        "model": "big-ip application security manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "f5",
        "version": "12.1.0"
      },
      {
        "model": "big-ip application security manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "f5",
        "version": "11.6.1"
      },
      {
        "model": "big-ip application security manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "f5",
        "version": "12.1.2"
      },
      {
        "model": "big-ip application security manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "f5",
        "version": "12.1.3"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#962459"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-5390"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.18",
                "versionStartIncluding": "4.9",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:4.18:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:4.18:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:4.18:rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:4.18:rc4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:4.18:rc5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:4.18:rc6:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "6.6.9",
                "versionStartIncluding": "6.6.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "6.7.5",
                "versionStartIncluding": "6.7.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:aruba_airwave_amp:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.2.7.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "12.1.3",
                "versionStartIncluding": "12.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_local_traffic_manager:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_analytics:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_access_policy_manager:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_application_security_manager:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_domain_name_system:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_edge_gateway:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_fraud_protection_service:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_global_traffic_manager:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_link_controller:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_webaccelerator:14.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartIncluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:traffix_systems_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:traffix_systems_signaling_delivery_controller:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "5.1.0",
                "versionStartIncluding": "5.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "13.1.1",
                "versionStartExcluding": "13.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1.",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.6.3",
                "versionStartIncluding": "11.5.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:a10networks:advanced_core_operating_system:3.2.2:p5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:a10networks:advanced_core_operating_system:3.2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.0:p11:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.1:p8:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.2:p4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:a10networks:advanced_core_operating_system:4.1.4:p1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:cisco:meeting_management:1.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:meeting_management:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:expressway_series:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:collaboration_meeting_rooms:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:webex_video_mesh:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:webex_hybrid_data_security:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:network_assurance_engine:2.1\\(1a\\):*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:digital_network_architecture_center:1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:threat_grid-cloud:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:expressway:x8.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:expressway:x8.10.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:expressway:x8.10.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:expressway:x8.10.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:expressway:x8.10.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:cisco:expressway:x8.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.1:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.2:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.3:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.10.4:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_video_communication_server_firmware:x8.11:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:cisco:telepresence_video_communication_server:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.1:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.2:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.3:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:cisco:telepresence_conductor_firmware:xc4.3.4:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:cisco:telepresence_conductor:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2018-5390"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Juha-Matti Tilli",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2018-5390",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "VHN-135421",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2018-5390",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201808-175",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-135421",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-135421"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-5390"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service. An input validation error vulnerability exists in the Linux kernel version 4.9+. Description:\n\nThe kernel-rt packages provide the Real Time Linux Kernel, which enables\nfine-tuning for systems with extremely high determinism requirements. \n(BZ#1594915)\n\n4. As a consequence, the\nvirtualized guests sometimes mishandled the request to perform the\nmicrocode update and became unresponsive in the early boot stage. (BZ#1618386)\n\n4. ==========================================================================\nUbuntu Security Notice USN-3742-3\nAugust 21, 2018\n\nlinux-lts-trusty regressions\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 12.04 ESM\n\nSummary:\n\nUSN-3742-2 introduced regressions in the Linux Hardware Enablement\n(HWE) kernel for Ubuntu 12.04 ESM. \n\nSoftware Description:\n- linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise ESM\n\nDetails:\n\nUSN-3742-2 introduced mitigations in the Linux Hardware Enablement\n(HWE) kernel for Ubuntu 12.04 ESM to address L1 Terminal Fault (L1TF)\nvulnerabilities (CVE-2018-3620, CVE-2018-3646). Unfortunately, the\nupdate introduced regressions that caused kernel panics when booting\nin some environments as well as preventing Java applications from\nstarting. \n\nWe apologize for the inconvenience. \n\nOriginal advisory details:\n\n It was discovered that memory present in the L1 data cache of an Intel CPU\n core may be exposed to a malicious process that is executing on the CPU\n core. This vulnerability is also known as L1 Terminal Fault (L1TF). A local\n attacker in a guest virtual machine could use this to expose sensitive\n information (memory from other guests or the host OS). (CVE-2018-3646)\n\n It was discovered that memory present in the L1 data cache of an Intel CPU\n core may be exposed to a malicious process that is executing on the CPU\n core. This vulnerability is also known as L1 Terminal Fault (L1TF). (CVE-2018-3620)\n\n Andrey Konovalov discovered an out-of-bounds read in the POSIX\n timers subsystem in the Linux kernel. A local attacker could use\n this to cause a denial of service (system crash) or expose sensitive\n information. A remote attacker could use this to cause a\n denial of service. A remote attacker could use this to\n cause a denial of service. (CVE-2018-5391)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 12.04 ESM:\n  linux-image-3.13.0-156-generic  3.13.0-156.206~precise1\n  linux-image-3.13.0-156-generic-lpae  3.13.0-156.206~precise1\n  linux-image-generic-lpae-lts-trusty  3.13.0.156.146\n  linux-image-generic-lts-trusty  3.13.0.156.146\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\nATTENTION: Due to an unavoidable ABI change the kernel updates have\nbeen given a new version number, which requires you to recompile and\nreinstall all third party kernel modules you might have installed. \nUnless you manually uninstalled the standard kernel metapackages\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,\nlinux-powerpc), a standard system upgrade will automatically perform\nthis as well. 6.6) - noarch, x86_64\n\n3. \n\nBug Fix(es):\n\n* After updating the system to prevent the L1 Terminal Fault (L1TF)\nvulnerability, only one thread was detected on systems that offer\nprocessing of two threads on a single processor core. With this update, the\n\"__max_smt_threads()\" function has been fixed. (BZ#1625334)\n\n* Previously, a kernel panic occurred when the kernel tried to make an out\nof bound access to the array that describes the L1 Terminal Fault (L1TF)\nmitigation state on systems without Extended Page Tables (EPT) support. \nThis update extends the array of mitigation states to cover all the states,\nwhich effectively prevents out of bound array access. Also, this update\nenables rejecting invalid, irrelevant values, that might be erroneously\nprovided by the userspace. (BZ#1629633)\n\n4. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n====================================================================                   \nRed Hat Security Advisory\n\nSynopsis:          Important: kernel security and bug fix update\nAdvisory ID:       RHSA-2018:2384-01\nProduct:           Red Hat Enterprise Linux\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2018:2384\nIssue date:        2018-08-14\nCVE Names:         CVE-2017-13215 CVE-2018-3620 CVE-2018-3646\n                   CVE-2018-3693 CVE-2018-5390 CVE-2018-7566\n                   CVE-2018-10675\n====================================================================\n1. Summary:\n\nAn update for kernel is now available for Red Hat Enterprise Linux 7. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Client (v. 7) - noarch, x86_64\nRed Hat Enterprise Linux Client Optional (v. 7) - x86_64\nRed Hat Enterprise Linux ComputeNode (v. 7) - noarch, x86_64\nRed Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64\nRed Hat Enterprise Linux Server (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64\nRed Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, x86_64\nRed Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64\nRed Hat Enterprise Linux Workstation Optional (v. 7) - x86_64\nRed Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) - noarch, ppc64le, s390x\nRed Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) - noarch, ppc64le\n\n3. Description:\n\nThe kernel packages contain the Linux kernel, the core of any Linux\noperating system. \n\nSecurity Fix(es):\n\n* Modern operating systems implement virtualization of physical memory to\nefficiently use available system resources and provide inter-domain\nprotection through access control and isolation. The L1TF issue was found\nin the way the x86 microprocessor designs have implemented speculative\nexecution of instructions (a commonly used performance optimisation) in\ncombination with handling of page-faults caused by terminated virtual to\nphysical address resolving process. As a result, an unprivileged attacker\ncould use this flaw to read privileged memory of the kernel or other\nprocesses and/or cross guest/host boundaries to read host memory by\nconducting targeted cache side-channel attacks. (CVE-2018-3620,\nCVE-2018-3646)\n\n* An industry-wide issue was found in the way many modern microprocessor\ndesigns have implemented speculative execution of instructions past bounds\ncheck. The flaw relies on the presence of a precisely-defined instruction\nsequence in the privileged code and the fact that memory writes occur to an\naddress which depends on the untrusted value. Such writes cause an update\ninto the microprocessor\u0027s data cache even for speculatively executed\ninstructions that never actually commit (retire). As a result, an\nunprivileged attacker could use this flaw to influence speculative\nexecution and/or read privileged memory by conducting targeted cache\nside-channel attacks. (CVE-2018-3693)\n\n* A flaw named SegmentSmack was found in the way the Linux kernel handled\nspecially crafted TCP packets. A remote attacker could use this flaw to\ntrigger time and calculation expensive calls to tcp_collapse_ofo_queue()\nand tcp_prune_ofo_queue() functions by sending specially modified packets\nwithin ongoing TCP sessions which could lead to a CPU saturation and hence\na denial of service on the system. Maintaining the denial of service\ncondition requires continuous two-way TCP sessions to a reachable open\nport, thus the attacks cannot be performed using spoofed IP addresses. \n(CVE-2018-5390)\n\n* kernel: crypto: privilege escalation in skcipher_recvmsg function\n(CVE-2017-13215)\n\n* kernel: mm: use-after-free in do_get_mempolicy function allows local DoS\nor other unspecified impact (CVE-2018-10675)\n\n* kernel: race condition in snd_seq_write() may lead to UAF or OOB access\n(CVE-2018-7566)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, and other related information, refer to the CVE page(s) listed in\nthe References section. \n\nRed Hat would like to thank Intel OSSIRT (Intel.com) for reporting\nCVE-2018-3620 and CVE-2018-3646; Vladimir Kiriansky (MIT) and Carl\nWaldspurger (Carl Waldspurger Consulting) for reporting CVE-2018-3693; and\nJuha-Matti Tilli (Aalto University, Department of Communications and\nNetworking and Nokia Bell Labs) for reporting CVE-2018-5390. \n\nBug Fix(es):\n\nThese updated kernel packages include also numerous bug fixes. Space\nprecludes documenting all of the bug fixes in this advisory. See the\ndescriptions in the related Knowledge Article:\n\nhttps://access.redhat.com/articles/3527791\n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect. \n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1535173 - CVE-2017-13215 kernel: crypto: privilege escalation in skcipher_recvmsg function\n1550142 - CVE-2018-7566 kernel: race condition in snd_seq_write() may lead to UAF or OOB-access\n1575065 - CVE-2018-10675 kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact\n1581650 - CVE-2018-3693 Kernel: speculative bounds check bypass store\n1585005 - CVE-2018-3646 Kernel: hw: cpu: L1 terminal fault (L1TF)\n1601704 - CVE-2018-5390 kernel: TCP segments with random offsets allow a remote denial of service (SegmentSmack)\n\n6. Package List:\n\nRed Hat Enterprise Linux Client (v. 7):\n\nSource:\nkernel-3.10.0-862.11.6.el7.src.rpm\n\nnoarch:\nkernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm\nkernel-doc-3.10.0-862.11.6.el7.noarch.rpm\n\nx86_64:\nkernel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-devel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-devel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-headers-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-libs-3.10.0-862.11.6.el7.x86_64.rpm\nperf-3.10.0-862.11.6.el7.x86_64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Client Optional (v. 7):\n\nx86_64:\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-libs-devel-3.10.0-862.11.6.el7.x86_64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\n\nRed Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nkernel-3.10.0-862.11.6.el7.src.rpm\n\nnoarch:\nkernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm\nkernel-doc-3.10.0-862.11.6.el7.noarch.rpm\n\nx86_64:\nkernel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-devel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-devel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-headers-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-libs-3.10.0-862.11.6.el7.x86_64.rpm\nperf-3.10.0-862.11.6.el7.x86_64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\n\nRed Hat Enterprise Linux ComputeNode Optional (v. 7):\n\nx86_64:\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-libs-devel-3.10.0-862.11.6.el7.x86_64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Server (v. 7):\n\nSource:\nkernel-3.10.0-862.11.6.el7.src.rpm\n\nnoarch:\nkernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm\nkernel-doc-3.10.0-862.11.6.el7.noarch.rpm\n\nppc64:\nkernel-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-bootwrapper-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-debug-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-debug-devel-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-debuginfo-common-ppc64-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-devel-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-headers-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-tools-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-tools-libs-3.10.0-862.11.6.el7.ppc64.rpm\nperf-3.10.0-862.11.6.el7.ppc64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\npython-perf-3.10.0-862.11.6.el7.ppc64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\n\nppc64le:\nkernel-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-bootwrapper-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debug-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debuginfo-common-ppc64le-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-devel-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-headers-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-libs-3.10.0-862.11.6.el7.ppc64le.rpm\nperf-3.10.0-862.11.6.el7.ppc64le.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\npython-perf-3.10.0-862.11.6.el7.ppc64le.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\n\ns390x:\nkernel-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debug-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debug-devel-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debuginfo-common-s390x-3.10.0-862.11.6.el7.s390x.rpm\nkernel-devel-3.10.0-862.11.6.el7.s390x.rpm\nkernel-headers-3.10.0-862.11.6.el7.s390x.rpm\nkernel-kdump-3.10.0-862.11.6.el7.s390x.rpm\nkernel-kdump-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\nkernel-kdump-devel-3.10.0-862.11.6.el7.s390x.rpm\nperf-3.10.0-862.11.6.el7.s390x.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\npython-perf-3.10.0-862.11.6.el7.s390x.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\n\nx86_64:\nkernel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-devel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-devel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-headers-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-libs-3.10.0-862.11.6.el7.x86_64.rpm\nperf-3.10.0-862.11.6.el7.x86_64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\n\nRed Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7):\n\nnoarch:\nkernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm\nkernel-doc-3.10.0-862.11.6.el7.noarch.rpm\n\nppc64le:\nkernel-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-bootwrapper-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debug-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debuginfo-common-ppc64le-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-devel-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-headers-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-libs-3.10.0-862.11.6.el7.ppc64le.rpm\nperf-3.10.0-862.11.6.el7.ppc64le.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\npython-perf-3.10.0-862.11.6.el7.ppc64le.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\n\ns390x:\nkernel-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debug-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debug-devel-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\nkernel-debuginfo-common-s390x-3.10.0-862.11.6.el7.s390x.rpm\nkernel-devel-3.10.0-862.11.6.el7.s390x.rpm\nkernel-headers-3.10.0-862.11.6.el7.s390x.rpm\nkernel-kdump-3.10.0-862.11.6.el7.s390x.rpm\nkernel-kdump-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\nkernel-kdump-devel-3.10.0-862.11.6.el7.s390x.rpm\nperf-3.10.0-862.11.6.el7.s390x.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\npython-perf-3.10.0-862.11.6.el7.s390x.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.s390x.rpm\n\nRed Hat Enterprise Linux Server Optional (v. 7):\n\nppc64:\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-debuginfo-common-ppc64-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\nkernel-tools-libs-devel-3.10.0-862.11.6.el7.ppc64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.ppc64.rpm\n\nppc64le:\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debug-devel-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debuginfo-common-ppc64le-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-libs-devel-3.10.0-862.11.6.el7.ppc64le.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\n\nx86_64:\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-libs-devel-3.10.0-862.11.6.el7.x86_64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\n\nRed Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7):\n\nnoarch:\nkernel-doc-3.10.0-862.11.6.el7.noarch.rpm\n\nppc64le:\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debug-devel-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-debuginfo-common-ppc64le-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\nkernel-tools-libs-devel-3.10.0-862.11.6.el7.ppc64le.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.ppc64le.rpm\n\nRed Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nkernel-3.10.0-862.11.6.el7.src.rpm\n\nnoarch:\nkernel-abi-whitelists-3.10.0-862.11.6.el7.noarch.rpm\nkernel-doc-3.10.0-862.11.6.el7.noarch.rpm\n\nx86_64:\nkernel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debug-devel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-devel-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-headers-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-libs-3.10.0-862.11.6.el7.x86_64.rpm\nperf-3.10.0-862.11.6.el7.x86_64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation Optional (v. 7):\n\nx86_64:\nkernel-debug-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\nkernel-tools-libs-devel-3.10.0-862.11.6.el7.x86_64.rpm\nperf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-862.11.6.el7.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2017-13215\nhttps://access.redhat.com/security/cve/CVE-2018-3620\nhttps://access.redhat.com/security/cve/CVE-2018-3646\nhttps://access.redhat.com/security/cve/CVE-2018-3693\nhttps://access.redhat.com/security/cve/CVE-2018-5390\nhttps://access.redhat.com/security/cve/CVE-2018-7566\nhttps://access.redhat.com/security/cve/CVE-2018-10675\nhttps://access.redhat.com/security/updates/classification/#important\nhttps://access.redhat.com/security/vulnerabilities/L1TF\nhttps://access.redhat.com/articles/3527791\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2018 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\nlZgWJhC3Yik=i4St\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. 7.3) - ppc64, ppc64le, x86_64\n\n3. Consequently, the node was not available. This\nupdate fixes an irq latency source in memory compaction. As a result, nodes\nno longer get into \"NodeNotReady\" state under the described circumstances. \n(BZ#1596281)\n\n* Previously, the kernel source code was missing support to report the\nSpeculative Store Bypass Disable (SSBD) vulnerability status on IBM Power\nSystems and the little-endian variants of IBM Power Systems. As a\nconsequence, the /sys/devices/system/cpu/vulnerabilities/spec_store_bypass\nfile incorrectly reported \"Not affected\" on both CPU architectures. This\nfix updates the kernel source code to properly report the SSBD status\neither as \"Vulnerable\" or \"Mitigation: Kernel entry/exit barrier (TYPE)\"\nwhere TYPE is one of \"eieio\", \"hwsync\", \"fallback\", or \"unknown\". As a\nconsequence, the VMs sometimes became unresponsive when booting. This\nupdate applies an upstream patch to avoid early microcode update when\nrunning under a hypervisor. As a result, kernel hangs no longer occur in\nthe described scenario. (BZ#1618388)\n\n4",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2018-5390"
      },
      {
        "db": "CERT/CC",
        "id": "VU#962459"
      },
      {
        "db": "VULHUB",
        "id": "VHN-135421"
      },
      {
        "db": "PACKETSTORM",
        "id": "148915"
      },
      {
        "db": "PACKETSTORM",
        "id": "148841"
      },
      {
        "db": "PACKETSTORM",
        "id": "148907"
      },
      {
        "db": "PACKETSTORM",
        "id": "148914"
      },
      {
        "db": "PACKETSTORM",
        "id": "149544"
      },
      {
        "db": "PACKETSTORM",
        "id": "149024"
      },
      {
        "db": "PACKETSTORM",
        "id": "149826"
      },
      {
        "db": "PACKETSTORM",
        "id": "148916"
      },
      {
        "db": "PACKETSTORM",
        "id": "148899"
      },
      {
        "db": "PACKETSTORM",
        "id": "149546"
      }
    ],
    "trust": 2.61
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2018-5390",
        "trust": 2.7
      },
      {
        "db": "CERT/CC",
        "id": "VU#962459",
        "trust": 2.5
      },
      {
        "db": "SECTRACK",
        "id": "1041434",
        "trust": 1.7
      },
      {
        "db": "SECTRACK",
        "id": "1041424",
        "trust": 1.7
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2019/07/06/4",
        "trust": 1.7
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2019/07/06/3",
        "trust": 1.7
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2019/06/28/2",
        "trust": 1.7
      },
      {
        "db": "SIEMENS",
        "id": "SSA-377115",
        "trust": 1.7
      },
      {
        "db": "BID",
        "id": "104976",
        "trust": 1.7
      },
      {
        "db": "JUNIPER",
        "id": "JSA10876",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1328",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.2021.2",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.2021",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.2497",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.1315",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2018.2468.7",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.2661",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.2262",
        "trust": 0.6
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-20-105-05",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "149544",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "148841",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "149542",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "149545",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "149231",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "148850",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "149310",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-135421",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "148915",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "148907",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "148914",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "149024",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "149826",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "148916",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "148899",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "149546",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#962459"
      },
      {
        "db": "VULHUB",
        "id": "VHN-135421"
      },
      {
        "db": "PACKETSTORM",
        "id": "148915"
      },
      {
        "db": "PACKETSTORM",
        "id": "148841"
      },
      {
        "db": "PACKETSTORM",
        "id": "148907"
      },
      {
        "db": "PACKETSTORM",
        "id": "148914"
      },
      {
        "db": "PACKETSTORM",
        "id": "149544"
      },
      {
        "db": "PACKETSTORM",
        "id": "149024"
      },
      {
        "db": "PACKETSTORM",
        "id": "149826"
      },
      {
        "db": "PACKETSTORM",
        "id": "148916"
      },
      {
        "db": "PACKETSTORM",
        "id": "148899"
      },
      {
        "db": "PACKETSTORM",
        "id": "149546"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-5390"
      }
    ]
  },
  "id": "VAR-201808-1002",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-135421"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2024-07-23T20:20:15.857000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Linux kernel Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=83981"
      }
    ],
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-400",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-20",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-135421"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-5390"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.9,
        "url": "http://www.securityfocus.com/bid/104976"
      },
      {
        "trust": 2.5,
        "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e"
      },
      {
        "trust": 2.5,
        "url": "https://support.f5.com/csp/article/k95343321"
      },
      {
        "trust": 2.5,
        "url": "https://usn.ubuntu.com/3732-2/"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2018:2384"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2018:2395"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2018:2785"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2018:2790"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2018:2924"
      },
      {
        "trust": 1.7,
        "url": "https://www.kb.cert.org/vuls/id/962459"
      },
      {
        "trust": 1.7,
        "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180824-linux-tcp"
      },
      {
        "trust": 1.7,
        "url": "http://www.arubanetworks.com/assets/alert/aruba-psa-2018-004.txt"
      },
      {
        "trust": 1.7,
        "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en"
      },
      {
        "trust": 1.7,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
      },
      {
        "trust": 1.7,
        "url": "https://help.ecostruxureit.com/display/public/uadce725/security+fixes+in+struxureware+data+center+expert+v7.6.0"
      },
      {
        "trust": 1.7,
        "url": "https://security.netapp.com/advisory/ntap-20180815-0003/"
      },
      {
        "trust": 1.7,
        "url": "https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack"
      },
      {
        "trust": 1.7,
        "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
      },
      {
        "trust": 1.7,
        "url": "https://www.synology.com/support/security/synology_sa_18_41"
      },
      {
        "trust": 1.7,
        "url": "https://www.debian.org/security/2018/dsa-4266"
      },
      {
        "trust": 1.7,
        "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
      },
      {
        "trust": 1.7,
        "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
      },
      {
        "trust": 1.7,
        "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
      },
      {
        "trust": 1.7,
        "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
      },
      {
        "trust": 1.7,
        "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
      },
      {
        "trust": 1.7,
        "url": "https://access.redhat.com/errata/rhsa-2018:2402"
      },
      {
        "trust": 1.7,
        "url": "https://access.redhat.com/errata/rhsa-2018:2403"
      },
      {
        "trust": 1.7,
        "url": "https://access.redhat.com/errata/rhsa-2018:2645"
      },
      {
        "trust": 1.7,
        "url": "https://access.redhat.com/errata/rhsa-2018:2776"
      },
      {
        "trust": 1.7,
        "url": "https://access.redhat.com/errata/rhsa-2018:2789"
      },
      {
        "trust": 1.7,
        "url": "https://access.redhat.com/errata/rhsa-2018:2791"
      },
      {
        "trust": 1.7,
        "url": "https://access.redhat.com/errata/rhsa-2018:2933"
      },
      {
        "trust": 1.7,
        "url": "https://access.redhat.com/errata/rhsa-2018:2948"
      },
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id/1041424"
      },
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id/1041434"
      },
      {
        "trust": 1.7,
        "url": "https://usn.ubuntu.com/3732-1/"
      },
      {
        "trust": 1.7,
        "url": "https://usn.ubuntu.com/3741-1/"
      },
      {
        "trust": 1.7,
        "url": "https://usn.ubuntu.com/3741-2/"
      },
      {
        "trust": 1.7,
        "url": "https://usn.ubuntu.com/3742-1/"
      },
      {
        "trust": 1.7,
        "url": "https://usn.ubuntu.com/3742-2/"
      },
      {
        "trust": 1.7,
        "url": "https://usn.ubuntu.com/3763-1/"
      },
      {
        "trust": 1.6,
        "url": "https://www.freebsd.org/security/advisories/freebsd-sa-18:08.tcp.asc"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-5390"
      },
      {
        "trust": 1.0,
        "url": "https://support.f5.com/csp/article/k95343321?utm_source=f5support\u0026amp%3butm_medium=rss"
      },
      {
        "trust": 0.8,
        "url": "https://www.spinics.net/lists/netdev/msg514742.html"
      },
      {
        "trust": 0.8,
        "url": "https://supportforums.adtran.com/docs/doc-9261"
      },
      {
        "trust": 0.8,
        "url": "https://blogs.akamai.com/2018/08/linux-kernel-tcp-vulnerability.html"
      },
      {
        "trust": 0.8,
        "url": "https://alas.aws.amazon.com/alas-2018-1049.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/5721-security-advisory-36"
      },
      {
        "trust": 0.8,
        "url": "https://supportcenter.checkpoint.com/supportcenter/portal?eventsubmit_dogoviewsolutiondetails=\u0026solutionid=sk134253"
      },
      {
        "trust": 0.8,
        "url": "https://lists.debian.org/debian-security-announce/2018/msg00195.html"
      },
      {
        "trust": 0.8,
        "url": "https://kb.juniper.net/jsa10876"
      },
      {
        "trust": 0.8,
        "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-686"
      },
      {
        "trust": 0.8,
        "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-696"
      },
      {
        "trust": 0.8,
        "url": "https://www.suse.com/c/suse-addresses-segmentsmack-attack/"
      },
      {
        "trust": 0.8,
        "url": "https://www.zyxel.com/support/linux_kernel_tcp_flaw.shtml"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-3646"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-5391"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-3620"
      },
      {
        "trust": 0.6,
        "url": "https://support.f5.com/csp/article/k95343321?utm_source=f5support\u0026utm_medium=rss"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191437-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191425-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191422-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191767-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192829-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192821-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190955-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.1315/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.2021.2/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.2497/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.2661/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.2021/"
      },
      {
        "trust": 0.6,
        "url": "http://www.ibm.com/support/docview.wss?uid=ibm10875814"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/79262"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.2262/"
      },
      {
        "trust": 0.6,
        "url": "https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20181031-02-linux-cn"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-105-05"
      },
      {
        "trust": 0.6,
        "url": "https://www.us-cert.gov/ics/advisories/icsa-20-105-05"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/67070"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.5,
        "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/security/cve/cve-2018-5390"
      },
      {
        "trust": 0.5,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.4,
        "url": "https://wiki.ubuntu.com/securityteam/knowledgebase/l1tf"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-10675"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2018-10675"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-18344"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/vulnerabilities/l1tf"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13215"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2018-7566"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2018-3620"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-7566"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2018-3693"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2017-13215"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-3693"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2018-3646"
      },
      {
        "trust": 0.2,
        "url": "https://usn.ubuntu.com/usn/usn-3741-1"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2018-5391"
      },
      {
        "trust": 0.1,
        "url": "https://support.f5.com/csp/article/k95343321?utm_source=f5support\u0026amp;amp;utm_medium=rss"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3742-1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux/3.13.0-155.205"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-oem/4.15.0-1013.16"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-raspi2/4.15.0-1018.19"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3732-1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-aws/4.15.0-1017.17"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-kvm/4.15.0-1017.17"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-azure/4.15.0-1019.19"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux/4.15.0-30.32"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-gcp/4.15.0-1015.15"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux/4.4.0-133.159"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-raspi2/4.4.0-1094.102"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-snapdragon/4.4.0-1098.103"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-aws/4.4.0-1065.75"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-kvm/4.4.0-1031.37"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3742-2"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3742-3"
      },
      {
        "trust": 0.1,
        "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1787258"
      },
      {
        "trust": 0.1,
        "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1787127"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-14634"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/articles/3553061"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-14634"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/vulnerabilities/mutagen-astronomy"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-aws/4.4.0-1027.30"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-lts-xenial/4.4.0-133.159~14.04.1"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3741-2"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/articles/3527791"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#962459"
      },
      {
        "db": "VULHUB",
        "id": "VHN-135421"
      },
      {
        "db": "PACKETSTORM",
        "id": "148915"
      },
      {
        "db": "PACKETSTORM",
        "id": "148841"
      },
      {
        "db": "PACKETSTORM",
        "id": "148907"
      },
      {
        "db": "PACKETSTORM",
        "id": "148914"
      },
      {
        "db": "PACKETSTORM",
        "id": "149544"
      },
      {
        "db": "PACKETSTORM",
        "id": "149024"
      },
      {
        "db": "PACKETSTORM",
        "id": "149826"
      },
      {
        "db": "PACKETSTORM",
        "id": "148916"
      },
      {
        "db": "PACKETSTORM",
        "id": "148899"
      },
      {
        "db": "PACKETSTORM",
        "id": "149546"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-5390"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#962459"
      },
      {
        "db": "VULHUB",
        "id": "VHN-135421"
      },
      {
        "db": "PACKETSTORM",
        "id": "148915"
      },
      {
        "db": "PACKETSTORM",
        "id": "148841"
      },
      {
        "db": "PACKETSTORM",
        "id": "148907"
      },
      {
        "db": "PACKETSTORM",
        "id": "148914"
      },
      {
        "db": "PACKETSTORM",
        "id": "149544"
      },
      {
        "db": "PACKETSTORM",
        "id": "149024"
      },
      {
        "db": "PACKETSTORM",
        "id": "149826"
      },
      {
        "db": "PACKETSTORM",
        "id": "148916"
      },
      {
        "db": "PACKETSTORM",
        "id": "148899"
      },
      {
        "db": "PACKETSTORM",
        "id": "149546"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-5390"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2018-08-06T00:00:00",
        "db": "CERT/CC",
        "id": "VU#962459"
      },
      {
        "date": "2018-08-06T00:00:00",
        "db": "VULHUB",
        "id": "VHN-135421"
      },
      {
        "date": "2018-08-15T04:42:52",
        "db": "PACKETSTORM",
        "id": "148915"
      },
      {
        "date": "2018-08-07T13:11:00",
        "db": "PACKETSTORM",
        "id": "148841"
      },
      {
        "date": "2018-08-15T04:40:44",
        "db": "PACKETSTORM",
        "id": "148907"
      },
      {
        "date": "2018-08-15T04:42:46",
        "db": "PACKETSTORM",
        "id": "148914"
      },
      {
        "date": "2018-09-25T23:02:34",
        "db": "PACKETSTORM",
        "id": "149544"
      },
      {
        "date": "2018-08-21T20:20:00",
        "db": "PACKETSTORM",
        "id": "149024"
      },
      {
        "date": "2018-10-17T15:40:19",
        "db": "PACKETSTORM",
        "id": "149826"
      },
      {
        "date": "2018-08-15T04:42:57",
        "db": "PACKETSTORM",
        "id": "148916"
      },
      {
        "date": "2018-08-15T04:37:37",
        "db": "PACKETSTORM",
        "id": "148899"
      },
      {
        "date": "2018-09-25T23:02:55",
        "db": "PACKETSTORM",
        "id": "149546"
      },
      {
        "date": "2018-08-07T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      },
      {
        "date": "2018-08-06T20:29:01.570000",
        "db": "NVD",
        "id": "CVE-2018-5390"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2018-09-14T00:00:00",
        "db": "CERT/CC",
        "id": "VU#962459"
      },
      {
        "date": "2020-09-18T00:00:00",
        "db": "VULHUB",
        "id": "VHN-135421"
      },
      {
        "date": "2020-09-21T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      },
      {
        "date": "2023-11-07T02:58:42.387000",
        "db": "NVD",
        "id": "CVE-2018-5390"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "148841"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "TCP implementations vulnerable to Denial of Service",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#962459"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "resource management error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201808-175"
      }
    ],
    "trust": 0.6
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2018-5390 (GCVE-0-2018-5390)

SUSE-SU-2019:1767-1

SUSE-SU-2019:1870-1

SUSE-SU-2019:2230-1

SUSE-SU-2019:2601-1

SUSE-SU-2019:2821-1

ubuntu-cve-2018-5390

Vulnerability from osv_ubuntu

VAR-201808-1002

linux-lts-trusty regressions

Tags

Sightings

Nomenclature