CERTFR-2017-AVI-432
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE . Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données, une atteinte à la confidentialité des données et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server | SUSE Linux Enterprise Server pour SAP 12-SP1 | ||
| SUSE | SUSE Linux Enterprise Server | SUSE Linux Enterprise Server 12-LTSS | ||
| SUSE | SUSE Linux Enterprise Live Patching | SUSE Linux Enterprise Live Patching 12 | ||
| SUSE | SUSE Linux Enterprise Live Patching | SUSE Linux Enterprise Live Patching 12-SP3 | ||
| SUSE | SUSE Linux Enterprise Server | SUSE Linux Enterprise Server 12-SP1-LTSS |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SUSE Linux Enterprise Server pour SAP 12-SP1",
"product": {
"name": "SUSE Linux Enterprise Server",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Server 12-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Live Patching 12",
"product": {
"name": "SUSE Linux Enterprise Live Patching",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Live Patching 12-SP3",
"product": {
"name": "SUSE Linux Enterprise Live Patching",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Server 12-SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server",
"vendor": {
"name": "SUSE",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2017-15649",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-15649"
},
{
"name": "CVE-2017-13080",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
}
],
"initial_release_date": "2017-11-27T00:00:00",
"last_revision_date": "2017-12-01T00:00:00",
"links": [],
"reference": "CERTFR-2017-AVI-432",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2017-11-27T00:00:00.000000"
},
{
"description": "Ajout de et mise \u00e0 jour des syst\u00e8mes affect\u00e9s",
"revision_date": "2017-11-28T00:00:00.000000"
},
{
"description": "Ajout de bulletins et mise \u00e0 jour des syst\u00e8mes affect\u00e9s",
"revision_date": "2017-11-28T00:00:00.000000"
},
{
"description": "Ajout de bulletins et mise \u00e0 jour des syst\u00e8mes affect\u00e9s",
"revision_date": "2017-11-30T00:00:00.000000"
},
{
"description": "Ajout de bulletins",
"revision_date": "2017-12-01T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de\nSUSE . Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0\nl\u0027int\u00e9grit\u00e9 des donn\u00e9es, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es\net une \u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de SUSE",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3153-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173153-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3127-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173127-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3124-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173124-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3118-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173118-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3156-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173156-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3126-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173126-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3146-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173146-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3158-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173158-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3159-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173159-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3120-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173120-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3160-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173160-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3122-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173122-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3072-1 du 24 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173072-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3151-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173151-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3121-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173121-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3150-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173150-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3116-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173116-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3147-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173147-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3136-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173136-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3128-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173128-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3117-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173117-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3125-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173125-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3152-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173152-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3154-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173154-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3123-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173123-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3132-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173132-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3103-1 du 27 novembre 2017",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3139-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173139-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3149-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173149-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3074-1 du 24 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173074-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3076-1 du 24 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173076-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3145-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173145-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3134-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173134-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3130-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173130-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3157-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173157-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3129-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173129-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3148-1 du 30 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173148-1"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3119-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173119-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:3131-1 du 29 novembre 2017",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173131-1/"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…