{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Junos OS versions 15.1X49 ant\u00e9rieures \u00e0 15.1X49-D110",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Contrail versions 3.1.x ant\u00e9rieures \u00e0 3.1.4.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 17 ant\u00e9rieures \u00e0 17.3R1",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.2R7-S8",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.1X53-D50",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.1R8-S4",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos Space versions 16.1 ant\u00e9rieures \u00e0 16.1R3",
      "product": {
        "name": "Junos Space",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Contrail versions 3.0.x ant\u00e9rieures \u00e0 3.0.3.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "ScreenOS versions 6.3.0 ant\u00e9rieures \u00e0 6.3.0r24",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Contrail versions 3.2.x ant\u00e9rieures \u00e0 3.2.5.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Contrail versions 2.x ant\u00e9rieures \u00e0 2.21.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 12.1X46 ant\u00e9rieures \u00e0 12.1X46-D71",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.2R8",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos Space version 17.1R1 sans le correctif de s\u00e9curit\u00e9 Patch-v1",
      "product": {
        "name": "Junos Space",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 12.3X48 ant\u00e9rieures \u00e0 12.3X48-D55",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.1R9",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-10614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10614"
    },
    {
      "name": "CVE-2017-10618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10618"
    },
    {
      "name": "CVE-2017-10622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10622"
    },
    {
      "name": "CVE-2017-10620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10620"
    },
    {
      "name": "CVE-2017-10608",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10608"
    },
    {
      "name": "CVE-2017-10606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10606"
    },
    {
      "name": "CVE-2017-10616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10616"
    },
    {
      "name": "CVE-2017-10619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10619"
    },
    {
      "name": "CVE-2017-10615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10615"
    },
    {
      "name": "CVE-2017-10610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10610"
    },
    {
      "name": "CVE-2017-10611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10611"
    },
    {
      "name": "CVE-2016-8610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-8610"
    },
    {
      "name": "CVE-2017-10621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10621"
    },
    {
      "name": "CVE-2017-10617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10617"
    },
    {
      "name": "CVE-2016-5195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5195"
    },
    {
      "name": "CVE-2017-10613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10613"
    },
    {
      "name": "CVE-2017-10607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10607"
    }
  ],
  "links": [],
  "reference": "CERTFR-2017-AVI-348",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-10-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper . Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10810 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10810\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10822 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10822\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10808 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10808\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10818 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10818\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10807 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10807\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10813 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10813\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10814 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10814\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10811 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10811\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10819 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10819\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10816 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10816\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10820 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10820\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10821 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10821\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10809 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10809\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10824 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10824\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10817 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10817\u0026cat=SIRT_1\u0026actp=LIST"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IBM Case Manager versions 5.3.x ant\u00e9rieures \u00e0 5.3.3.0-ICM-IF003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for Hyper-V versions 8.1.x ant\u00e9rieures \u00e0 8.1.6.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM MQ versions V8, V9 LTS, V9 CD, V9.1 LTS",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Contact Optimization versions 9.1.0.x ant\u00e9rieures \u00e0 9.1.0.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Connections 5.0 versions ant\u00e9rieures \u00e0 5.0 CR4 et sans le correctif temporaire APAR LO94099",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware versions 7.1.x ant\u00e9rieures \u00e0 7.1.8.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Case Manager versions ant\u00e9rieures \u00e0 5.2.0.4-ICM-IF003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) Client versions 7.1.x ant\u00e9rieures \u00e0 7.1.8.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Case Manager versions 5.2.1.x ant\u00e9rieures \u00e0 5.2.1.7-ICM-IF004",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) Client versions 8.1.x ant\u00e9rieures \u00e0 8.1.6.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "VIOS versions 2.2.x",
      "product": {
        "name": "VIOS",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware versions 8.1.x ant\u00e9rieures \u00e0 8.1.6.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Connections 5.5 versions ant\u00e9rieures \u00e0 5.5 CR3 et sans le correctif temporaire APAR LO94099",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "AIX versions 5.3, 6.1, 7.1 et 7.2",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect for Virtual Environments (formerly Tivoli Storage for Virtual Environments): Data Protection for Hyper-V versions 7.1.x ant\u00e9rieures \u00e0 7.1.8.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM WebSphere versions 9.0, 8.5, 8.0 et 7.0",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Connections 6.0 versions ant\u00e9rieures \u00e0 6.0 CR3 et sans le correctif temporaire APAR LO94099",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Contact Optimization versions 9.1.2.x ant\u00e9rieures \u00e0 9.1.2.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-3009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3009"
    },
    {
      "name": "CVE-2018-3092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3092"
    },
    {
      "name": "CVE-2018-2768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2768"
    },
    {
      "name": "CVE-2018-1656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
    },
    {
      "name": "CVE-2018-3094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3094"
    },
    {
      "name": "CVE-2018-6922",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-6922"
    },
    {
      "name": "CVE-2018-3104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3104"
    },
    {
      "name": "CVE-2018-3103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3103"
    },
    {
      "name": "CVE-2018-3099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3099"
    },
    {
      "name": "CVE-2018-3098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3098"
    },
    {
      "name": "CVE-2018-2801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2801"
    },
    {
      "name": "CVE-2018-1553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1553"
    },
    {
      "name": "CVE-2018-3010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3010"
    },
    {
      "name": "CVE-2018-1884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1884"
    },
    {
      "name": "CVE-2018-3096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3096"
    },
    {
      "name": "CVE-2018-2992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2992"
    },
    {
      "name": "CVE-2018-3093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3093"
    },
    {
      "name": "CVE-2018-3097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3097"
    },
    {
      "name": "CVE-2016-8610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-8610"
    },
    {
      "name": "CVE-2018-1792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1792"
    },
    {
      "name": "CVE-2018-2806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2806"
    },
    {
      "name": "CVE-2018-3095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3095"
    },
    {
      "name": "CVE-2018-3102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3102"
    },
    {
      "name": "CVE-2018-1798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1798"
    },
    {
      "name": "CVE-2018-12539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
    },
    {
      "name": "CVE-2018-1786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1786"
    }
  ],
  "links": [],
  "reference": "CERTFR-2018-AVI-539",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-11-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10730703 du 09 novembre 2018",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=ibm10730703"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10739387 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10739387"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10737709 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10737709"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10737897 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10737897"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10738765 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10738765"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10738677 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10738677"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10734447 du 10 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10734447"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10737761 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10737761"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10739391 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10739391"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Junos OS versions 15.1X49 ant\u00e9rieures \u00e0 15.1X49-D110",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Contrail versions 3.1.x ant\u00e9rieures \u00e0 3.1.4.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 17 ant\u00e9rieures \u00e0 17.3R1",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.2R7-S8",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.1X53-D50",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.1R8-S4",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos Space versions 16.1 ant\u00e9rieures \u00e0 16.1R3",
      "product": {
        "name": "Junos Space",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Contrail versions 3.0.x ant\u00e9rieures \u00e0 3.0.3.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "ScreenOS versions 6.3.0 ant\u00e9rieures \u00e0 6.3.0r24",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Contrail versions 3.2.x ant\u00e9rieures \u00e0 3.2.5.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Contrail versions 2.x ant\u00e9rieures \u00e0 2.21.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 12.1X46 ant\u00e9rieures \u00e0 12.1X46-D71",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.2R8",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos Space version 17.1R1 sans le correctif de s\u00e9curit\u00e9 Patch-v1",
      "product": {
        "name": "Junos Space",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 12.3X48 ant\u00e9rieures \u00e0 12.3X48-D55",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 14.1R9",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-10614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10614"
    },
    {
      "name": "CVE-2017-10618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10618"
    },
    {
      "name": "CVE-2017-10622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10622"
    },
    {
      "name": "CVE-2017-10620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10620"
    },
    {
      "name": "CVE-2017-10608",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10608"
    },
    {
      "name": "CVE-2017-10606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10606"
    },
    {
      "name": "CVE-2017-10616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10616"
    },
    {
      "name": "CVE-2017-10619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10619"
    },
    {
      "name": "CVE-2017-10615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10615"
    },
    {
      "name": "CVE-2017-10610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10610"
    },
    {
      "name": "CVE-2017-10611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10611"
    },
    {
      "name": "CVE-2016-8610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-8610"
    },
    {
      "name": "CVE-2017-10621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10621"
    },
    {
      "name": "CVE-2017-10617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10617"
    },
    {
      "name": "CVE-2016-5195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5195"
    },
    {
      "name": "CVE-2017-10613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10613"
    },
    {
      "name": "CVE-2017-10607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10607"
    }
  ],
  "links": [],
  "reference": "CERTFR-2017-AVI-348",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-10-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper . Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10810 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10810\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10822 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10822\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10808 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10808\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10818 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10818\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10807 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10807\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10813 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10813\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10814 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10814\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10811 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10811\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10819 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10819\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10816 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10816\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10820 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10820\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10821 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10821\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10809 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10809\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10824 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10824\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10817 du 11 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10817\u0026cat=SIRT_1\u0026actp=LIST"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IBM Case Manager versions 5.3.x ant\u00e9rieures \u00e0 5.3.3.0-ICM-IF003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for Hyper-V versions 8.1.x ant\u00e9rieures \u00e0 8.1.6.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM MQ versions V8, V9 LTS, V9 CD, V9.1 LTS",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Contact Optimization versions 9.1.0.x ant\u00e9rieures \u00e0 9.1.0.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Connections 5.0 versions ant\u00e9rieures \u00e0 5.0 CR4 et sans le correctif temporaire APAR LO94099",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware versions 7.1.x ant\u00e9rieures \u00e0 7.1.8.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Case Manager versions ant\u00e9rieures \u00e0 5.2.0.4-ICM-IF003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) Client versions 7.1.x ant\u00e9rieures \u00e0 7.1.8.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Case Manager versions 5.2.1.x ant\u00e9rieures \u00e0 5.2.1.7-ICM-IF004",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) Client versions 8.1.x ant\u00e9rieures \u00e0 8.1.6.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "VIOS versions 2.2.x",
      "product": {
        "name": "VIOS",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware versions 8.1.x ant\u00e9rieures \u00e0 8.1.6.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Connections 5.5 versions ant\u00e9rieures \u00e0 5.5 CR3 et sans le correctif temporaire APAR LO94099",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "AIX versions 5.3, 6.1, 7.1 et 7.2",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Spectrum Protect for Virtual Environments (formerly Tivoli Storage for Virtual Environments): Data Protection for Hyper-V versions 7.1.x ant\u00e9rieures \u00e0 7.1.8.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM WebSphere versions 9.0, 8.5, 8.0 et 7.0",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Connections 6.0 versions ant\u00e9rieures \u00e0 6.0 CR3 et sans le correctif temporaire APAR LO94099",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Contact Optimization versions 9.1.2.x ant\u00e9rieures \u00e0 9.1.2.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-3009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3009"
    },
    {
      "name": "CVE-2018-3092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3092"
    },
    {
      "name": "CVE-2018-2768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2768"
    },
    {
      "name": "CVE-2018-1656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
    },
    {
      "name": "CVE-2018-3094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3094"
    },
    {
      "name": "CVE-2018-6922",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-6922"
    },
    {
      "name": "CVE-2018-3104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3104"
    },
    {
      "name": "CVE-2018-3103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3103"
    },
    {
      "name": "CVE-2018-3099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3099"
    },
    {
      "name": "CVE-2018-3098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3098"
    },
    {
      "name": "CVE-2018-2801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2801"
    },
    {
      "name": "CVE-2018-1553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1553"
    },
    {
      "name": "CVE-2018-3010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3010"
    },
    {
      "name": "CVE-2018-1884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1884"
    },
    {
      "name": "CVE-2018-3096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3096"
    },
    {
      "name": "CVE-2018-2992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2992"
    },
    {
      "name": "CVE-2018-3093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3093"
    },
    {
      "name": "CVE-2018-3097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3097"
    },
    {
      "name": "CVE-2016-8610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-8610"
    },
    {
      "name": "CVE-2018-1792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1792"
    },
    {
      "name": "CVE-2018-2806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2806"
    },
    {
      "name": "CVE-2018-3095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3095"
    },
    {
      "name": "CVE-2018-3102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3102"
    },
    {
      "name": "CVE-2018-1798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1798"
    },
    {
      "name": "CVE-2018-12539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
    },
    {
      "name": "CVE-2018-1786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1786"
    }
  ],
  "links": [],
  "reference": "CERTFR-2018-AVI-539",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-11-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10730703 du 09 novembre 2018",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=ibm10730703"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10739387 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10739387"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10737709 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10737709"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10737897 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10737897"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10738765 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10738765"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10738677 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10738677"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10734447 du 10 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10734447"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10737761 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10737761"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM ibm10739391 du 09 novembre 2018",
      "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10739391"
    }
  ]
}

{
  "bids": {
    "bid": {
      "bidNumber": "93841"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-8610"
    }
  },
  "description": "OpenSSL\u662f\u4e00\u79cd\u5f00\u653e\u6e90\u7801\u7684SSL\u5b9e\u73b0\uff0c\u7528\u6765\u5b9e\u73b0\u7f51\u7edc\u901a\u4fe1\u7684\u9ad8\u5f3a\u5ea6\u52a0\u5bc6\u3002\r\n\r\nOpenSSL\u5b58\u5728\u8fdc\u7a0b\u533f\u540d\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002OpenSSL\u9488\u5bf9SSL/TLS\u534f\u8bae\u63e1\u624b\u8fc7\u7a0b\u7684\u5b9e\u73b0\u4e2d\uff0c\u5141\u8bb8\u5ba2\u6237\u7aef\u91cd\u590d\u53d1\u9001\u6253\u5305\u7684\"SSL3_RT_ALERT\"-\u003e\"SSL3_AL_WARNING\"\u7c7b\u578b\u660e\u6587\u672a\u5b9a\u4e49\u8b66\u544a\u5305\uff0c\u4e14OpenSSL\u5728\u5b9e\u73b0\u4e2d\u9047\u5230\u672a\u5b9a\u4e49\u8b66\u544a\u5305\u65f6\u4ecd\u9009\u62e9\u5ffd\u7565\u5e76\u7ee7\u7eed\u5904\u7406\u63a5\u4e0b\u6765\u7684\u901a\u4fe1\u5185\u5bb9\uff08\u5982\u679c\u6709\u7684\u8bdd\uff09\u3002\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u53ef\u5728\u4e00\u4e2a\u6d88\u606f\u4e2d\u6253\u5305\u5927\u91cf\u672a\u5b9a\u4e49\u7c7b\u578b\u8b66\u544a\u5305\uff0c\u4f7f\u670d\u52a1\u6216\u8fdb\u7a0b\u9677\u5165\u65e0\u610f\u4e49\u7684\u5faa\u73af\uff0c\u4ece\u800c\u5bfc\u81f4\u5360\u7528\u670d\u52a1\u6216\u8fdb\u7a0b100%\u7684CPU\u4f7f\u7528\u7387\u3002",
  "discovererName": "\u77f3\u78ca",
  "formalWay": "\u7528\u6237\u53ef\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff0c\u5c06\u8f6f\u4ef6\u5347\u7ea7\u81f31.1.0b\u30011.0.2j\u7248\u672c\uff1a\r\nhttps://www.openssl.org/source/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-09982",
  "openTime": "2016-10-25",
  "patchDescription": "OpenSSL\u662f\u4e00\u79cd\u5f00\u653e\u6e90\u7801\u7684SSL\u5b9e\u73b0\uff0c\u7528\u6765\u5b9e\u73b0\u7f51\u7edc\u901a\u4fe1\u7684\u9ad8\u5f3a\u5ea6\u52a0\u5bc6\uff0c\u73b0\u5728\u88ab\u5e7f\u6cdb\u5730\u7528\u4e8e\u5404\u79cd\u7f51\u7edc\u5e94\u7528\u7a0b\u5e8f\u4e2d\u3002 \r\n\r\nOpenSSL\u5b58\u5728SSL Death Alert\u8fdc\u7a0b\u533f\u540d\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u7531\u4e8e\u5728OpenSSL\u9488\u5bf9SSL/TLS\u534f\u8bae\u63e1\u624b\u8fc7\u7a0b\u7684\u5b9e\u73b0\u4e2d\uff0c\u5141\u8bb8\u5ba2\u6237\u7aef\u91cd\u590d\u53d1\u9001\u6253\u5305\u7684 \"SSL3_RT_ALERT\" -\u003e \"SSL3_AL_WARNING\" \u7c7b\u578b\u660e\u6587\u672a\u5b9a\u4e49\u8b66\u544a\u5305\uff0c\u4e14OpenSSL\u5728\u5b9e\u73b0\u4e2d\u9047\u5230\u672a\u5b9a\u4e49\u8b66\u544a\u5305\u65f6\u4ecd\u9009\u62e9\u5ffd\u7565\u5e76\u7ee7\u7eed\u5904\u7406\u63a5\u4e0b\u6765\u7684\u901a\u4fe1\u5185\u5bb9\uff08\u5982\u679c\u6709\u7684\u8bdd\uff09\u3002\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u53ef\u5728\u4e00\u4e2a\u6d88\u606f\u4e2d\u6253\u5305\u5927\u91cf\u672a\u5b9a\u4e49\u7c7b\u578b\u8b66\u544a\u5305\uff0c\u4f7f\u670d\u52a1\u6216\u8fdb\u7a0b\u9677\u5165\u65e0\u610f\u4e49\u7684\u5faa\u73af\uff0c\u4ece\u800c\u5bfc\u81f4\u5360\u7528\u6389\u670d\u52a1\u6216\u8fdb\u7a0b100%\u7684CPU\u4f7f\u7528\u7387\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "OpenSSL\u5b58\u5728SSL Death Alert\u8fdc\u7a0b\u533f\u540d\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "OpenSSL  OpenSSL 1.1.0",
      "OpenSSL  OpenSSL OpenSSL 1.0.2 - 1.0.2h",
      "OpenSSL  OpenSSL OpenSSL All 1.0.1",
      "OpenSSL  OpenSSL OpenSSL All 0.9.8"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/93841",
  "serverity": "\u9ad8",
  "submitTime": "2016-10-25",
  "title": "OpenSSL\u5b58\u5728\u8fdc\u7a0b\u533f\u540d\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08SSL Death Alert\uff09"
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BD3F477-4078-42BC-AF81-A68487FCDBEC",
              "versionEndIncluding": "1.0.2h",
              "versionStartIncluding": "1.0.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A4E446D-B9D3-45F2-9722-B41FA14A6C31",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D1C00C0-C77E-4255-9ECA-20F2673C7366",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "73104834-5810-48DD-9B97-549D223853F1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "98381E61-F082-4302-B51F-5648884F998B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D99A687E-EAE6-417E-A88E-D0082BC194CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8442C20-41F9-47FD-9A12-E724D3A31FD7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF77CDCF-B9C9-427D-B2BF-36650FB2148C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1ABA871-3271-48E2-A69C-5AD70AF94E53",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB30733E-68FC-49C4-86C0-7FEE75C366BF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6361DAC6-600F-4B15-8797-D67F298F46FB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "62347994-1353-497C-9C4A-D5D8D95F67E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:*",
              "matchCriteriaId": "6C2ACC32-5147-4EA5-95BE-B6B4EAB3D82B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C82200F-A26E-4AD4-82FF-DC5601A28D52",
              "versionEndIncluding": "11.40",
              "versionStartIncluding": "11.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:host_agent:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "546855F3-654C-48F0-B3A0-FF1ABBF04007",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
              "matchCriteriaId": "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5735E553-9731-4AAC-BCFF-989377F817B3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:ontap_select_deploy:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E968916-8CE0-4165-851F-14E37ECEA948",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:service_processor:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "146A767F-DC04-454B-9913-17D3A2B5AAA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:snapcenter_server:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E788440A-02B0-45F5-AFBC-7109F3177033",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*",
              "matchCriteriaId": "61D7EF01-F618-497F-9375-8003CEA3D380",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8ADFF451-740F-4DBA-BD23-3881945D3E40",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:storagegrid_webscale:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "813CD8F9-9F05-49A7-BB4D-E9A1D54D6DFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FED6CAE-D97F-49E0-9D00-1642A3A427B4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "460EF266-5397-4FB9-B4C3-BECB2FB12AE4",
              "versionEndIncluding": "6.1.17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C837CEA-991C-45BA-8DFF-20F4E98E4639",
              "versionEndIncluding": "7.0.15",
              "versionStartIncluding": "7.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1558B8D3-B289-4143-A3C2-F8EF29CECDD3",
              "versionEndIncluding": "7.1.10",
              "versionStartIncluding": "7.1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:adaptive_access_manager:11.1.2.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "530B1012-03DF-4AE2-863E-FB07351FE4A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A125E817-F974-4509-872C-B71933F42AD1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "55D98C27-734F-490B-92D5-251805C841B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:communications_ip_service_activator:7.3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "BDB13348-C8CA-4E71-9DC6-091B09D52E96",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE7A60DB-A287-4E61-8131-B6314007191B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:core_rdbms:11.2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1367C5D-8815-41E6-B609-E855CB8B1AA7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:core_rdbms:12.1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E150F02-5B34-4496-A024-335DF64D7F8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:core_rdbms:12.2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4059F859-A7D8-4ADD-93EE-74AF082ED34A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:core_rdbms:18c:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9FFAF8E-4023-4599-9F0D-274E6517CB1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:core_rdbms:19c:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B639209-A651-43FB-8F0C-B25F605521EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "37209C6F-EF99-4D21-9608-B3A06D283D24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6F259E6-10A8-4207-8FC2-85ABD70B04C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0A735B4-4F3C-416B-8C08-9CB21BAD2889",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E1E416B-920B-49A0-9523-382898C2979D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "24A3C819-5151-4543-A5C6-998C9387C8A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FB98961-8C99-4490-A6B8-9A5158784F5A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6DA0527-562D-457F-A2BB-3DF5EAABA1AB",
              "versionEndExcluding": "18.1.4.1.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B40B13B7-68B3-4510-968C-6A730EB46462",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C93CC705-1F8C-4870-99E6-14BF264C3811",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F14A818F-AA16-4438-A3E4-E64C9287AC66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "271CACEB-10F5-4CA8-9C99-3274F18EE62D",
              "versionEndExcluding": "xcp2361",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF82224E-9EED-472E-A038-768E4179B219",
              "versionEndExcluding": "xcp3070",
              "versionStartIncluding": "xcp3000",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "983D27DE-BC89-454E-AE47-95A26A3651E2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "433EEE1B-134C-48F9-8688-23C5F1ABBF0F",
              "versionEndExcluding": "xcp2361",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B56D4BF-9328-4998-95F3-D23BD1349280",
              "versionEndExcluding": "xcp3070",
              "versionStartIncluding": "xcp3000",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5825AEE1-B668-40BD-86A9-2799430C742C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "47FFEE5C-5DAE-4FAD-9651-7983DE092120",
              "versionEndExcluding": "xcp2361",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "62AAD1D8-D312-452A-80E7-97FA3238C95F",
              "versionEndExcluding": "xcp3070",
              "versionStartIncluding": "xcp3000",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DA2D526-BDCF-4A65-914A-B3BA3A0CD613",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FD8BD3B-C35B-4C44-B5A1-FA4646ACB374",
              "versionEndExcluding": "xcp2361",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F429B6AB-44E3-412F-AAE6-33B6F1150262",
              "versionEndExcluding": "xcp3070",
              "versionStartIncluding": "xcp3000",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE0CF40B-E5BD-4558-9321-184D58EF621D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "66D6EF49-7094-41D9-BDF5-AE5846E37418",
              "versionEndExcluding": "xcp2361",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "78152A31-DB06-4F13-94EA-D3C94B240EE0",
              "versionEndExcluding": "xcp3070",
              "versionStartIncluding": "xcp3000",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F3C9C09-7B2B-4DB6-8BE0-35302ED35776",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6593DA00-EE33-4223-BEAE-8DC629E79287",
              "versionEndExcluding": "xcp2361",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB1FF50C-D9D0-4DF0-90F8-9259BD7B315B",
              "versionEndExcluding": "xcp3070",
              "versionStartIncluding": "xcp3000",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "95503CE5-1D06-4092-A60D-D310AADCAFB1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients."
    },
    {
      "lang": "es",
      "value": "Se ha encontrado un fallo de denegaci\u00f3n de servicio en OpenSSL en las versiones 0.9.8, 1.0.1, 1.0.2 hasta la 1.0.2h y la 1.1.0 en la forma en la que el protocolo TLS/SSL defini\u00f3 el procesamiento de paquetes ALERT durante una negociaci\u00f3n de conexi\u00f3n. Un atacante remoto podr\u00eda emplear este fallo para hacer que un servidor TLS/SSL consuma una cantidad excesiva de recursos de CPU y fracase a la hora de aceptar conexiones de otros clientes."
    }
  ],
  "id": "CVE-2016-8610",
  "lastModified": "2026-05-13T00:24:29.033",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-11-13T22:29:00.203",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0286.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0574.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2017-1659.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/oss-sec/2016/q4/224"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/93841"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1037084"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1413"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1414"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1658"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1801"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1802"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:2493"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:2494"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Broken Link"
      ],
      "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.360.cn/cve/CVE-2016-8610/"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20171130-0001/"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.paloaltonetworks.com/CVE-2016-8610"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03897en_us"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2017/dsa-3773"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0286.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0574.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2017-1659.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/oss-sec/2016/q4/224"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/93841"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1037084"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1413"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1414"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1658"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1801"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1802"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:2493"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:2494"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.360.cn/cve/CVE-2016-8610/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20171130-0001/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.paloaltonetworks.com/CVE-2016-8610"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03897en_us"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2017/dsa-3773"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ],
      "source": "secalert@redhat.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2016-8610"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-400"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-11-13T22:29:00Z",
    "severity": "HIGH"
  },
  "details": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
  "id": "GHSA-v2q2-jxh8-m5h8",
  "modified": "2025-04-20T03:48:22Z",
  "published": "2022-05-13T01:14:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8610"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2017/dsa-3773"
    },
    {
      "type": "WEB",
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03897en_us"
    },
    {
      "type": "WEB",
      "url": "https://security.paloaltonetworks.com/CVE-2016-8610"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20171130-0001"
    },
    {
      "type": "WEB",
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc"
    },
    {
      "type": "WEB",
      "url": "https://security.360.cn/cve/CVE-2016-8610"
    },
    {
      "type": "WEB",
      "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=af58be768ebb690f78530f796e92b8ae5c9a4401"
    },
    {
      "type": "WEB",
      "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2494"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2493"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1802"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1801"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1658"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1414"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1413"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0286.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0574.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-1659.html"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/oss-sec/2016/q4/224"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/93841"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1037084"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2016-8610",
    "description": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
    "id": "GSD-2016-8610",
    "references": [
      "https://www.suse.com/security/cve/CVE-2016-8610.html",
      "https://www.debian.org/security/2017/dsa-3773",
      "https://access.redhat.com/errata/RHSA-2017:2494",
      "https://access.redhat.com/errata/RHSA-2017:2493",
      "https://access.redhat.com/errata/RHSA-2017:1802",
      "https://access.redhat.com/errata/RHSA-2017:1801",
      "https://access.redhat.com/errata/RHSA-2017:1659",
      "https://access.redhat.com/errata/RHSA-2017:1658",
      "https://access.redhat.com/errata/RHSA-2017:1415",
      "https://access.redhat.com/errata/RHSA-2017:1414",
      "https://access.redhat.com/errata/RHSA-2017:1413",
      "https://access.redhat.com/errata/RHSA-2017:0574",
      "https://access.redhat.com/errata/RHSA-2017:0286",
      "https://ubuntu.com/security/CVE-2016-8610",
      "https://advisories.mageia.org/CVE-2016-8610.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2016-8610.html",
      "https://linux.oracle.com/cve/CVE-2016-8610.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2016-8610"
      ],
      "details": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
      "id": "GSD-2016-8610",
      "modified": "2023-12-13T01:21:22.740296Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2016-8610",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "OpenSSL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All 0.9.8"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "All 1.0.1"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "1.0.2 through 1.0.2h"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "1.1.0"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "OpenSSL"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-400",
                "lang": "eng",
                "value": "CWE-400"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
          },
          {
            "name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpujan2020.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
          },
          {
            "name": "https://security.360.cn/cve/CVE-2016-8610/",
            "refsource": "MISC",
            "url": "https://security.360.cn/cve/CVE-2016-8610/"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2017-0286.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0286.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2017-0574.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0574.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2017-1415.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2017-1659.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-1659.html"
          },
          {
            "name": "http://seclists.org/oss-sec/2016/q4/224",
            "refsource": "MISC",
            "url": "http://seclists.org/oss-sec/2016/q4/224"
          },
          {
            "name": "http://www.securityfocus.com/bid/93841",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/93841"
          },
          {
            "name": "http://www.securitytracker.com/id/1037084",
            "refsource": "MISC",
            "url": "http://www.securitytracker.com/id/1037084"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2017:1413",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2017:1413"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2017:1414",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2017:1414"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2017:1658",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2017:1658"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2017:1801",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2017:1801"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2017:1802",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2017:1802"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2017:2493",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2017:2493"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2017:2494",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2017:2494"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610"
          },
          {
            "name": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401",
            "refsource": "MISC",
            "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401"
          },
          {
            "name": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc",
            "refsource": "MISC",
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20171130-0001/",
            "refsource": "MISC",
            "url": "https://security.netapp.com/advisory/ntap-20171130-0001/"
          },
          {
            "name": "https://security.paloaltonetworks.com/CVE-2016-8610",
            "refsource": "MISC",
            "url": "https://security.paloaltonetworks.com/CVE-2016-8610"
          },
          {
            "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03897en_us",
            "refsource": "MISC",
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03897en_us"
          },
          {
            "name": "https://www.debian.org/security/2017/dsa-3773",
            "refsource": "MISC",
            "url": "https://www.debian.org/security/2017/dsa-3773"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0BD3F477-4078-42BC-AF81-A68487FCDBEC",
                    "versionEndIncluding": "1.0.2h",
                    "versionStartIncluding": "1.0.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8A4E446D-B9D3-45F2-9722-B41FA14A6C31",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2D1C00C0-C77E-4255-9ECA-20F2673C7366",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "73104834-5810-48DD-9B97-549D223853F1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "98381E61-F082-4302-B51F-5648884F998B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D99A687E-EAE6-417E-A88E-D0082BC194CD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A8442C20-41F9-47FD-9A12-E724D3A31FD7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF77CDCF-B9C9-427D-B2BF-36650FB2148C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B142ACCC-F7A9-4A3B-BE60-0D6691D5058D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B1ABA871-3271-48E2-A69C-5AD70AF94E53",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EB30733E-68FC-49C4-86C0-7FEE75C366BF",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6361DAC6-600F-4B15-8797-D67F298F46FB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "62347994-1353-497C-9C4A-D5D8D95F67E8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:*",
                    "matchCriteriaId": "6C2ACC32-5147-4EA5-95BE-B6B4EAB3D82B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9C82200F-A26E-4AD4-82FF-DC5601A28D52",
                    "versionEndIncluding": "11.40",
                    "versionStartIncluding": "11.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:host_agent:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "546855F3-654C-48F0-B3A0-FF1ABBF04007",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
                    "matchCriteriaId": "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5735E553-9731-4AAC-BCFF-989377F817B3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:ontap_select_deploy:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7E968916-8CE0-4165-851F-14E37ECEA948",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:service_processor:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "146A767F-DC04-454B-9913-17D3A2B5AAA4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:snapcenter_server:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E788440A-02B0-45F5-AFBC-7109F3177033",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*",
                    "matchCriteriaId": "61D7EF01-F618-497F-9375-8003CEA3D380",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8ADFF451-740F-4DBA-BD23-3881945D3E40",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:storagegrid_webscale:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "813CD8F9-9F05-49A7-BB4D-E9A1D54D6DFD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1FED6CAE-D97F-49E0-9D00-1642A3A427B4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "460EF266-5397-4FB9-B4C3-BECB2FB12AE4",
                    "versionEndIncluding": "6.1.17",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2C837CEA-991C-45BA-8DFF-20F4E98E4639",
                    "versionEndIncluding": "7.0.15",
                    "versionStartIncluding": "7.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1558B8D3-B289-4143-A3C2-F8EF29CECDD3",
                    "versionEndIncluding": "7.1.10",
                    "versionStartIncluding": "7.1.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:oracle:adaptive_access_manager:11.1.2.3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "530B1012-03DF-4AE2-863E-FB07351FE4A9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A125E817-F974-4509-872C-B71933F42AD1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "55D98C27-734F-490B-92D5-251805C841B9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:communications_ip_service_activator:7.3.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BDB13348-C8CA-4E71-9DC6-091B09D52E96",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DE7A60DB-A287-4E61-8131-B6314007191B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:core_rdbms:11.2.0.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E1367C5D-8815-41E6-B609-E855CB8B1AA7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:core_rdbms:12.1.0.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7E150F02-5B34-4496-A024-335DF64D7F8F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:core_rdbms:12.2.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4059F859-A7D8-4ADD-93EE-74AF082ED34A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:core_rdbms:18c:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C9FFAF8E-4023-4599-9F0D-274E6517CB1B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:core_rdbms:19c:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9B639209-A651-43FB-8F0C-B25F605521EC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "37209C6F-EF99-4D21-9608-B3A06D283D24",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F6F259E6-10A8-4207-8FC2-85ABD70B04C0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D0A735B4-4F3C-416B-8C08-9CB21BAD2889",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7E1E416B-920B-49A0-9523-382898C2979D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "24A3C819-5151-4543-A5C6-998C9387C8A2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4FB98961-8C99-4490-A6B8-9A5158784F5A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A6DA0527-562D-457F-A2BB-3DF5EAABA1AB",
                    "versionEndExcluding": "18.1.4.1.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B40B13B7-68B3-4510-968C-6A730EB46462",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C93CC705-1F8C-4870-99E6-14BF264C3811",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F14A818F-AA16-4438-A3E4-E64C9287AC66",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "271CACEB-10F5-4CA8-9C99-3274F18EE62D",
                    "versionEndExcluding": "xcp2361",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EF82224E-9EED-472E-A038-768E4179B219",
                    "versionEndExcluding": "xcp3070",
                    "versionStartIncluding": "xcp3000",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "983D27DE-BC89-454E-AE47-95A26A3651E2",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "433EEE1B-134C-48F9-8688-23C5F1ABBF0F",
                    "versionEndExcluding": "xcp2361",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8B56D4BF-9328-4998-95F3-D23BD1349280",
                    "versionEndExcluding": "xcp3070",
                    "versionStartIncluding": "xcp3000",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5825AEE1-B668-40BD-86A9-2799430C742C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "47FFEE5C-5DAE-4FAD-9651-7983DE092120",
                    "versionEndExcluding": "xcp2361",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "62AAD1D8-D312-452A-80E7-97FA3238C95F",
                    "versionEndExcluding": "xcp3070",
                    "versionStartIncluding": "xcp3000",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3DA2D526-BDCF-4A65-914A-B3BA3A0CD613",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2FD8BD3B-C35B-4C44-B5A1-FA4646ACB374",
                    "versionEndExcluding": "xcp2361",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F429B6AB-44E3-412F-AAE6-33B6F1150262",
                    "versionEndExcluding": "xcp3070",
                    "versionStartIncluding": "xcp3000",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE0CF40B-E5BD-4558-9321-184D58EF621D",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "66D6EF49-7094-41D9-BDF5-AE5846E37418",
                    "versionEndExcluding": "xcp2361",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "78152A31-DB06-4F13-94EA-D3C94B240EE0",
                    "versionEndExcluding": "xcp3070",
                    "versionStartIncluding": "xcp3000",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0F3C9C09-7B2B-4DB6-8BE0-35302ED35776",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6593DA00-EE33-4223-BEAE-8DC629E79287",
                    "versionEndExcluding": "xcp2361",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EB1FF50C-D9D0-4DF0-90F8-9259BD7B315B",
                    "versionEndExcluding": "xcp3070",
                    "versionStartIncluding": "xcp3000",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "95503CE5-1D06-4092-A60D-D310AADCAFB1",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients."
          },
          {
            "lang": "es",
            "value": "Se ha encontrado un fallo de denegaci\u00f3n de servicio en OpenSSL en las versiones 0.9.8, 1.0.1, 1.0.2 hasta la 1.0.2h y la 1.1.0 en la forma en la que el protocolo TLS/SSL defini\u00f3 el procesamiento de paquetes ALERT durante una negociaci\u00f3n de conexi\u00f3n. Un atacante remoto podr\u00eda emplear este fallo para hacer que un servidor TLS/SSL consuma una cantidad excesiva de recursos de CPU y fracase a la hora de aceptar conexiones de otros clientes."
          }
        ],
        "id": "CVE-2016-8610",
        "lastModified": "2024-01-26T17:44:24.227",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2017-11-13T22:29:00.203",
        "references": [
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0286.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0574.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-1659.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://seclists.org/oss-sec/2016/q4/224"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/93841"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1037084"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1413"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1414"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1658"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1801"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1802"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2493"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2494"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Issue Tracking",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Broken Link"
            ],
            "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.360.cn/cve/CVE-2016-8610/"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20171130-0001/"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.paloaltonetworks.com/CVE-2016-8610"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03897en_us"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3773"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2020.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-400"
              }
            ],
            "source": "secalert@redhat.com",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-400"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "gnutls-3.7.2-1.2 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the gnutls-3.7.2-1.2 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10801",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10801-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2006-4790 page",
        "url": "https://www.suse.com/security/cve/CVE-2006-4790/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2008-1948 page",
        "url": "https://www.suse.com/security/cve/CVE-2008-1948/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2008-1949 page",
        "url": "https://www.suse.com/security/cve/CVE-2008-1949/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2008-1950 page",
        "url": "https://www.suse.com/security/cve/CVE-2008-1950/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8610 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8610/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7869 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7869/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-10846 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-10846/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-3829 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-3829/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-3836 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-3836/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-13777 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-13777/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-20232 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-20232/"
      }
    ],
    "title": "gnutls-3.7.2-1.2 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10801-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.7.2-1.2.aarch64",
                "product": {
                  "name": "gnutls-3.7.2-1.2.aarch64",
                  "product_id": "gnutls-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-guile-3.7.2-1.2.aarch64",
                "product": {
                  "name": "gnutls-guile-3.7.2-1.2.aarch64",
                  "product_id": "gnutls-guile-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-dane-devel-3.7.2-1.2.aarch64",
                "product": {
                  "name": "libgnutls-dane-devel-3.7.2-1.2.aarch64",
                  "product_id": "libgnutls-dane-devel-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-dane0-3.7.2-1.2.aarch64",
                "product": {
                  "name": "libgnutls-dane0-3.7.2-1.2.aarch64",
                  "product_id": "libgnutls-dane0-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-3.7.2-1.2.aarch64",
                "product": {
                  "name": "libgnutls-devel-3.7.2-1.2.aarch64",
                  "product_id": "libgnutls-devel-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-32bit-3.7.2-1.2.aarch64",
                "product": {
                  "name": "libgnutls-devel-32bit-3.7.2-1.2.aarch64",
                  "product_id": "libgnutls-devel-32bit-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.7.2-1.2.aarch64",
                "product": {
                  "name": "libgnutls30-3.7.2-1.2.aarch64",
                  "product_id": "libgnutls30-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-32bit-3.7.2-1.2.aarch64",
                "product": {
                  "name": "libgnutls30-32bit-3.7.2-1.2.aarch64",
                  "product_id": "libgnutls30-32bit-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-hmac-3.7.2-1.2.aarch64",
                "product": {
                  "name": "libgnutls30-hmac-3.7.2-1.2.aarch64",
                  "product_id": "libgnutls30-hmac-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx-devel-3.7.2-1.2.aarch64",
                "product": {
                  "name": "libgnutlsxx-devel-3.7.2-1.2.aarch64",
                  "product_id": "libgnutlsxx-devel-3.7.2-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx28-3.7.2-1.2.aarch64",
                "product": {
                  "name": "libgnutlsxx28-3.7.2-1.2.aarch64",
                  "product_id": "libgnutlsxx28-3.7.2-1.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "gnutls-3.7.2-1.2.ppc64le",
                  "product_id": "gnutls-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-guile-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "gnutls-guile-3.7.2-1.2.ppc64le",
                  "product_id": "gnutls-guile-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-dane-devel-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "libgnutls-dane-devel-3.7.2-1.2.ppc64le",
                  "product_id": "libgnutls-dane-devel-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-dane0-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "libgnutls-dane0-3.7.2-1.2.ppc64le",
                  "product_id": "libgnutls-dane0-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "libgnutls-devel-3.7.2-1.2.ppc64le",
                  "product_id": "libgnutls-devel-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
                  "product_id": "libgnutls-devel-32bit-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "libgnutls30-3.7.2-1.2.ppc64le",
                  "product_id": "libgnutls30-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-32bit-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "libgnutls30-32bit-3.7.2-1.2.ppc64le",
                  "product_id": "libgnutls30-32bit-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-hmac-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "libgnutls30-hmac-3.7.2-1.2.ppc64le",
                  "product_id": "libgnutls30-hmac-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx-devel-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "libgnutlsxx-devel-3.7.2-1.2.ppc64le",
                  "product_id": "libgnutlsxx-devel-3.7.2-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx28-3.7.2-1.2.ppc64le",
                "product": {
                  "name": "libgnutlsxx28-3.7.2-1.2.ppc64le",
                  "product_id": "libgnutlsxx28-3.7.2-1.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.7.2-1.2.s390x",
                "product": {
                  "name": "gnutls-3.7.2-1.2.s390x",
                  "product_id": "gnutls-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-guile-3.7.2-1.2.s390x",
                "product": {
                  "name": "gnutls-guile-3.7.2-1.2.s390x",
                  "product_id": "gnutls-guile-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-dane-devel-3.7.2-1.2.s390x",
                "product": {
                  "name": "libgnutls-dane-devel-3.7.2-1.2.s390x",
                  "product_id": "libgnutls-dane-devel-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-dane0-3.7.2-1.2.s390x",
                "product": {
                  "name": "libgnutls-dane0-3.7.2-1.2.s390x",
                  "product_id": "libgnutls-dane0-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-3.7.2-1.2.s390x",
                "product": {
                  "name": "libgnutls-devel-3.7.2-1.2.s390x",
                  "product_id": "libgnutls-devel-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-32bit-3.7.2-1.2.s390x",
                "product": {
                  "name": "libgnutls-devel-32bit-3.7.2-1.2.s390x",
                  "product_id": "libgnutls-devel-32bit-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.7.2-1.2.s390x",
                "product": {
                  "name": "libgnutls30-3.7.2-1.2.s390x",
                  "product_id": "libgnutls30-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-32bit-3.7.2-1.2.s390x",
                "product": {
                  "name": "libgnutls30-32bit-3.7.2-1.2.s390x",
                  "product_id": "libgnutls30-32bit-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-hmac-3.7.2-1.2.s390x",
                "product": {
                  "name": "libgnutls30-hmac-3.7.2-1.2.s390x",
                  "product_id": "libgnutls30-hmac-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx-devel-3.7.2-1.2.s390x",
                "product": {
                  "name": "libgnutlsxx-devel-3.7.2-1.2.s390x",
                  "product_id": "libgnutlsxx-devel-3.7.2-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx28-3.7.2-1.2.s390x",
                "product": {
                  "name": "libgnutlsxx28-3.7.2-1.2.s390x",
                  "product_id": "libgnutlsxx28-3.7.2-1.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.7.2-1.2.x86_64",
                "product": {
                  "name": "gnutls-3.7.2-1.2.x86_64",
                  "product_id": "gnutls-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-guile-3.7.2-1.2.x86_64",
                "product": {
                  "name": "gnutls-guile-3.7.2-1.2.x86_64",
                  "product_id": "gnutls-guile-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-dane-devel-3.7.2-1.2.x86_64",
                "product": {
                  "name": "libgnutls-dane-devel-3.7.2-1.2.x86_64",
                  "product_id": "libgnutls-dane-devel-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-dane0-3.7.2-1.2.x86_64",
                "product": {
                  "name": "libgnutls-dane0-3.7.2-1.2.x86_64",
                  "product_id": "libgnutls-dane0-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-3.7.2-1.2.x86_64",
                "product": {
                  "name": "libgnutls-devel-3.7.2-1.2.x86_64",
                  "product_id": "libgnutls-devel-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-32bit-3.7.2-1.2.x86_64",
                "product": {
                  "name": "libgnutls-devel-32bit-3.7.2-1.2.x86_64",
                  "product_id": "libgnutls-devel-32bit-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.7.2-1.2.x86_64",
                "product": {
                  "name": "libgnutls30-3.7.2-1.2.x86_64",
                  "product_id": "libgnutls30-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-32bit-3.7.2-1.2.x86_64",
                "product": {
                  "name": "libgnutls30-32bit-3.7.2-1.2.x86_64",
                  "product_id": "libgnutls30-32bit-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-hmac-3.7.2-1.2.x86_64",
                "product": {
                  "name": "libgnutls30-hmac-3.7.2-1.2.x86_64",
                  "product_id": "libgnutls30-hmac-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx-devel-3.7.2-1.2.x86_64",
                "product": {
                  "name": "libgnutlsxx-devel-3.7.2-1.2.x86_64",
                  "product_id": "libgnutlsxx-devel-3.7.2-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx28-3.7.2-1.2.x86_64",
                "product": {
                  "name": "libgnutlsxx28-3.7.2-1.2.x86_64",
                  "product_id": "libgnutlsxx28-3.7.2-1.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64"
        },
        "product_reference": "gnutls-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le"
        },
        "product_reference": "gnutls-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x"
        },
        "product_reference": "gnutls-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64"
        },
        "product_reference": "gnutls-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-guile-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64"
        },
        "product_reference": "gnutls-guile-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-guile-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le"
        },
        "product_reference": "gnutls-guile-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-guile-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x"
        },
        "product_reference": "gnutls-guile-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-guile-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64"
        },
        "product_reference": "gnutls-guile-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-dane-devel-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64"
        },
        "product_reference": "libgnutls-dane-devel-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-dane-devel-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le"
        },
        "product_reference": "libgnutls-dane-devel-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-dane-devel-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x"
        },
        "product_reference": "libgnutls-dane-devel-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-dane-devel-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64"
        },
        "product_reference": "libgnutls-dane-devel-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-dane0-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64"
        },
        "product_reference": "libgnutls-dane0-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-dane0-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le"
        },
        "product_reference": "libgnutls-dane0-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-dane0-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x"
        },
        "product_reference": "libgnutls-dane0-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-dane0-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64"
        },
        "product_reference": "libgnutls-dane0-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64"
        },
        "product_reference": "libgnutls-devel-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le"
        },
        "product_reference": "libgnutls-devel-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x"
        },
        "product_reference": "libgnutls-devel-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64"
        },
        "product_reference": "libgnutls-devel-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-32bit-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64"
        },
        "product_reference": "libgnutls-devel-32bit-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-32bit-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le"
        },
        "product_reference": "libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-32bit-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x"
        },
        "product_reference": "libgnutls-devel-32bit-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-32bit-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64"
        },
        "product_reference": "libgnutls-devel-32bit-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64"
        },
        "product_reference": "libgnutls30-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le"
        },
        "product_reference": "libgnutls30-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x"
        },
        "product_reference": "libgnutls30-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64"
        },
        "product_reference": "libgnutls30-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-32bit-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64"
        },
        "product_reference": "libgnutls30-32bit-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-32bit-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le"
        },
        "product_reference": "libgnutls30-32bit-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-32bit-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x"
        },
        "product_reference": "libgnutls30-32bit-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-32bit-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64"
        },
        "product_reference": "libgnutls30-32bit-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-hmac-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64"
        },
        "product_reference": "libgnutls30-hmac-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-hmac-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le"
        },
        "product_reference": "libgnutls30-hmac-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-hmac-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x"
        },
        "product_reference": "libgnutls30-hmac-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-hmac-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64"
        },
        "product_reference": "libgnutls30-hmac-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64"
        },
        "product_reference": "libgnutlsxx-devel-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le"
        },
        "product_reference": "libgnutlsxx-devel-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x"
        },
        "product_reference": "libgnutlsxx-devel-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64"
        },
        "product_reference": "libgnutlsxx-devel-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx28-3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64"
        },
        "product_reference": "libgnutlsxx28-3.7.2-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx28-3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le"
        },
        "product_reference": "libgnutlsxx28-3.7.2-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx28-3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x"
        },
        "product_reference": "libgnutlsxx28-3.7.2-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx28-3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        },
        "product_reference": "libgnutlsxx28-3.7.2-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-4790",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2006-4790"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2006-4790",
          "url": "https://www.suse.com/security/cve/CVE-2006-4790"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107874 for CVE-2006-4790",
          "url": "https://bugzilla.suse.com/1107874"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 206636 for CVE-2006-4790",
          "url": "https://bugzilla.suse.com/206636"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2006-4790"
    },
    {
      "cve": "CVE-2008-1948",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2008-1948"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2008-1948",
          "url": "https://www.suse.com/security/cve/CVE-2008-1948"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 392947 for CVE-2008-1948",
          "url": "https://bugzilla.suse.com/392947"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 670152 for CVE-2008-1948",
          "url": "https://bugzilla.suse.com/670152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2008-1948"
    },
    {
      "cve": "CVE-2008-1949",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2008-1949"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2008-1949",
          "url": "https://www.suse.com/security/cve/CVE-2008-1949"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 392947 for CVE-2008-1949",
          "url": "https://bugzilla.suse.com/392947"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 670152 for CVE-2008-1949",
          "url": "https://bugzilla.suse.com/670152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2008-1949"
    },
    {
      "cve": "CVE-2008-1950",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2008-1950"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2008-1950",
          "url": "https://www.suse.com/security/cve/CVE-2008-1950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 392947 for CVE-2008-1950",
          "url": "https://bugzilla.suse.com/392947"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 670152 for CVE-2008-1950",
          "url": "https://bugzilla.suse.com/670152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2008-1950"
    },
    {
      "cve": "CVE-2016-8610",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8610"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8610",
          "url": "https://www.suse.com/security/cve/CVE-2016-8610"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005878 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1005878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005879 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1005879"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1110018 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1110018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1120592 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1120592"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1126909 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1126909"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1148697 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1148697"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982575 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/982575"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-8610"
    },
    {
      "cve": "CVE-2017-7869",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7869"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor\u0027s GNUTLS-SA-2017-3 report) is fixed in 3.5.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7869",
          "url": "https://www.suse.com/security/cve/CVE-2017-7869"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1034173 for CVE-2017-7869",
          "url": "https://bugzilla.suse.com/1034173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1038337 for CVE-2017-7869",
          "url": "https://bugzilla.suse.com/1038337"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1049210 for CVE-2017-7869",
          "url": "https://bugzilla.suse.com/1049210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1149679 for CVE-2017-7869",
          "url": "https://bugzilla.suse.com/1149679"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-7869"
    },
    {
      "cve": "CVE-2018-10846",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-10846"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of \"Just in Time\" Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-10846",
          "url": "https://www.suse.com/security/cve/CVE-2018-10846"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105460 for CVE-2018-10846",
          "url": "https://bugzilla.suse.com/1105460"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-10846"
    },
    {
      "cve": "CVE-2019-3829",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-3829"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-3829",
          "url": "https://www.suse.com/security/cve/CVE-2019-3829"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130681 for CVE-2019-3829",
          "url": "https://bugzilla.suse.com/1130681"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-3829"
    },
    {
      "cve": "CVE-2019-3836",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-3836"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-3836",
          "url": "https://www.suse.com/security/cve/CVE-2019-3836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130682 for CVE-2019-3836",
          "url": "https://bugzilla.suse.com/1130682"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-3836"
    },
    {
      "cve": "CVE-2020-13777",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-13777"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-13777",
          "url": "https://www.suse.com/security/cve/CVE-2020-13777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172461 for CVE-2020-13777",
          "url": "https://bugzilla.suse.com/1172461"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172506 for CVE-2020-13777",
          "url": "https://bugzilla.suse.com/1172506"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-13777"
    },
    {
      "cve": "CVE-2021-20232",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-20232"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
          "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-20232",
          "url": "https://www.suse.com/security/cve/CVE-2021-20232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183456 for CVE-2021-20232",
          "url": "https://bugzilla.suse.com/1183456"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:gnutls-guile-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-dane0-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls-devel-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-32bit-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutls30-hmac-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx-devel-3.7.2-1.2.x86_64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.aarch64",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.ppc64le",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.s390x",
            "openSUSE Tumbleweed:libgnutlsxx28-3.7.2-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-20232"
    }
  ]
}