RHSA-2018:1062
Vulnerability from csaf_opensuse - Published: 2018-04-10 00:00 - Updated: 2026-09-20 11:00Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2018:1062.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2018:1062.
Patchnames: RHSA-2018:1062
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.8 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
important
6.8 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
6.2 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
low
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
low
6.2 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
critical
5.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
5.4 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
8.4 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-3672
Threats
Impact
low
References
107 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2018:1062.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2018:1062.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2018:1062",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2018_1062.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3672 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7913 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8633 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8633/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000252 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000407 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000407/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000410 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-12154 page",
"url": "https://www.suse.com/security/cve/CVE-2017-12154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-12190 page",
"url": "https://www.suse.com/security/cve/CVE-2017-12190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-13166 page",
"url": "https://www.suse.com/security/cve/CVE-2017-13166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-14140 page",
"url": "https://www.suse.com/security/cve/CVE-2017-14140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15116 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15121 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15126 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15127 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15129 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15265 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15265/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-17448 page",
"url": "https://www.suse.com/security/cve/CVE-2017-17448/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-17449 page",
"url": "https://www.suse.com/security/cve/CVE-2017-17449/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-17558 page",
"url": "https://www.suse.com/security/cve/CVE-2017-17558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-18017 page",
"url": "https://www.suse.com/security/cve/CVE-2017-18017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-18203 page",
"url": "https://www.suse.com/security/cve/CVE-2017-18203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7294 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7294/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-8824 page",
"url": "https://www.suse.com/security/cve/CVE-2017-8824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-9725 page",
"url": "https://www.suse.com/security/cve/CVE-2017-9725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000004 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5750 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5750/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6927 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6927/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:00:49Z",
"generator": {
"date": "2018-04-10T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2018:1062",
"initial_release_date": "2018-04-10T00:00:00Z",
"revision_history": [
{
"date": "2018-04-10T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:00:49Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-862.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-862.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-862.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-862.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-862.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:3.10.0-862.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-862.el7.x86_64",
"product_id": "kernel-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-862.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-862.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-862.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-862.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-862.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-862.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-862.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-862.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-862.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-862.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-862.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:3.10.0-862.el7.x86_64",
"product": {
"name": "kernel-headers-0:3.10.0-862.el7.x86_64",
"product_id": "kernel-headers-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-862.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-862.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-862.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-862.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-862.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-862.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-862.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-862.el7.x86_64",
"product_id": "perf-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-862.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-862.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-862.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-862.el7.x86_64",
"product_id": "python-perf-0:3.10.0-862.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-862.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-862.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-862.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-862.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64"
},
"product_reference": "kernel-headers-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-862.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-862.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-3672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3672"
}
],
"notes": [
{
"category": "general",
"text": "The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3672",
"url": "https://www.suse.com/security/cve/CVE-2016-3672"
},
{
"category": "external",
"summary": "SUSE Bug 974308 for CVE-2016-3672",
"url": "https://bugzilla.suse.com/974308"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-3672"
},
{
"cve": "CVE-2016-7913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7913"
}
],
"notes": [
{
"category": "general",
"text": "The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7913",
"url": "https://www.suse.com/security/cve/CVE-2016-7913"
},
{
"category": "external",
"summary": "SUSE Bug 1010478 for CVE-2016-7913",
"url": "https://bugzilla.suse.com/1010478"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-7913"
},
{
"cve": "CVE-2016-8633",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8633"
}
],
"notes": [
{
"category": "general",
"text": "drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8633",
"url": "https://www.suse.com/security/cve/CVE-2016-8633"
},
{
"category": "external",
"summary": "SUSE Bug 1008833 for CVE-2016-8633",
"url": "https://bugzilla.suse.com/1008833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-8633"
},
{
"cve": "CVE-2017-1000252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000252"
}
],
"notes": [
{
"category": "general",
"text": "The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000252",
"url": "https://www.suse.com/security/cve/CVE-2017-1000252"
},
{
"category": "external",
"summary": "SUSE Bug 1058038 for CVE-2017-1000252",
"url": "https://bugzilla.suse.com/1058038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-1000252"
},
{
"cve": "CVE-2017-1000407",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000407"
}
],
"notes": [
{
"category": "general",
"text": "The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000407",
"url": "https://www.suse.com/security/cve/CVE-2017-1000407"
},
{
"category": "external",
"summary": "SUSE Bug 1071021 for CVE-2017-1000407",
"url": "https://bugzilla.suse.com/1071021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-1000407"
},
{
"cve": "CVE-2017-1000410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000410"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2017-1000251) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(\u0026efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(\u0026ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) \u0026efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000410",
"url": "https://www.suse.com/security/cve/CVE-2017-1000410"
},
{
"category": "external",
"summary": "SUSE Bug 1070535 for CVE-2017-1000410",
"url": "https://bugzilla.suse.com/1070535"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-1000410"
},
{
"cve": "CVE-2017-12154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-12154"
}
],
"notes": [
{
"category": "general",
"text": "The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the \"CR8-load exiting\" and \"CR8-store exiting\" L0 vmcs02 controls exist in cases where L1 omits the \"use TPR shadow\" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-12154",
"url": "https://www.suse.com/security/cve/CVE-2017-12154"
},
{
"category": "external",
"summary": "SUSE Bug 1058038 for CVE-2017-12154",
"url": "https://bugzilla.suse.com/1058038"
},
{
"category": "external",
"summary": "SUSE Bug 1058507 for CVE-2017-12154",
"url": "https://bugzilla.suse.com/1058507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-12154"
},
{
"cve": "CVE-2017-12190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-12190"
}
],
"notes": [
{
"category": "general",
"text": "The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-12190",
"url": "https://www.suse.com/security/cve/CVE-2017-12190"
},
{
"category": "external",
"summary": "SUSE Bug 1062568 for CVE-2017-12190",
"url": "https://bugzilla.suse.com/1062568"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2017-12190",
"url": "https://bugzilla.suse.com/1091815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-12190"
},
{
"cve": "CVE-2017-13166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-13166"
}
],
"notes": [
{
"category": "general",
"text": "An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-13166",
"url": "https://www.suse.com/security/cve/CVE-2017-13166"
},
{
"category": "external",
"summary": "SUSE Bug 1072865 for CVE-2017-13166",
"url": "https://bugzilla.suse.com/1072865"
},
{
"category": "external",
"summary": "SUSE Bug 1074488 for CVE-2017-13166",
"url": "https://bugzilla.suse.com/1074488"
},
{
"category": "external",
"summary": "SUSE Bug 1085447 for CVE-2017-13166",
"url": "https://bugzilla.suse.com/1085447"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2017-13166",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2017-13166",
"url": "https://bugzilla.suse.com/1091815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-13166"
},
{
"cve": "CVE-2017-14140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-14140"
}
],
"notes": [
{
"category": "general",
"text": "The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn\u0027t check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-14140",
"url": "https://www.suse.com/security/cve/CVE-2017-14140"
},
{
"category": "external",
"summary": "SUSE Bug 1057179 for CVE-2017-14140",
"url": "https://bugzilla.suse.com/1057179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-14140"
},
{
"cve": "CVE-2017-15116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15116"
}
],
"notes": [
{
"category": "general",
"text": "The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15116",
"url": "https://www.suse.com/security/cve/CVE-2017-15116"
},
{
"category": "external",
"summary": "SUSE Bug 1070613 for CVE-2017-15116",
"url": "https://bugzilla.suse.com/1070613"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-15116"
},
{
"cve": "CVE-2017-15121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15121"
}
],
"notes": [
{
"category": "general",
"text": "A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15121",
"url": "https://www.suse.com/security/cve/CVE-2017-15121"
},
{
"category": "external",
"summary": "SUSE Bug 1071726 for CVE-2017-15121",
"url": "https://bugzilla.suse.com/1071726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-15121"
},
{
"cve": "CVE-2017-15126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15126"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15126",
"url": "https://www.suse.com/security/cve/CVE-2017-15126"
},
{
"category": "external",
"summary": "SUSE Bug 1073108 for CVE-2017-15126",
"url": "https://bugzilla.suse.com/1073108"
},
{
"category": "external",
"summary": "SUSE Bug 1171522 for CVE-2017-15126",
"url": "https://bugzilla.suse.com/1171522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-15126"
},
{
"cve": "CVE-2017-15127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15127"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15127",
"url": "https://www.suse.com/security/cve/CVE-2017-15127"
},
{
"category": "external",
"summary": "SUSE Bug 1073113 for CVE-2017-15127",
"url": "https://bugzilla.suse.com/1073113"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-15127"
},
{
"cve": "CVE-2017-15129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15129"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15129",
"url": "https://www.suse.com/security/cve/CVE-2017-15129"
},
{
"category": "external",
"summary": "SUSE Bug 1074839 for CVE-2017-15129",
"url": "https://bugzilla.suse.com/1074839"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-15129"
},
{
"cve": "CVE-2017-15265",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15265"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15265",
"url": "https://www.suse.com/security/cve/CVE-2017-15265"
},
{
"category": "external",
"summary": "SUSE Bug 1062520 for CVE-2017-15265",
"url": "https://bugzilla.suse.com/1062520"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2017-15265",
"url": "https://bugzilla.suse.com/1115893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-15265"
},
{
"cve": "CVE-2017-17448",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-17448"
}
],
"notes": [
{
"category": "general",
"text": "net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-17448",
"url": "https://www.suse.com/security/cve/CVE-2017-17448"
},
{
"category": "external",
"summary": "SUSE Bug 1071693 for CVE-2017-17448",
"url": "https://bugzilla.suse.com/1071693"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-17448"
},
{
"cve": "CVE-2017-17449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-17449"
}
],
"notes": [
{
"category": "general",
"text": "The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-17449",
"url": "https://www.suse.com/security/cve/CVE-2017-17449"
},
{
"category": "external",
"summary": "SUSE Bug 1071694 for CVE-2017-17449",
"url": "https://bugzilla.suse.com/1071694"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-17449"
},
{
"cve": "CVE-2017-17558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-17558"
}
],
"notes": [
{
"category": "general",
"text": "The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-17558",
"url": "https://www.suse.com/security/cve/CVE-2017-17558"
},
{
"category": "external",
"summary": "SUSE Bug 1072561 for CVE-2017-17558",
"url": "https://bugzilla.suse.com/1072561"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2017-17558",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1146519 for CVE-2017-17558",
"url": "https://bugzilla.suse.com/1146519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-17558"
},
{
"cve": "CVE-2017-18017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-18017"
}
],
"notes": [
{
"category": "general",
"text": "The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-18017",
"url": "https://www.suse.com/security/cve/CVE-2017-18017"
},
{
"category": "external",
"summary": "SUSE Bug 1074488 for CVE-2017-18017",
"url": "https://bugzilla.suse.com/1074488"
},
{
"category": "external",
"summary": "SUSE Bug 1080255 for CVE-2017-18017",
"url": "https://bugzilla.suse.com/1080255"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2017-18017",
"url": "https://bugzilla.suse.com/1091815"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2017-18017",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 971126 for CVE-2017-18017",
"url": "https://bugzilla.suse.com/971126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-18017"
},
{
"cve": "CVE-2017-18203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-18203"
}
],
"notes": [
{
"category": "general",
"text": "The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-18203",
"url": "https://www.suse.com/security/cve/CVE-2017-18203"
},
{
"category": "external",
"summary": "SUSE Bug 1083242 for CVE-2017-18203",
"url": "https://bugzilla.suse.com/1083242"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2017-18203",
"url": "https://bugzilla.suse.com/1091815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-18203"
},
{
"cve": "CVE-2017-7294",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7294"
}
],
"notes": [
{
"category": "general",
"text": "The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7294",
"url": "https://www.suse.com/security/cve/CVE-2017-7294"
},
{
"category": "external",
"summary": "SUSE Bug 1027179 for CVE-2017-7294",
"url": "https://bugzilla.suse.com/1027179"
},
{
"category": "external",
"summary": "SUSE Bug 1031440 for CVE-2017-7294",
"url": "https://bugzilla.suse.com/1031440"
},
{
"category": "external",
"summary": "SUSE Bug 1031481 for CVE-2017-7294",
"url": "https://bugzilla.suse.com/1031481"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2017-7294",
"url": "https://bugzilla.suse.com/1115893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-7294"
},
{
"cve": "CVE-2017-8824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-8824"
}
],
"notes": [
{
"category": "general",
"text": "The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-8824",
"url": "https://www.suse.com/security/cve/CVE-2017-8824"
},
{
"category": "external",
"summary": "SUSE Bug 1070771 for CVE-2017-8824",
"url": "https://bugzilla.suse.com/1070771"
},
{
"category": "external",
"summary": "SUSE Bug 1076734 for CVE-2017-8824",
"url": "https://bugzilla.suse.com/1076734"
},
{
"category": "external",
"summary": "SUSE Bug 1092904 for CVE-2017-8824",
"url": "https://bugzilla.suse.com/1092904"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2017-8824",
"url": "https://bugzilla.suse.com/1115893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-8824"
},
{
"cve": "CVE-2017-9725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-9725"
}
],
"notes": [
{
"category": "general",
"text": "In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-9725",
"url": "https://www.suse.com/security/cve/CVE-2017-9725"
},
{
"category": "external",
"summary": "SUSE Bug 1057481 for CVE-2017-9725",
"url": "https://bugzilla.suse.com/1057481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-9725"
},
{
"cve": "CVE-2018-1000004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000004"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000004",
"url": "https://www.suse.com/security/cve/CVE-2018-1000004"
},
{
"category": "external",
"summary": "SUSE Bug 1076017 for CVE-2018-1000004",
"url": "https://bugzilla.suse.com/1076017"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2018-1000004",
"url": "https://bugzilla.suse.com/1091815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000004"
},
{
"cve": "CVE-2018-5750",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5750"
}
],
"notes": [
{
"category": "general",
"text": "The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5750",
"url": "https://www.suse.com/security/cve/CVE-2018-5750"
},
{
"category": "external",
"summary": "SUSE Bug 1077892 for CVE-2018-5750",
"url": "https://bugzilla.suse.com/1077892"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-5750",
"url": "https://bugzilla.suse.com/1087082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-5750"
},
{
"cve": "CVE-2018-6927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6927"
}
],
"notes": [
{
"category": "general",
"text": "The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6927",
"url": "https://www.suse.com/security/cve/CVE-2018-6927"
},
{
"category": "external",
"summary": "SUSE Bug 1080757 for CVE-2018-6927",
"url": "https://bugzilla.suse.com/1080757"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2018-6927",
"url": "https://bugzilla.suse.com/1091815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-862.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-862.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-04-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-6927"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…