Vulnerability from csaf_suse
Published
2018-08-09 13:56
Modified
2018-08-09 13:56
Summary
Security update for openssh
Notes
Title of the patch
Security update for openssh
Description of the patch
This update for openssh fixes the following issues:
Security issues fixed:
- CVE-2016-10012: Fix pre-auth compression checks that could be optimized away (bsc#1016370).
- CVE-2016-10708: Fix remote denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYSmessage (bsc#1076957).
- CVE-2017-15906: Fix r/o sftp-server zero byte file creation (bsc#1065000).
- CVE-2008-1483: Fix accidental re-introduction of CVE-2008-1483 (bsc#1069509).
Bug fixes:
- bsc#1017099: Match conditions with uppercase hostnames fail (bsc#1017099)
- bsc#1053972: supportedKeyExchanges diffie-hellman-group1-sha1 is duplicated (bsc#1053972)
- bsc#1023275: Messages suppressed after upgrade from SLES 11 SP3 to SP4 (bsc#1023275)
Patchnames
slessp4-openssh-13719
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for openssh", title: "Title of the patch", }, { category: "description", text: "This update for openssh fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2016-10012: Fix pre-auth compression checks that could be optimized away (bsc#1016370).\n- CVE-2016-10708: Fix remote denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYSmessage (bsc#1076957).\n- CVE-2017-15906: Fix r/o sftp-server zero byte file creation (bsc#1065000).\n- CVE-2008-1483: Fix accidental re-introduction of CVE-2008-1483 (bsc#1069509).\n\nBug fixes:\n\n- bsc#1017099: Match conditions with uppercase hostnames fail (bsc#1017099)\n- bsc#1053972: supportedKeyExchanges diffie-hellman-group1-sha1 is duplicated (bsc#1053972)\n- bsc#1023275: Messages suppressed after upgrade from SLES 11 SP3 to SP4 (bsc#1023275)\n", title: "Description of the patch", }, { category: "details", text: "slessp4-openssh-13719", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2275-1.json", }, { category: "self", summary: "URL for SUSE-SU-2018:2275-1", url: "https://www.suse.com/support/update/announcement/2018/suse-su-20182275-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2018:2275-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2018-August/004398.html", }, { category: "self", summary: "SUSE Bug 1016370", url: "https://bugzilla.suse.com/1016370", }, { category: "self", summary: "SUSE Bug 1017099", url: "https://bugzilla.suse.com/1017099", }, { category: "self", summary: "SUSE Bug 1023275", url: "https://bugzilla.suse.com/1023275", }, { category: "self", summary: "SUSE Bug 1053972", url: "https://bugzilla.suse.com/1053972", }, { category: "self", summary: "SUSE Bug 1065000", url: "https://bugzilla.suse.com/1065000", }, { category: "self", summary: "SUSE Bug 1069509", url: "https://bugzilla.suse.com/1069509", }, { category: "self", summary: "SUSE Bug 1076957", url: "https://bugzilla.suse.com/1076957", }, { category: "self", summary: "SUSE CVE CVE-2008-1483 page", url: "https://www.suse.com/security/cve/CVE-2008-1483/", }, { category: "self", summary: "SUSE CVE CVE-2016-10012 page", url: "https://www.suse.com/security/cve/CVE-2016-10012/", }, { category: "self", summary: "SUSE CVE CVE-2016-10708 page", url: "https://www.suse.com/security/cve/CVE-2016-10708/", }, { category: "self", summary: "SUSE CVE CVE-2017-15906 page", url: "https://www.suse.com/security/cve/CVE-2017-15906/", }, ], title: "Security update for openssh", tracking: { current_release_date: "2018-08-09T13:56:33Z", generator: { date: "2018-08-09T13:56:33Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2018:2275-1", initial_release_date: "2018-08-09T13:56:33Z", revision_history: [ { date: "2018-08-09T13:56:33Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "openssh-6.6p1-36.3.1.i586", product: { name: "openssh-6.6p1-36.3.1.i586", product_id: "openssh-6.6p1-36.3.1.i586", }, }, { category: "product_version", name: "openssh-askpass-gnome-6.6p1-36.3.1.i586", product: { name: "openssh-askpass-gnome-6.6p1-36.3.1.i586", product_id: "openssh-askpass-gnome-6.6p1-36.3.1.i586", }, }, { category: "product_version", name: "openssh-fips-6.6p1-36.3.1.i586", product: { name: "openssh-fips-6.6p1-36.3.1.i586", product_id: "openssh-fips-6.6p1-36.3.1.i586", }, }, { category: "product_version", name: "openssh-helpers-6.6p1-36.3.1.i586", product: { name: "openssh-helpers-6.6p1-36.3.1.i586", product_id: "openssh-helpers-6.6p1-36.3.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "openssh-6.6p1-36.3.1.ia64", product: { name: "openssh-6.6p1-36.3.1.ia64", product_id: "openssh-6.6p1-36.3.1.ia64", }, }, { category: "product_version", name: "openssh-askpass-gnome-6.6p1-36.3.1.ia64", product: { name: "openssh-askpass-gnome-6.6p1-36.3.1.ia64", product_id: "openssh-askpass-gnome-6.6p1-36.3.1.ia64", }, }, { category: "product_version", name: "openssh-fips-6.6p1-36.3.1.ia64", product: { name: "openssh-fips-6.6p1-36.3.1.ia64", product_id: "openssh-fips-6.6p1-36.3.1.ia64", }, }, { category: "product_version", name: "openssh-helpers-6.6p1-36.3.1.ia64", product: { name: "openssh-helpers-6.6p1-36.3.1.ia64", product_id: "openssh-helpers-6.6p1-36.3.1.ia64", }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "openssh-6.6p1-36.3.1.ppc64", product: { name: "openssh-6.6p1-36.3.1.ppc64", product_id: "openssh-6.6p1-36.3.1.ppc64", }, }, { category: "product_version", name: "openssh-askpass-gnome-6.6p1-36.3.1.ppc64", product: { name: "openssh-askpass-gnome-6.6p1-36.3.1.ppc64", product_id: "openssh-askpass-gnome-6.6p1-36.3.1.ppc64", }, }, { category: "product_version", name: "openssh-fips-6.6p1-36.3.1.ppc64", product: { name: "openssh-fips-6.6p1-36.3.1.ppc64", product_id: "openssh-fips-6.6p1-36.3.1.ppc64", }, }, { category: "product_version", name: "openssh-helpers-6.6p1-36.3.1.ppc64", product: { name: "openssh-helpers-6.6p1-36.3.1.ppc64", product_id: "openssh-helpers-6.6p1-36.3.1.ppc64", }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "openssh-6.6p1-36.3.1.s390x", product: { name: "openssh-6.6p1-36.3.1.s390x", product_id: "openssh-6.6p1-36.3.1.s390x", }, }, { category: "product_version", name: "openssh-askpass-gnome-6.6p1-36.3.1.s390x", product: { name: "openssh-askpass-gnome-6.6p1-36.3.1.s390x", product_id: "openssh-askpass-gnome-6.6p1-36.3.1.s390x", }, }, { category: "product_version", name: "openssh-fips-6.6p1-36.3.1.s390x", product: { name: "openssh-fips-6.6p1-36.3.1.s390x", product_id: "openssh-fips-6.6p1-36.3.1.s390x", }, }, { category: "product_version", name: "openssh-helpers-6.6p1-36.3.1.s390x", product: { name: "openssh-helpers-6.6p1-36.3.1.s390x", product_id: "openssh-helpers-6.6p1-36.3.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "openssh-6.6p1-36.3.1.x86_64", product: { name: "openssh-6.6p1-36.3.1.x86_64", product_id: "openssh-6.6p1-36.3.1.x86_64", }, }, { category: "product_version", name: "openssh-askpass-gnome-6.6p1-36.3.1.x86_64", product: { name: "openssh-askpass-gnome-6.6p1-36.3.1.x86_64", product_id: "openssh-askpass-gnome-6.6p1-36.3.1.x86_64", }, }, { category: "product_version", name: "openssh-fips-6.6p1-36.3.1.x86_64", product: { name: "openssh-fips-6.6p1-36.3.1.x86_64", product_id: "openssh-fips-6.6p1-36.3.1.x86_64", }, }, { category: "product_version", name: "openssh-helpers-6.6p1-36.3.1.x86_64", product: { name: "openssh-helpers-6.6p1-36.3.1.x86_64", product_id: "openssh-helpers-6.6p1-36.3.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Server 11 SP4", product: { name: "SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4", product_identification_helper: { cpe: "cpe:/o:suse:suse_sles:11:sp4", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product: { name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:11:sp4", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", }, product_reference: "openssh-6.6p1-36.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", }, product_reference: "openssh-6.6p1-36.3.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", }, product_reference: "openssh-6.6p1-36.3.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", }, product_reference: "openssh-6.6p1-36.3.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", }, product_reference: "openssh-6.6p1-36.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", }, product_reference: "openssh-fips-6.6p1-36.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", }, product_reference: "openssh-fips-6.6p1-36.3.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", }, product_reference: "openssh-fips-6.6p1-36.3.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", }, product_reference: "openssh-fips-6.6p1-36.3.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", }, product_reference: "openssh-fips-6.6p1-36.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", }, product_reference: "openssh-helpers-6.6p1-36.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", }, product_reference: "openssh-helpers-6.6p1-36.3.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", }, product_reference: "openssh-helpers-6.6p1-36.3.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", }, product_reference: "openssh-helpers-6.6p1-36.3.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", }, product_reference: "openssh-helpers-6.6p1-36.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", }, product_reference: "openssh-6.6p1-36.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", }, product_reference: "openssh-6.6p1-36.3.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", }, product_reference: "openssh-6.6p1-36.3.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", }, product_reference: "openssh-6.6p1-36.3.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-6.6p1-36.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", }, product_reference: "openssh-6.6p1-36.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-askpass-gnome-6.6p1-36.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", }, product_reference: "openssh-askpass-gnome-6.6p1-36.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", }, product_reference: "openssh-fips-6.6p1-36.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", }, product_reference: "openssh-fips-6.6p1-36.3.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", }, product_reference: "openssh-fips-6.6p1-36.3.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", }, product_reference: "openssh-fips-6.6p1-36.3.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-fips-6.6p1-36.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", }, product_reference: "openssh-fips-6.6p1-36.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", }, product_reference: "openssh-helpers-6.6p1-36.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", }, product_reference: "openssh-helpers-6.6p1-36.3.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", }, product_reference: "openssh-helpers-6.6p1-36.3.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", }, product_reference: "openssh-helpers-6.6p1-36.3.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "openssh-helpers-6.6p1-36.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", }, product_reference: "openssh-helpers-6.6p1-36.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, ], }, vulnerabilities: [ { cve: "CVE-2008-1483", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2008-1483", }, ], notes: [ { category: "general", text: "OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2008-1483", url: "https://www.suse.com/security/cve/CVE-2008-1483", }, { category: "external", summary: "SUSE Bug 1069509 for CVE-2008-1483", url: "https://bugzilla.suse.com/1069509", }, { category: "external", summary: "SUSE Bug 373527 for CVE-2008-1483", url: "https://bugzilla.suse.com/373527", }, { category: "external", summary: "SUSE Bug 585630 for CVE-2008-1483", url: "https://bugzilla.suse.com/585630", }, { category: "external", summary: "SUSE Bug 647633 for CVE-2008-1483", url: "https://bugzilla.suse.com/647633", }, { category: "external", summary: "SUSE Bug 706386 for CVE-2008-1483", url: "https://bugzilla.suse.com/706386", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2018-08-09T13:56:33Z", details: "important", }, ], title: "CVE-2008-1483", }, { cve: "CVE-2016-10012", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-10012", }, ], notes: [ { category: "general", text: "The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-10012", url: "https://www.suse.com/security/cve/CVE-2016-10012", }, { category: "external", summary: "SUSE Bug 1006166 for CVE-2016-10012", url: "https://bugzilla.suse.com/1006166", }, { category: "external", summary: "SUSE Bug 1016336 for CVE-2016-10012", url: "https://bugzilla.suse.com/1016336", }, { category: "external", summary: "SUSE Bug 1016369 for CVE-2016-10012", url: "https://bugzilla.suse.com/1016369", }, { category: "external", summary: "SUSE Bug 1016370 for CVE-2016-10012", url: "https://bugzilla.suse.com/1016370", }, { category: "external", summary: "SUSE Bug 1017870 for CVE-2016-10012", url: "https://bugzilla.suse.com/1017870", }, { category: "external", summary: "SUSE Bug 1026634 for CVE-2016-10012", url: "https://bugzilla.suse.com/1026634", }, { category: "external", summary: "SUSE Bug 1035742 for CVE-2016-10012", url: "https://bugzilla.suse.com/1035742", }, { category: "external", summary: "SUSE Bug 1073044 for CVE-2016-10012", url: "https://bugzilla.suse.com/1073044", }, { category: "external", summary: "SUSE Bug 1092582 for CVE-2016-10012", url: "https://bugzilla.suse.com/1092582", }, { category: "external", summary: "SUSE Bug 1138392 for CVE-2016-10012", url: "https://bugzilla.suse.com/1138392", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2018-08-09T13:56:33Z", details: "low", }, ], title: "CVE-2016-10012", }, { cve: "CVE-2016-10708", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-10708", }, ], notes: [ { category: "general", text: "sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-10708", url: "https://www.suse.com/security/cve/CVE-2016-10708", }, { category: "external", summary: "SUSE Bug 1076957 for CVE-2016-10708", url: "https://bugzilla.suse.com/1076957", }, { category: "external", summary: "SUSE Bug 1106726 for CVE-2016-10708", url: "https://bugzilla.suse.com/1106726", }, { category: "external", summary: "SUSE Bug 1138392 for CVE-2016-10708", url: "https://bugzilla.suse.com/1138392", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2018-08-09T13:56:33Z", details: "moderate", }, ], title: "CVE-2016-10708", }, { cve: "CVE-2017-15906", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-15906", }, ], notes: [ { category: "general", text: "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-15906", url: "https://www.suse.com/security/cve/CVE-2017-15906", }, { category: "external", summary: "SUSE Bug 1064285 for CVE-2017-15906", url: "https://bugzilla.suse.com/1064285", }, { category: "external", summary: "SUSE Bug 1065000 for CVE-2017-15906", url: "https://bugzilla.suse.com/1065000", }, { category: "external", summary: "SUSE Bug 1074115 for CVE-2017-15906", url: "https://bugzilla.suse.com/1074115", }, { category: "external", summary: "SUSE Bug 1079488 for CVE-2017-15906", url: "https://bugzilla.suse.com/1079488", }, { category: "external", summary: "SUSE Bug 1090163 for CVE-2017-15906", url: "https://bugzilla.suse.com/1090163", }, { category: "external", summary: "SUSE Bug 1099316 for CVE-2017-15906", url: "https://bugzilla.suse.com/1099316", }, { category: "external", summary: "SUSE Bug 1138392 for CVE-2017-15906", url: "https://bugzilla.suse.com/1138392", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-36.3.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-36.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2018-08-09T13:56:33Z", details: "moderate", }, ], title: "CVE-2017-15906", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.