SUSE-SU-2018:3644-1
Vulnerability from csaf_suse - Published: 2018-11-07 10:14 - Updated: 2018-11-07 10:14Summary
Security update for systemd
Severity
Important
Notes
Title of the patch: Security update for systemd
Description of the patch: This update for systemd fixes the following issues:
Security issues fixed:
- CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. (bsc#1113632)
- CVE-2018-15686: A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. (bsc#1113665)
Non security issues fixed:
- dhcp6: split assert_return() to be more debuggable when hit
- core: skip unit deserialization and move to the next one when unit_deserialize() fails
- core: properly handle deserialization of unknown unit types (#6476)
- core: don't create Requires for workdir if 'missing ok' (bsc#1113083)
- logind: use manager_get_user_by_pid() where appropriate
- logind: rework manager_get_{user|session}_by_pid() a bit
- login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
- core: be more defensive if we can't determine per-connection socket peer (#7329)
- core: introduce systemd.early_core_pattern= kernel cmdline option
- core: add missing 'continue' statement
- core/mount: fstype may be NULL
- journald: don't ship systemd-journald-audit.socket (bsc#1109252)
- core: make 'tmpfs' dependencies on swapfs a 'default' dep, not an 'implicit' (bsc#1110445)
- mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
- detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
- emergency: make sure console password agents don't interfere with the emergency shell
- man: document that 'nofail' also has an effect on ordering
- journald: take leading spaces into account in syslog_parse_identifier
- journal: do not remove multiple spaces after identifier in syslog message
- syslog: fix segfault in syslog_parse_priority()
- journal: fix syslog_parse_identifier()
- install: drop left-over debug message (#6913)
- Ship systemd-sysv-install helper via the main package
This script was part of systemd-sysvinit sub-package but it was
wrong since systemd-sysv-install is a script used to redirect
enable/disable operations to chkconfig when the unit targets are
sysv init scripts. Therefore it's never been a SySV init tool.
- Add udev.no-partlabel-links kernel command-line option. This option can be used to disable
the generation of the by-partlabel symlinks regardless of the name used. (bsc#1089761)
- man: SystemMaxUse= clarification in journald.conf(5). (bsc#1101040)
- systemctl: load unit if needed in 'systemctl is-active' (bsc#1102908)
- core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
- Enable or disable machines.target according to the presets (bsc#1107941)
- cryptsetup: add support for sector-size= option (fate#325697)
- nspawn: always use permission mode 555 for /sys (bsc#1107640)
- Bugfix for a race condition between daemon-reload and other commands (bsc#1105031)
- Fixes an issue where login with root credentials was not possible in init level 5 (bsc#1091677)
- Fix an issue where services of type 'notify' harmless DENIED log entries. (bsc#991901)
- Does no longer adjust qgroups on existing subvolumes (bsc#1093753)
- cryptsetup: add support for sector-size= option (#9936) (fate#325697 bsc#1114135)
Patchnames: SUSE-SLE-Module-Basesystem-15-2018-2595,SUSE-SLE-Module-Development-Tools-OBS-15-2018-2595
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-32bit-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libudev1-32bit-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-32bit-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-bash-completion-234-24.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
40 products, the same list as for
CVE-2018-15686
Threats
Impact
important
References
31 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for systemd",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for systemd fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. (bsc#1113632)\n- CVE-2018-15686: A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. (bsc#1113665)\n\nNon security issues fixed:\n\n- dhcp6: split assert_return() to be more debuggable when hit\n- core: skip unit deserialization and move to the next one when unit_deserialize() fails\n- core: properly handle deserialization of unknown unit types (#6476)\n- core: don\u0027t create Requires for workdir if \u0027missing ok\u0027 (bsc#1113083)\n- logind: use manager_get_user_by_pid() where appropriate\n- logind: rework manager_get_{user|session}_by_pid() a bit\n- login: fix user@.service case, so we don\u0027t allow nested sessions (#8051) (bsc#1112024)\n- core: be more defensive if we can\u0027t determine per-connection socket peer (#7329)\n- core: introduce systemd.early_core_pattern= kernel cmdline option\n- core: add missing \u0027continue\u0027 statement\n- core/mount: fstype may be NULL\n- journald: don\u0027t ship systemd-journald-audit.socket (bsc#1109252)\n- core: make \u0027tmpfs\u0027 dependencies on swapfs a \u0027default\u0027 dep, not an \u0027implicit\u0027 (bsc#1110445)\n- mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)\n- detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)\n- emergency: make sure console password agents don\u0027t interfere with the emergency shell\n- man: document that \u0027nofail\u0027 also has an effect on ordering\n- journald: take leading spaces into account in syslog_parse_identifier\n- journal: do not remove multiple spaces after identifier in syslog message\n- syslog: fix segfault in syslog_parse_priority()\n- journal: fix syslog_parse_identifier()\n- install: drop left-over debug message (#6913)\n- Ship systemd-sysv-install helper via the main package\n This script was part of systemd-sysvinit sub-package but it was\n wrong since systemd-sysv-install is a script used to redirect\n enable/disable operations to chkconfig when the unit targets are\n sysv init scripts. Therefore it\u0027s never been a SySV init tool.\n- Add udev.no-partlabel-links kernel command-line option. This option can be used to disable\n the generation of the by-partlabel symlinks regardless of the name used. (bsc#1089761)\n- man: SystemMaxUse= clarification in journald.conf(5). (bsc#1101040)\n- systemctl: load unit if needed in \u0027systemctl is-active\u0027 (bsc#1102908)\n- core: don\u0027t freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)\n- Enable or disable machines.target according to the presets (bsc#1107941)\n- cryptsetup: add support for sector-size= option (fate#325697)\n- nspawn: always use permission mode 555 for /sys (bsc#1107640)\n- Bugfix for a race condition between daemon-reload and other commands (bsc#1105031)\n- Fixes an issue where login with root credentials was not possible in init level 5 (bsc#1091677)\n- Fix an issue where services of type \u0027notify\u0027 harmless DENIED log entries. (bsc#991901)\n- Does no longer adjust qgroups on existing subvolumes (bsc#1093753)\n- cryptsetup: add support for sector-size= option (#9936) (fate#325697 bsc#1114135)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Module-Basesystem-15-2018-2595,SUSE-SLE-Module-Development-Tools-OBS-15-2018-2595",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3644-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3644-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183644-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3644-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-November/004834.html"
},
{
"category": "self",
"summary": "SUSE Bug 1089761",
"url": "https://bugzilla.suse.com/1089761"
},
{
"category": "self",
"summary": "SUSE Bug 1090944",
"url": "https://bugzilla.suse.com/1090944"
},
{
"category": "self",
"summary": "SUSE Bug 1091677",
"url": "https://bugzilla.suse.com/1091677"
},
{
"category": "self",
"summary": "SUSE Bug 1093753",
"url": "https://bugzilla.suse.com/1093753"
},
{
"category": "self",
"summary": "SUSE Bug 1101040",
"url": "https://bugzilla.suse.com/1101040"
},
{
"category": "self",
"summary": "SUSE Bug 1102908",
"url": "https://bugzilla.suse.com/1102908"
},
{
"category": "self",
"summary": "SUSE Bug 1105031",
"url": "https://bugzilla.suse.com/1105031"
},
{
"category": "self",
"summary": "SUSE Bug 1107640",
"url": "https://bugzilla.suse.com/1107640"
},
{
"category": "self",
"summary": "SUSE Bug 1107941",
"url": "https://bugzilla.suse.com/1107941"
},
{
"category": "self",
"summary": "SUSE Bug 1109197",
"url": "https://bugzilla.suse.com/1109197"
},
{
"category": "self",
"summary": "SUSE Bug 1109252",
"url": "https://bugzilla.suse.com/1109252"
},
{
"category": "self",
"summary": "SUSE Bug 1110445",
"url": "https://bugzilla.suse.com/1110445"
},
{
"category": "self",
"summary": "SUSE Bug 1112024",
"url": "https://bugzilla.suse.com/1112024"
},
{
"category": "self",
"summary": "SUSE Bug 1113083",
"url": "https://bugzilla.suse.com/1113083"
},
{
"category": "self",
"summary": "SUSE Bug 1113632",
"url": "https://bugzilla.suse.com/1113632"
},
{
"category": "self",
"summary": "SUSE Bug 1113665",
"url": "https://bugzilla.suse.com/1113665"
},
{
"category": "self",
"summary": "SUSE Bug 1114135",
"url": "https://bugzilla.suse.com/1114135"
},
{
"category": "self",
"summary": "SUSE Bug 991901",
"url": "https://bugzilla.suse.com/991901"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-15686 page",
"url": "https://www.suse.com/security/cve/CVE-2018-15686/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-15688 page",
"url": "https://www.suse.com/security/cve/CVE-2018-15688/"
}
],
"title": "Security update for systemd",
"tracking": {
"current_release_date": "2018-11-07T10:14:46Z",
"generator": {
"date": "2018-11-07T10:14:46Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3644-1",
"initial_release_date": "2018-11-07T10:14:46Z",
"revision_history": [
{
"date": "2018-11-07T10:14:46Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libsystemd0-234-24.15.1.aarch64",
"product": {
"name": "libsystemd0-234-24.15.1.aarch64",
"product_id": "libsystemd0-234-24.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "libudev-devel-234-24.15.1.aarch64",
"product": {
"name": "libudev-devel-234-24.15.1.aarch64",
"product_id": "libudev-devel-234-24.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "libudev1-234-24.15.1.aarch64",
"product": {
"name": "libudev1-234-24.15.1.aarch64",
"product_id": "libudev1-234-24.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "systemd-234-24.15.1.aarch64",
"product": {
"name": "systemd-234-24.15.1.aarch64",
"product_id": "systemd-234-24.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "systemd-container-234-24.15.1.aarch64",
"product": {
"name": "systemd-container-234-24.15.1.aarch64",
"product_id": "systemd-container-234-24.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "systemd-coredump-234-24.15.1.aarch64",
"product": {
"name": "systemd-coredump-234-24.15.1.aarch64",
"product_id": "systemd-coredump-234-24.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "systemd-devel-234-24.15.1.aarch64",
"product": {
"name": "systemd-devel-234-24.15.1.aarch64",
"product_id": "systemd-devel-234-24.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "systemd-sysvinit-234-24.15.1.aarch64",
"product": {
"name": "systemd-sysvinit-234-24.15.1.aarch64",
"product_id": "systemd-sysvinit-234-24.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "udev-234-24.15.1.aarch64",
"product": {
"name": "udev-234-24.15.1.aarch64",
"product_id": "udev-234-24.15.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "systemd-bash-completion-234-24.15.1.noarch",
"product": {
"name": "systemd-bash-completion-234-24.15.1.noarch",
"product_id": "systemd-bash-completion-234-24.15.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libsystemd0-234-24.15.1.ppc64le",
"product": {
"name": "libsystemd0-234-24.15.1.ppc64le",
"product_id": "libsystemd0-234-24.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libudev-devel-234-24.15.1.ppc64le",
"product": {
"name": "libudev-devel-234-24.15.1.ppc64le",
"product_id": "libudev-devel-234-24.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libudev1-234-24.15.1.ppc64le",
"product": {
"name": "libudev1-234-24.15.1.ppc64le",
"product_id": "libudev1-234-24.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "systemd-234-24.15.1.ppc64le",
"product": {
"name": "systemd-234-24.15.1.ppc64le",
"product_id": "systemd-234-24.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "systemd-container-234-24.15.1.ppc64le",
"product": {
"name": "systemd-container-234-24.15.1.ppc64le",
"product_id": "systemd-container-234-24.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "systemd-coredump-234-24.15.1.ppc64le",
"product": {
"name": "systemd-coredump-234-24.15.1.ppc64le",
"product_id": "systemd-coredump-234-24.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "systemd-devel-234-24.15.1.ppc64le",
"product": {
"name": "systemd-devel-234-24.15.1.ppc64le",
"product_id": "systemd-devel-234-24.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "systemd-sysvinit-234-24.15.1.ppc64le",
"product": {
"name": "systemd-sysvinit-234-24.15.1.ppc64le",
"product_id": "systemd-sysvinit-234-24.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "udev-234-24.15.1.ppc64le",
"product": {
"name": "udev-234-24.15.1.ppc64le",
"product_id": "udev-234-24.15.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libsystemd0-234-24.15.1.s390x",
"product": {
"name": "libsystemd0-234-24.15.1.s390x",
"product_id": "libsystemd0-234-24.15.1.s390x"
}
},
{
"category": "product_version",
"name": "libudev-devel-234-24.15.1.s390x",
"product": {
"name": "libudev-devel-234-24.15.1.s390x",
"product_id": "libudev-devel-234-24.15.1.s390x"
}
},
{
"category": "product_version",
"name": "libudev1-234-24.15.1.s390x",
"product": {
"name": "libudev1-234-24.15.1.s390x",
"product_id": "libudev1-234-24.15.1.s390x"
}
},
{
"category": "product_version",
"name": "systemd-234-24.15.1.s390x",
"product": {
"name": "systemd-234-24.15.1.s390x",
"product_id": "systemd-234-24.15.1.s390x"
}
},
{
"category": "product_version",
"name": "systemd-container-234-24.15.1.s390x",
"product": {
"name": "systemd-container-234-24.15.1.s390x",
"product_id": "systemd-container-234-24.15.1.s390x"
}
},
{
"category": "product_version",
"name": "systemd-coredump-234-24.15.1.s390x",
"product": {
"name": "systemd-coredump-234-24.15.1.s390x",
"product_id": "systemd-coredump-234-24.15.1.s390x"
}
},
{
"category": "product_version",
"name": "systemd-devel-234-24.15.1.s390x",
"product": {
"name": "systemd-devel-234-24.15.1.s390x",
"product_id": "systemd-devel-234-24.15.1.s390x"
}
},
{
"category": "product_version",
"name": "systemd-sysvinit-234-24.15.1.s390x",
"product": {
"name": "systemd-sysvinit-234-24.15.1.s390x",
"product_id": "systemd-sysvinit-234-24.15.1.s390x"
}
},
{
"category": "product_version",
"name": "udev-234-24.15.1.s390x",
"product": {
"name": "udev-234-24.15.1.s390x",
"product_id": "udev-234-24.15.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libsystemd0-234-24.15.1.x86_64",
"product": {
"name": "libsystemd0-234-24.15.1.x86_64",
"product_id": "libsystemd0-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libsystemd0-32bit-234-24.15.1.x86_64",
"product": {
"name": "libsystemd0-32bit-234-24.15.1.x86_64",
"product_id": "libsystemd0-32bit-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libudev-devel-234-24.15.1.x86_64",
"product": {
"name": "libudev-devel-234-24.15.1.x86_64",
"product_id": "libudev-devel-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libudev1-234-24.15.1.x86_64",
"product": {
"name": "libudev1-234-24.15.1.x86_64",
"product_id": "libudev1-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libudev1-32bit-234-24.15.1.x86_64",
"product": {
"name": "libudev1-32bit-234-24.15.1.x86_64",
"product_id": "libudev1-32bit-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "systemd-234-24.15.1.x86_64",
"product": {
"name": "systemd-234-24.15.1.x86_64",
"product_id": "systemd-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "systemd-32bit-234-24.15.1.x86_64",
"product": {
"name": "systemd-32bit-234-24.15.1.x86_64",
"product_id": "systemd-32bit-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "systemd-container-234-24.15.1.x86_64",
"product": {
"name": "systemd-container-234-24.15.1.x86_64",
"product_id": "systemd-container-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "systemd-coredump-234-24.15.1.x86_64",
"product": {
"name": "systemd-coredump-234-24.15.1.x86_64",
"product_id": "systemd-coredump-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "systemd-devel-234-24.15.1.x86_64",
"product": {
"name": "systemd-devel-234-24.15.1.x86_64",
"product_id": "systemd-devel-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "systemd-sysvinit-234-24.15.1.x86_64",
"product": {
"name": "systemd-sysvinit-234-24.15.1.x86_64",
"product_id": "systemd-sysvinit-234-24.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "udev-234-24.15.1.x86_64",
"product": {
"name": "udev-234-24.15.1.x86_64",
"product_id": "udev-234-24.15.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libsystemd0-234-24.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.aarch64"
},
"product_reference": "libsystemd0-234-24.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsystemd0-234-24.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.ppc64le"
},
"product_reference": "libsystemd0-234-24.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsystemd0-234-24.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.s390x"
},
"product_reference": "libsystemd0-234-24.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsystemd0-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.x86_64"
},
"product_reference": "libsystemd0-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsystemd0-32bit-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-32bit-234-24.15.1.x86_64"
},
"product_reference": "libsystemd0-32bit-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libudev-devel-234-24.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.aarch64"
},
"product_reference": "libudev-devel-234-24.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libudev-devel-234-24.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.ppc64le"
},
"product_reference": "libudev-devel-234-24.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libudev-devel-234-24.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.s390x"
},
"product_reference": "libudev-devel-234-24.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libudev-devel-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.x86_64"
},
"product_reference": "libudev-devel-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libudev1-234-24.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.aarch64"
},
"product_reference": "libudev1-234-24.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libudev1-234-24.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.ppc64le"
},
"product_reference": "libudev1-234-24.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libudev1-234-24.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.s390x"
},
"product_reference": "libudev1-234-24.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libudev1-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.x86_64"
},
"product_reference": "libudev1-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libudev1-32bit-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libudev1-32bit-234-24.15.1.x86_64"
},
"product_reference": "libudev1-32bit-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-234-24.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.aarch64"
},
"product_reference": "systemd-234-24.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-234-24.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.ppc64le"
},
"product_reference": "systemd-234-24.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-234-24.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.s390x"
},
"product_reference": "systemd-234-24.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.x86_64"
},
"product_reference": "systemd-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-32bit-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-32bit-234-24.15.1.x86_64"
},
"product_reference": "systemd-32bit-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-bash-completion-234-24.15.1.noarch as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-bash-completion-234-24.15.1.noarch"
},
"product_reference": "systemd-bash-completion-234-24.15.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-container-234-24.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.aarch64"
},
"product_reference": "systemd-container-234-24.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-container-234-24.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.ppc64le"
},
"product_reference": "systemd-container-234-24.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-container-234-24.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.s390x"
},
"product_reference": "systemd-container-234-24.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-container-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.x86_64"
},
"product_reference": "systemd-container-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-coredump-234-24.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.aarch64"
},
"product_reference": "systemd-coredump-234-24.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-coredump-234-24.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.ppc64le"
},
"product_reference": "systemd-coredump-234-24.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-coredump-234-24.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.s390x"
},
"product_reference": "systemd-coredump-234-24.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-coredump-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.x86_64"
},
"product_reference": "systemd-coredump-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-devel-234-24.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.aarch64"
},
"product_reference": "systemd-devel-234-24.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-devel-234-24.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.ppc64le"
},
"product_reference": "systemd-devel-234-24.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-devel-234-24.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.s390x"
},
"product_reference": "systemd-devel-234-24.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-devel-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.x86_64"
},
"product_reference": "systemd-devel-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-sysvinit-234-24.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.aarch64"
},
"product_reference": "systemd-sysvinit-234-24.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-sysvinit-234-24.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.ppc64le"
},
"product_reference": "systemd-sysvinit-234-24.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-sysvinit-234-24.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.s390x"
},
"product_reference": "systemd-sysvinit-234-24.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "systemd-sysvinit-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.x86_64"
},
"product_reference": "systemd-sysvinit-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "udev-234-24.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.aarch64"
},
"product_reference": "udev-234-24.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "udev-234-24.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.ppc64le"
},
"product_reference": "udev-234-24.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "udev-234-24.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.s390x"
},
"product_reference": "udev-234-24.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "udev-234-24.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.x86_64"
},
"product_reference": "udev-234-24.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-15686",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-15686"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-bash-completion-234-24.15.1.noarch",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-15686",
"url": "https://www.suse.com/security/cve/CVE-2018-15686"
},
{
"category": "external",
"summary": "SUSE Bug 1113665 for CVE-2018-15686",
"url": "https://bugzilla.suse.com/1113665"
},
{
"category": "external",
"summary": "SUSE Bug 1120323 for CVE-2018-15686",
"url": "https://bugzilla.suse.com/1120323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-bash-completion-234-24.15.1.noarch",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-bash-completion-234-24.15.1.noarch",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-07T10:14:46Z",
"details": "moderate"
}
],
"title": "CVE-2018-15686"
},
{
"cve": "CVE-2018-15688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-15688"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-bash-completion-234-24.15.1.noarch",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-15688",
"url": "https://www.suse.com/security/cve/CVE-2018-15688"
},
{
"category": "external",
"summary": "SUSE Bug 1113632 for CVE-2018-15688",
"url": "https://bugzilla.suse.com/1113632"
},
{
"category": "external",
"summary": "SUSE Bug 1113668 for CVE-2018-15688",
"url": "https://bugzilla.suse.com/1113668"
},
{
"category": "external",
"summary": "SUSE Bug 1113669 for CVE-2018-15688",
"url": "https://bugzilla.suse.com/1113669"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-bash-completion-234-24.15.1.noarch",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libsystemd0-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libudev1-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-32bit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-bash-completion-234-24.15.1.noarch",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-container-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-coredump-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-devel-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:systemd-sysvinit-234-24.15.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:udev-234-24.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-07T10:14:46Z",
"details": "important"
}
],
"title": "CVE-2018-15688"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…