csaf_suse - suse-su-2019:1364-2

Vulnerability from csaf_suse

Published

2019-07-15 13:48

Modified

2019-07-15 13:48

Summary

Security update for systemd

Notes

Title of the patch

Security update for systemd

Description of the patch

This update for systemd fixes the following issues: Security issues fixed: - CVE-2019-3842: Fixed a privilege escalation in pam_systemd which could be exploited by a local user (bsc#1132348). - CVE-2019-6454: Fixed a denial of service via crafted D-Bus message (bsc#1125352). - CVE-2019-3843, CVE-2019-3844: Fixed a privilege escalation where services with DynamicUser could gain new privileges or create SUID/SGID binaries (bsc#1133506, bsc#1133509). Non-security issued fixed: - logind: fix killing of scopes (bsc#1125604) - namespace: make MountFlags=shared work again (bsc#1124122) - rules: load drivers only on 'add' events (bsc#1126056) - sysctl: Don't pass null directive argument to '%s' (bsc#1121563) - systemd-coredump: generate a stack trace of all core dumps and log into the journal (jsc#SLE-5933) - udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400) - sd-bus: bump message queue size again (bsc#1132721) - Do not automatically online memory on s390x (bsc#1127557) - Removed sg.conf (bsc#1036463)

Patchnames

SUSE-2019-1364,SUSE-SLE-Module-Basesystem-15-SP1-2019-1364,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1364

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for systemd",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for systemd fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-3842: Fixed a privilege escalation in pam_systemd which could be exploited by a local user (bsc#1132348).\n- CVE-2019-6454: Fixed a denial of service via crafted D-Bus message (bsc#1125352).\n- CVE-2019-3843, CVE-2019-3844: Fixed a privilege escalation where services with DynamicUser could gain new privileges or create SUID/SGID binaries (bsc#1133506, bsc#1133509).\n\nNon-security issued fixed:\n\n- logind: fix killing of scopes (bsc#1125604)\n- namespace: make MountFlags=shared work again (bsc#1124122)\n- rules: load drivers only on 'add' events (bsc#1126056)\n- sysctl: Don't pass null directive argument to '%s' (bsc#1121563)\n- systemd-coredump: generate a stack trace of all core dumps and log into the journal (jsc#SLE-5933)\n- udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400)\n- sd-bus: bump message queue size again (bsc#1132721)\n- Do not automatically online memory on s390x (bsc#1127557)\n- Removed sg.conf (bsc#1036463)\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2019-1364,SUSE-SLE-Module-Basesystem-15-SP1-2019-1364,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1364",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1364-2.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2019:1364-2",
            url: "https://www.suse.com/support/update/announcement/2019/suse-su-20191364-2/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2019:1364-2",
            url: "https://www.suse.com/support/update/announcement/2019/suse-su-20191364-2.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1036463",
            url: "https://bugzilla.suse.com/1036463",
         },
         {
            category: "self",
            summary: "SUSE Bug 1121563",
            url: "https://bugzilla.suse.com/1121563",
         },
         {
            category: "self",
            summary: "SUSE Bug 1124122",
            url: "https://bugzilla.suse.com/1124122",
         },
         {
            category: "self",
            summary: "SUSE Bug 1125352",
            url: "https://bugzilla.suse.com/1125352",
         },
         {
            category: "self",
            summary: "SUSE Bug 1125604",
            url: "https://bugzilla.suse.com/1125604",
         },
         {
            category: "self",
            summary: "SUSE Bug 1126056",
            url: "https://bugzilla.suse.com/1126056",
         },
         {
            category: "self",
            summary: "SUSE Bug 1127557",
            url: "https://bugzilla.suse.com/1127557",
         },
         {
            category: "self",
            summary: "SUSE Bug 1130230",
            url: "https://bugzilla.suse.com/1130230",
         },
         {
            category: "self",
            summary: "SUSE Bug 1132348",
            url: "https://bugzilla.suse.com/1132348",
         },
         {
            category: "self",
            summary: "SUSE Bug 1132400",
            url: "https://bugzilla.suse.com/1132400",
         },
         {
            category: "self",
            summary: "SUSE Bug 1132721",
            url: "https://bugzilla.suse.com/1132721",
         },
         {
            category: "self",
            summary: "SUSE Bug 1133506",
            url: "https://bugzilla.suse.com/1133506",
         },
         {
            category: "self",
            summary: "SUSE Bug 1133509",
            url: "https://bugzilla.suse.com/1133509",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-3842 page",
            url: "https://www.suse.com/security/cve/CVE-2019-3842/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-3843 page",
            url: "https://www.suse.com/security/cve/CVE-2019-3843/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-3844 page",
            url: "https://www.suse.com/security/cve/CVE-2019-3844/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-6454 page",
            url: "https://www.suse.com/security/cve/CVE-2019-6454/",
         },
         {
            category: "self",
            summary: "SUSE Bug SLE-5933",
            url: "https://bugzilla.suse.com/SLE-5933",
         },
      ],
      title: "Security update for systemd",
      tracking: {
         current_release_date: "2019-07-15T13:48:30Z",
         generator: {
            date: "2019-07-15T13:48:30Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2019:1364-2",
         initial_release_date: "2019-07-15T13:48:30Z",
         revision_history: [
            {
               date: "2019-07-15T13:48:30Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libsystemd0-234-24.30.1.aarch64",
                        product: {
                           name: "libsystemd0-234-24.30.1.aarch64",
                           product_id: "libsystemd0-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libsystemd0-mini-234-24.30.1.aarch64",
                        product: {
                           name: "libsystemd0-mini-234-24.30.1.aarch64",
                           product_id: "libsystemd0-mini-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-devel-234-24.30.1.aarch64",
                        product: {
                           name: "libudev-devel-234-24.30.1.aarch64",
                           product_id: "libudev-devel-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini-devel-234-24.30.1.aarch64",
                        product: {
                           name: "libudev-mini-devel-234-24.30.1.aarch64",
                           product_id: "libudev-mini-devel-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini1-234-24.30.1.aarch64",
                        product: {
                           name: "libudev-mini1-234-24.30.1.aarch64",
                           product_id: "libudev-mini1-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev1-234-24.30.1.aarch64",
                        product: {
                           name: "libudev1-234-24.30.1.aarch64",
                           product_id: "libudev1-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-myhostname-234-24.30.1.aarch64",
                        product: {
                           name: "nss-myhostname-234-24.30.1.aarch64",
                           product_id: "nss-myhostname-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-mymachines-234-24.30.1.aarch64",
                        product: {
                           name: "nss-mymachines-234-24.30.1.aarch64",
                           product_id: "nss-mymachines-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-systemd-234-24.30.1.aarch64",
                        product: {
                           name: "nss-systemd-234-24.30.1.aarch64",
                           product_id: "nss-systemd-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-234-24.30.1.aarch64",
                           product_id: "systemd-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-container-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-container-234-24.30.1.aarch64",
                           product_id: "systemd-container-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-coredump-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-coredump-234-24.30.1.aarch64",
                           product_id: "systemd-coredump-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-devel-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-devel-234-24.30.1.aarch64",
                           product_id: "systemd-devel-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-logger-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-logger-234-24.30.1.aarch64",
                           product_id: "systemd-logger-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-mini-234-24.30.1.aarch64",
                           product_id: "systemd-mini-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-container-mini-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-mini-container-mini-234-24.30.1.aarch64",
                           product_id: "systemd-mini-container-mini-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-coredump-mini-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-mini-coredump-mini-234-24.30.1.aarch64",
                           product_id: "systemd-mini-coredump-mini-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-devel-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-mini-devel-234-24.30.1.aarch64",
                           product_id: "systemd-mini-devel-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-sysvinit-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-mini-sysvinit-234-24.30.1.aarch64",
                           product_id: "systemd-mini-sysvinit-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-sysvinit-234-24.30.1.aarch64",
                        product: {
                           name: "systemd-sysvinit-234-24.30.1.aarch64",
                           product_id: "systemd-sysvinit-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-234-24.30.1.aarch64",
                        product: {
                           name: "udev-234-24.30.1.aarch64",
                           product_id: "udev-234-24.30.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-mini-234-24.30.1.aarch64",
                        product: {
                           name: "udev-mini-234-24.30.1.aarch64",
                           product_id: "udev-mini-234-24.30.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libsystemd0-64bit-234-24.30.1.aarch64_ilp32",
                        product: {
                           name: "libsystemd0-64bit-234-24.30.1.aarch64_ilp32",
                           product_id: "libsystemd0-64bit-234-24.30.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-devel-64bit-234-24.30.1.aarch64_ilp32",
                        product: {
                           name: "libudev-devel-64bit-234-24.30.1.aarch64_ilp32",
                           product_id: "libudev-devel-64bit-234-24.30.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev1-64bit-234-24.30.1.aarch64_ilp32",
                        product: {
                           name: "libudev1-64bit-234-24.30.1.aarch64_ilp32",
                           product_id: "libudev1-64bit-234-24.30.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-myhostname-64bit-234-24.30.1.aarch64_ilp32",
                        product: {
                           name: "nss-myhostname-64bit-234-24.30.1.aarch64_ilp32",
                           product_id: "nss-myhostname-64bit-234-24.30.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-mymachines-64bit-234-24.30.1.aarch64_ilp32",
                        product: {
                           name: "nss-mymachines-64bit-234-24.30.1.aarch64_ilp32",
                           product_id: "nss-mymachines-64bit-234-24.30.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-64bit-234-24.30.1.aarch64_ilp32",
                        product: {
                           name: "systemd-64bit-234-24.30.1.aarch64_ilp32",
                           product_id: "systemd-64bit-234-24.30.1.aarch64_ilp32",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64_ilp32",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libsystemd0-234-24.30.1.i586",
                        product: {
                           name: "libsystemd0-234-24.30.1.i586",
                           product_id: "libsystemd0-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libsystemd0-mini-234-24.30.1.i586",
                        product: {
                           name: "libsystemd0-mini-234-24.30.1.i586",
                           product_id: "libsystemd0-mini-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-devel-234-24.30.1.i586",
                        product: {
                           name: "libudev-devel-234-24.30.1.i586",
                           product_id: "libudev-devel-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini-devel-234-24.30.1.i586",
                        product: {
                           name: "libudev-mini-devel-234-24.30.1.i586",
                           product_id: "libudev-mini-devel-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini1-234-24.30.1.i586",
                        product: {
                           name: "libudev-mini1-234-24.30.1.i586",
                           product_id: "libudev-mini1-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev1-234-24.30.1.i586",
                        product: {
                           name: "libudev1-234-24.30.1.i586",
                           product_id: "libudev1-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-myhostname-234-24.30.1.i586",
                        product: {
                           name: "nss-myhostname-234-24.30.1.i586",
                           product_id: "nss-myhostname-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-mymachines-234-24.30.1.i586",
                        product: {
                           name: "nss-mymachines-234-24.30.1.i586",
                           product_id: "nss-mymachines-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-systemd-234-24.30.1.i586",
                        product: {
                           name: "nss-systemd-234-24.30.1.i586",
                           product_id: "nss-systemd-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-234-24.30.1.i586",
                        product: {
                           name: "systemd-234-24.30.1.i586",
                           product_id: "systemd-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-container-234-24.30.1.i586",
                        product: {
                           name: "systemd-container-234-24.30.1.i586",
                           product_id: "systemd-container-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-coredump-234-24.30.1.i586",
                        product: {
                           name: "systemd-coredump-234-24.30.1.i586",
                           product_id: "systemd-coredump-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-devel-234-24.30.1.i586",
                        product: {
                           name: "systemd-devel-234-24.30.1.i586",
                           product_id: "systemd-devel-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-logger-234-24.30.1.i586",
                        product: {
                           name: "systemd-logger-234-24.30.1.i586",
                           product_id: "systemd-logger-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-234-24.30.1.i586",
                        product: {
                           name: "systemd-mini-234-24.30.1.i586",
                           product_id: "systemd-mini-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-container-mini-234-24.30.1.i586",
                        product: {
                           name: "systemd-mini-container-mini-234-24.30.1.i586",
                           product_id: "systemd-mini-container-mini-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-coredump-mini-234-24.30.1.i586",
                        product: {
                           name: "systemd-mini-coredump-mini-234-24.30.1.i586",
                           product_id: "systemd-mini-coredump-mini-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-devel-234-24.30.1.i586",
                        product: {
                           name: "systemd-mini-devel-234-24.30.1.i586",
                           product_id: "systemd-mini-devel-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-sysvinit-234-24.30.1.i586",
                        product: {
                           name: "systemd-mini-sysvinit-234-24.30.1.i586",
                           product_id: "systemd-mini-sysvinit-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-sysvinit-234-24.30.1.i586",
                        product: {
                           name: "systemd-sysvinit-234-24.30.1.i586",
                           product_id: "systemd-sysvinit-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-234-24.30.1.i586",
                        product: {
                           name: "udev-234-24.30.1.i586",
                           product_id: "udev-234-24.30.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-mini-234-24.30.1.i586",
                        product: {
                           name: "udev-mini-234-24.30.1.i586",
                           product_id: "udev-mini-234-24.30.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "systemd-bash-completion-234-24.30.1.noarch",
                        product: {
                           name: "systemd-bash-completion-234-24.30.1.noarch",
                           product_id: "systemd-bash-completion-234-24.30.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-bash-completion-234-24.30.1.noarch",
                        product: {
                           name: "systemd-mini-bash-completion-234-24.30.1.noarch",
                           product_id: "systemd-mini-bash-completion-234-24.30.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libsystemd0-234-24.30.1.ppc64le",
                        product: {
                           name: "libsystemd0-234-24.30.1.ppc64le",
                           product_id: "libsystemd0-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libsystemd0-mini-234-24.30.1.ppc64le",
                        product: {
                           name: "libsystemd0-mini-234-24.30.1.ppc64le",
                           product_id: "libsystemd0-mini-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-devel-234-24.30.1.ppc64le",
                        product: {
                           name: "libudev-devel-234-24.30.1.ppc64le",
                           product_id: "libudev-devel-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini-devel-234-24.30.1.ppc64le",
                        product: {
                           name: "libudev-mini-devel-234-24.30.1.ppc64le",
                           product_id: "libudev-mini-devel-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini1-234-24.30.1.ppc64le",
                        product: {
                           name: "libudev-mini1-234-24.30.1.ppc64le",
                           product_id: "libudev-mini1-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev1-234-24.30.1.ppc64le",
                        product: {
                           name: "libudev1-234-24.30.1.ppc64le",
                           product_id: "libudev1-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-myhostname-234-24.30.1.ppc64le",
                        product: {
                           name: "nss-myhostname-234-24.30.1.ppc64le",
                           product_id: "nss-myhostname-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-mymachines-234-24.30.1.ppc64le",
                        product: {
                           name: "nss-mymachines-234-24.30.1.ppc64le",
                           product_id: "nss-mymachines-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-systemd-234-24.30.1.ppc64le",
                        product: {
                           name: "nss-systemd-234-24.30.1.ppc64le",
                           product_id: "nss-systemd-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-234-24.30.1.ppc64le",
                           product_id: "systemd-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-container-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-container-234-24.30.1.ppc64le",
                           product_id: "systemd-container-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-coredump-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-coredump-234-24.30.1.ppc64le",
                           product_id: "systemd-coredump-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-devel-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-devel-234-24.30.1.ppc64le",
                           product_id: "systemd-devel-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-logger-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-logger-234-24.30.1.ppc64le",
                           product_id: "systemd-logger-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-mini-234-24.30.1.ppc64le",
                           product_id: "systemd-mini-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-container-mini-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-mini-container-mini-234-24.30.1.ppc64le",
                           product_id: "systemd-mini-container-mini-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-coredump-mini-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-mini-coredump-mini-234-24.30.1.ppc64le",
                           product_id: "systemd-mini-coredump-mini-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-devel-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-mini-devel-234-24.30.1.ppc64le",
                           product_id: "systemd-mini-devel-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-sysvinit-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-mini-sysvinit-234-24.30.1.ppc64le",
                           product_id: "systemd-mini-sysvinit-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-sysvinit-234-24.30.1.ppc64le",
                        product: {
                           name: "systemd-sysvinit-234-24.30.1.ppc64le",
                           product_id: "systemd-sysvinit-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-234-24.30.1.ppc64le",
                        product: {
                           name: "udev-234-24.30.1.ppc64le",
                           product_id: "udev-234-24.30.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-mini-234-24.30.1.ppc64le",
                        product: {
                           name: "udev-mini-234-24.30.1.ppc64le",
                           product_id: "udev-mini-234-24.30.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libsystemd0-234-24.30.1.s390x",
                        product: {
                           name: "libsystemd0-234-24.30.1.s390x",
                           product_id: "libsystemd0-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libsystemd0-mini-234-24.30.1.s390x",
                        product: {
                           name: "libsystemd0-mini-234-24.30.1.s390x",
                           product_id: "libsystemd0-mini-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-devel-234-24.30.1.s390x",
                        product: {
                           name: "libudev-devel-234-24.30.1.s390x",
                           product_id: "libudev-devel-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini-devel-234-24.30.1.s390x",
                        product: {
                           name: "libudev-mini-devel-234-24.30.1.s390x",
                           product_id: "libudev-mini-devel-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini1-234-24.30.1.s390x",
                        product: {
                           name: "libudev-mini1-234-24.30.1.s390x",
                           product_id: "libudev-mini1-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev1-234-24.30.1.s390x",
                        product: {
                           name: "libudev1-234-24.30.1.s390x",
                           product_id: "libudev1-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-myhostname-234-24.30.1.s390x",
                        product: {
                           name: "nss-myhostname-234-24.30.1.s390x",
                           product_id: "nss-myhostname-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-mymachines-234-24.30.1.s390x",
                        product: {
                           name: "nss-mymachines-234-24.30.1.s390x",
                           product_id: "nss-mymachines-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-systemd-234-24.30.1.s390x",
                        product: {
                           name: "nss-systemd-234-24.30.1.s390x",
                           product_id: "nss-systemd-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-234-24.30.1.s390x",
                        product: {
                           name: "systemd-234-24.30.1.s390x",
                           product_id: "systemd-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-container-234-24.30.1.s390x",
                        product: {
                           name: "systemd-container-234-24.30.1.s390x",
                           product_id: "systemd-container-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-coredump-234-24.30.1.s390x",
                        product: {
                           name: "systemd-coredump-234-24.30.1.s390x",
                           product_id: "systemd-coredump-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-devel-234-24.30.1.s390x",
                        product: {
                           name: "systemd-devel-234-24.30.1.s390x",
                           product_id: "systemd-devel-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-logger-234-24.30.1.s390x",
                        product: {
                           name: "systemd-logger-234-24.30.1.s390x",
                           product_id: "systemd-logger-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-234-24.30.1.s390x",
                        product: {
                           name: "systemd-mini-234-24.30.1.s390x",
                           product_id: "systemd-mini-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-container-mini-234-24.30.1.s390x",
                        product: {
                           name: "systemd-mini-container-mini-234-24.30.1.s390x",
                           product_id: "systemd-mini-container-mini-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-coredump-mini-234-24.30.1.s390x",
                        product: {
                           name: "systemd-mini-coredump-mini-234-24.30.1.s390x",
                           product_id: "systemd-mini-coredump-mini-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-devel-234-24.30.1.s390x",
                        product: {
                           name: "systemd-mini-devel-234-24.30.1.s390x",
                           product_id: "systemd-mini-devel-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-sysvinit-234-24.30.1.s390x",
                        product: {
                           name: "systemd-mini-sysvinit-234-24.30.1.s390x",
                           product_id: "systemd-mini-sysvinit-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-sysvinit-234-24.30.1.s390x",
                        product: {
                           name: "systemd-sysvinit-234-24.30.1.s390x",
                           product_id: "systemd-sysvinit-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-234-24.30.1.s390x",
                        product: {
                           name: "udev-234-24.30.1.s390x",
                           product_id: "udev-234-24.30.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-mini-234-24.30.1.s390x",
                        product: {
                           name: "udev-mini-234-24.30.1.s390x",
                           product_id: "udev-mini-234-24.30.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libsystemd0-234-24.30.1.x86_64",
                        product: {
                           name: "libsystemd0-234-24.30.1.x86_64",
                           product_id: "libsystemd0-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libsystemd0-32bit-234-24.30.1.x86_64",
                        product: {
                           name: "libsystemd0-32bit-234-24.30.1.x86_64",
                           product_id: "libsystemd0-32bit-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libsystemd0-mini-234-24.30.1.x86_64",
                        product: {
                           name: "libsystemd0-mini-234-24.30.1.x86_64",
                           product_id: "libsystemd0-mini-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-devel-234-24.30.1.x86_64",
                        product: {
                           name: "libudev-devel-234-24.30.1.x86_64",
                           product_id: "libudev-devel-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-devel-32bit-234-24.30.1.x86_64",
                        product: {
                           name: "libudev-devel-32bit-234-24.30.1.x86_64",
                           product_id: "libudev-devel-32bit-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini-devel-234-24.30.1.x86_64",
                        product: {
                           name: "libudev-mini-devel-234-24.30.1.x86_64",
                           product_id: "libudev-mini-devel-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev-mini1-234-24.30.1.x86_64",
                        product: {
                           name: "libudev-mini1-234-24.30.1.x86_64",
                           product_id: "libudev-mini1-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev1-234-24.30.1.x86_64",
                        product: {
                           name: "libudev1-234-24.30.1.x86_64",
                           product_id: "libudev1-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libudev1-32bit-234-24.30.1.x86_64",
                        product: {
                           name: "libudev1-32bit-234-24.30.1.x86_64",
                           product_id: "libudev1-32bit-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-myhostname-234-24.30.1.x86_64",
                        product: {
                           name: "nss-myhostname-234-24.30.1.x86_64",
                           product_id: "nss-myhostname-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-myhostname-32bit-234-24.30.1.x86_64",
                        product: {
                           name: "nss-myhostname-32bit-234-24.30.1.x86_64",
                           product_id: "nss-myhostname-32bit-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-mymachines-234-24.30.1.x86_64",
                        product: {
                           name: "nss-mymachines-234-24.30.1.x86_64",
                           product_id: "nss-mymachines-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-mymachines-32bit-234-24.30.1.x86_64",
                        product: {
                           name: "nss-mymachines-32bit-234-24.30.1.x86_64",
                           product_id: "nss-mymachines-32bit-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nss-systemd-234-24.30.1.x86_64",
                        product: {
                           name: "nss-systemd-234-24.30.1.x86_64",
                           product_id: "nss-systemd-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-234-24.30.1.x86_64",
                           product_id: "systemd-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-32bit-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-32bit-234-24.30.1.x86_64",
                           product_id: "systemd-32bit-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-container-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-container-234-24.30.1.x86_64",
                           product_id: "systemd-container-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-coredump-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-coredump-234-24.30.1.x86_64",
                           product_id: "systemd-coredump-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-devel-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-devel-234-24.30.1.x86_64",
                           product_id: "systemd-devel-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-logger-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-logger-234-24.30.1.x86_64",
                           product_id: "systemd-logger-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-mini-234-24.30.1.x86_64",
                           product_id: "systemd-mini-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-container-mini-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-mini-container-mini-234-24.30.1.x86_64",
                           product_id: "systemd-mini-container-mini-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-coredump-mini-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-mini-coredump-mini-234-24.30.1.x86_64",
                           product_id: "systemd-mini-coredump-mini-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-devel-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-mini-devel-234-24.30.1.x86_64",
                           product_id: "systemd-mini-devel-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-mini-sysvinit-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-mini-sysvinit-234-24.30.1.x86_64",
                           product_id: "systemd-mini-sysvinit-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "systemd-sysvinit-234-24.30.1.x86_64",
                        product: {
                           name: "systemd-sysvinit-234-24.30.1.x86_64",
                           product_id: "systemd-sysvinit-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-234-24.30.1.x86_64",
                        product: {
                           name: "udev-234-24.30.1.x86_64",
                           product_id: "udev-234-24.30.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "udev-mini-234-24.30.1.x86_64",
                        product: {
                           name: "udev-mini-234-24.30.1.x86_64",
                           product_id: "udev-mini-234-24.30.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                           product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-basesystem:15:sp1",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libsystemd0-234-24.30.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
            },
            product_reference: "libsystemd0-234-24.30.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libsystemd0-234-24.30.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
            },
            product_reference: "libsystemd0-234-24.30.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libsystemd0-234-24.30.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
            },
            product_reference: "libsystemd0-234-24.30.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libsystemd0-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
            },
            product_reference: "libsystemd0-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libsystemd0-32bit-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
            },
            product_reference: "libsystemd0-32bit-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libudev-devel-234-24.30.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
            },
            product_reference: "libudev-devel-234-24.30.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libudev-devel-234-24.30.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
            },
            product_reference: "libudev-devel-234-24.30.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libudev-devel-234-24.30.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
            },
            product_reference: "libudev-devel-234-24.30.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libudev-devel-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
            },
            product_reference: "libudev-devel-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libudev1-234-24.30.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
            },
            product_reference: "libudev1-234-24.30.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libudev1-234-24.30.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
            },
            product_reference: "libudev1-234-24.30.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libudev1-234-24.30.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
            },
            product_reference: "libudev1-234-24.30.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libudev1-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
            },
            product_reference: "libudev1-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libudev1-32bit-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
            },
            product_reference: "libudev1-32bit-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-234-24.30.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
            },
            product_reference: "systemd-234-24.30.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-234-24.30.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
            },
            product_reference: "systemd-234-24.30.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-234-24.30.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
            },
            product_reference: "systemd-234-24.30.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
            },
            product_reference: "systemd-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-32bit-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
            },
            product_reference: "systemd-32bit-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-bash-completion-234-24.30.1.noarch as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
            },
            product_reference: "systemd-bash-completion-234-24.30.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-container-234-24.30.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
            },
            product_reference: "systemd-container-234-24.30.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-container-234-24.30.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
            },
            product_reference: "systemd-container-234-24.30.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-container-234-24.30.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
            },
            product_reference: "systemd-container-234-24.30.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-container-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
            },
            product_reference: "systemd-container-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-coredump-234-24.30.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
            },
            product_reference: "systemd-coredump-234-24.30.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-coredump-234-24.30.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
            },
            product_reference: "systemd-coredump-234-24.30.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-coredump-234-24.30.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
            },
            product_reference: "systemd-coredump-234-24.30.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-coredump-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
            },
            product_reference: "systemd-coredump-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-devel-234-24.30.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
            },
            product_reference: "systemd-devel-234-24.30.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-devel-234-24.30.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
            },
            product_reference: "systemd-devel-234-24.30.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-devel-234-24.30.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
            },
            product_reference: "systemd-devel-234-24.30.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-devel-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
            },
            product_reference: "systemd-devel-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-sysvinit-234-24.30.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
            },
            product_reference: "systemd-sysvinit-234-24.30.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-sysvinit-234-24.30.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
            },
            product_reference: "systemd-sysvinit-234-24.30.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-sysvinit-234-24.30.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
            },
            product_reference: "systemd-sysvinit-234-24.30.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "systemd-sysvinit-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
            },
            product_reference: "systemd-sysvinit-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "udev-234-24.30.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
            },
            product_reference: "udev-234-24.30.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "udev-234-24.30.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
            },
            product_reference: "udev-234-24.30.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "udev-234-24.30.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
            },
            product_reference: "udev-234-24.30.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "udev-234-24.30.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
            },
            product_reference: "udev-234-24.30.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2019-3842",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-3842",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the \"allow_active\" element rather than \"allow_any\".",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-3842",
               url: "https://www.suse.com/security/cve/CVE-2019-3842",
            },
            {
               category: "external",
               summary: "SUSE Bug 1132348 for CVE-2019-3842",
               url: "https://bugzilla.suse.com/1132348",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2019-07-15T13:48:30Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-3842",
      },
      {
         cve: "CVE-2019-3843",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-3843",
            },
         ],
         notes: [
            {
               category: "general",
               text: "It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-3843",
               url: "https://www.suse.com/security/cve/CVE-2019-3843",
            },
            {
               category: "external",
               summary: "SUSE Bug 1133506 for CVE-2019-3843",
               url: "https://bugzilla.suse.com/1133506",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2019-07-15T13:48:30Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-3843",
      },
      {
         cve: "CVE-2019-3844",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-3844",
            },
         ],
         notes: [
            {
               category: "general",
               text: "It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-3844",
               url: "https://www.suse.com/security/cve/CVE-2019-3844",
            },
            {
               category: "external",
               summary: "SUSE Bug 1133509 for CVE-2019-3844",
               url: "https://bugzilla.suse.com/1133509",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2019-07-15T13:48:30Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-3844",
      },
      {
         cve: "CVE-2019-6454",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-6454",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
               "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-6454",
               url: "https://www.suse.com/security/cve/CVE-2019-6454",
            },
            {
               category: "external",
               summary: "SUSE Bug 1125352 for CVE-2019-6454",
               url: "https://bugzilla.suse.com/1125352",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libsystemd0-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:libudev1-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-32bit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-bash-completion-234-24.30.1.noarch",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-container-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-coredump-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-devel-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:systemd-sysvinit-234-24.30.1.x86_64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.aarch64",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.ppc64le",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.s390x",
                  "SUSE Linux Enterprise Module for Basesystem 15 SP1:udev-234-24.30.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2019-07-15T13:48:30Z",
               details: "important",
            },
         ],
         title: "CVE-2019-6454",
      },
   ],
}

cve-2019-3842

Vulnerability from cvelistv5

Published

2019-04-09 20:25

Modified

2024-08-04 19:19

Severity ?

4.5 (Medium) - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Summary

In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3842	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STR36RJE4ZZIORMDXRERVBHMPRNRTHAC/	vendor-advisory, x_refsource_FEDORA
	https://www.exploit-db.com/exploits/46743/	exploit, x_refsource_EXPLOIT-DB
	http://packetstormsecurity.com/files/152610/systemd-Seat-Verification-Active-Session-Spoofing.html	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/04/msg00022.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html	vendor-advisory, x_refsource_SUSE
	https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	The systemd Project	systemd	Version: v242-rc4

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T19:19:18.556Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3842",
               },
               {
                  name: "FEDORA-2019-3fa5db9e19",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STR36RJE4ZZIORMDXRERVBHMPRNRTHAC/",
               },
               {
                  name: "46743",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/46743/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/152610/systemd-Seat-Verification-Active-Session-Spoofing.html",
               },
               {
                  name: "[debian-lts-announce] 20190424 [SECURITY] [DLA 1762-1] systemd security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/04/msg00022.html",
               },
               {
                  name: "openSUSE-SU-2019:1450",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html",
               },
               {
                  name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
               },
               {
                  name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "systemd",
               vendor: "The systemd Project",
               versions: [
                  {
                     status: "affected",
                     version: "v242-rc4",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the \"allow_active\" element rather than \"allow_any\".",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "HIGH",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 4.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-285",
                     description: "CWE-285",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-06-29T14:08:37",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3842",
            },
            {
               name: "FEDORA-2019-3fa5db9e19",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STR36RJE4ZZIORMDXRERVBHMPRNRTHAC/",
            },
            {
               name: "46743",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/46743/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/152610/systemd-Seat-Verification-Active-Session-Spoofing.html",
            },
            {
               name: "[debian-lts-announce] 20190424 [SECURITY] [DLA 1762-1] systemd security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/04/msg00022.html",
            },
            {
               name: "openSUSE-SU-2019:1450",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html",
            },
            {
               name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
            },
            {
               name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2019-3842",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "systemd",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "v242-rc4",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "The systemd Project",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the \"allow_active\" element rather than \"allow_any\".",
                  },
               ],
            },
            impact: {
               cvss: [
                  [
                     {
                        vectorString: "4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                        version: "3.0",
                     },
                  ],
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-285",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3842",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3842",
                  },
                  {
                     name: "FEDORA-2019-3fa5db9e19",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/STR36RJE4ZZIORMDXRERVBHMPRNRTHAC/",
                  },
                  {
                     name: "46743",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/46743/",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/152610/systemd-Seat-Verification-Active-Session-Spoofing.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/152610/systemd-Seat-Verification-Active-Session-Spoofing.html",
                  },
                  {
                     name: "[debian-lts-announce] 20190424 [SECURITY] [DLA 1762-1] systemd security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/04/msg00022.html",
                  },
                  {
                     name: "openSUSE-SU-2019:1450",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html",
                  },
                  {
                     name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E",
                  },
                  {
                     name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2019-3842",
      datePublished: "2019-04-09T20:25:01",
      dateReserved: "2019-01-03T00:00:00",
      dateUpdated: "2024-08-04T19:19:18.556Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-3844

Vulnerability from cvelistv5

Published

2019-04-26 20:26

Modified

2024-08-04 19:19

Severity ?

4.5 (Medium) - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Summary

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3844	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/108096	vdb-entry, x_refsource_BID
	https://security.netapp.com/advisory/ntap-20190619-0002/	x_refsource_CONFIRM
	https://usn.ubuntu.com/4269-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	[freedesktop.org]	systemd	Version: 242

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T19:19:18.587Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3844",
               },
               {
                  name: "108096",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/108096",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190619-0002/",
               },
               {
                  name: "USN-4269-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4269-1/",
               },
               {
                  name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
               },
               {
                  name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "systemd",
               vendor: "[freedesktop.org]",
               versions: [
                  {
                     status: "affected",
                     version: "242",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "HIGH",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 4.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-268",
                     description: "CWE-268",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-06-29T14:08:00",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3844",
            },
            {
               name: "108096",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/108096",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190619-0002/",
            },
            {
               name: "USN-4269-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4269-1/",
            },
            {
               name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
            },
            {
               name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2019-3844",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "systemd",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "242",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "[freedesktop.org]",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.",
                  },
               ],
            },
            impact: {
               cvss: [
                  [
                     {
                        vectorString: "4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                        version: "3.0",
                     },
                  ],
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-268",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3844",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3844",
                  },
                  {
                     name: "108096",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/108096",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190619-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190619-0002/",
                  },
                  {
                     name: "USN-4269-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4269-1/",
                  },
                  {
                     name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E",
                  },
                  {
                     name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2019-3844",
      datePublished: "2019-04-26T20:26:53",
      dateReserved: "2019-01-03T00:00:00",
      dateUpdated: "2024-08-04T19:19:18.587Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-6454

Vulnerability from cvelistv5

Published

2019-03-17 16:38

Modified

2024-08-04 20:23

Severity ?

Summary

An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N67IOBOTDOMVNQJ5QRU2MXLEECXPGNVJ/	vendor-advisory, x_refsource_FEDORA
	http://www.openwall.com/lists/oss-security/2019/02/18/3	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/107081	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3891-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2019:0368	vendor-advisory, x_refsource_REDHAT
	https://github.com/systemd/systemd/commits/master/src/libsystemd/sd-bus/bus-objects.c	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00070.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2019/02/19/1	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2019/02/msg00031.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2019/dsa-4393	vendor-advisory, x_refsource_DEBIAN
	https://security.netapp.com/advisory/ntap-20190327-0004/	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10278	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:0990	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:1322	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1502	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2805	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2021/07/20/2	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T20:23:21.049Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2019-8434288a24",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N67IOBOTDOMVNQJ5QRU2MXLEECXPGNVJ/",
               },
               {
                  name: "[oss-security] 20190218 CVE-2019-6454: systemd (PID1) crash with specially crafted D-Bus message",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2019/02/18/3",
               },
               {
                  name: "107081",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/107081",
               },
               {
                  name: "USN-3891-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3891-1/",
               },
               {
                  name: "RHSA-2019:0368",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0368",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/systemd/systemd/commits/master/src/libsystemd/sd-bus/bus-objects.c",
               },
               {
                  name: "SUSE-SA:2019:0255-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00070.html",
               },
               {
                  name: "[oss-security] 20190219 CVE-2019-6454: systemd (PID1) crash with specially crafted D-Bus message",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2019/02/19/1",
               },
               {
                  name: "[SECURITY] [DLA 1684-1] 20190219 systemd security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/02/msg00031.html",
               },
               {
                  name: "DSA-4393-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2019/dsa-4393",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190327-0004/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10278",
               },
               {
                  name: "RHSA-2019:0990",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0990",
               },
               {
                  name: "openSUSE-SU-2019:1450",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html",
               },
               {
                  name: "RHSA-2019:1322",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1322",
               },
               {
                  name: "RHSA-2019:1502",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1502",
               },
               {
                  name: "RHSA-2019:2805",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2805",
               },
               {
                  name: "[oss-security] 20210720 CVE-2021-33910: Denial of service (stack exhaustion) in systemd (PID 1)",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2021/07/20/2",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2019-02-18T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-07-20T14:06:12",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "FEDORA-2019-8434288a24",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N67IOBOTDOMVNQJ5QRU2MXLEECXPGNVJ/",
            },
            {
               name: "[oss-security] 20190218 CVE-2019-6454: systemd (PID1) crash with specially crafted D-Bus message",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2019/02/18/3",
            },
            {
               name: "107081",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/107081",
            },
            {
               name: "USN-3891-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3891-1/",
            },
            {
               name: "RHSA-2019:0368",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0368",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/systemd/systemd/commits/master/src/libsystemd/sd-bus/bus-objects.c",
            },
            {
               name: "SUSE-SA:2019:0255-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00070.html",
            },
            {
               name: "[oss-security] 20190219 CVE-2019-6454: systemd (PID1) crash with specially crafted D-Bus message",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2019/02/19/1",
            },
            {
               name: "[SECURITY] [DLA 1684-1] 20190219 systemd security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/02/msg00031.html",
            },
            {
               name: "DSA-4393-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2019/dsa-4393",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190327-0004/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10278",
            },
            {
               name: "RHSA-2019:0990",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0990",
            },
            {
               name: "openSUSE-SU-2019:1450",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html",
            },
            {
               name: "RHSA-2019:1322",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1322",
            },
            {
               name: "RHSA-2019:1502",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1502",
            },
            {
               name: "RHSA-2019:2805",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2805",
            },
            {
               name: "[oss-security] 20210720 CVE-2021-33910: Denial of service (stack exhaustion) in systemd (PID 1)",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2021/07/20/2",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-6454",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2019-8434288a24",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N67IOBOTDOMVNQJ5QRU2MXLEECXPGNVJ/",
                  },
                  {
                     name: "[oss-security] 20190218 CVE-2019-6454: systemd (PID1) crash with specially crafted D-Bus message",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2019/02/18/3",
                  },
                  {
                     name: "107081",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/107081",
                  },
                  {
                     name: "USN-3891-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3891-1/",
                  },
                  {
                     name: "RHSA-2019:0368",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0368",
                  },
                  {
                     name: "https://github.com/systemd/systemd/commits/master/src/libsystemd/sd-bus/bus-objects.c",
                     refsource: "MISC",
                     url: "https://github.com/systemd/systemd/commits/master/src/libsystemd/sd-bus/bus-objects.c",
                  },
                  {
                     name: "SUSE-SA:2019:0255-1",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00070.html",
                  },
                  {
                     name: "[oss-security] 20190219 CVE-2019-6454: systemd (PID1) crash with specially crafted D-Bus message",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2019/02/19/1",
                  },
                  {
                     name: "[SECURITY] [DLA 1684-1] 20190219 systemd security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/02/msg00031.html",
                  },
                  {
                     name: "DSA-4393-1",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2019/dsa-4393",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190327-0004/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190327-0004/",
                  },
                  {
                     name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10278",
                     refsource: "CONFIRM",
                     url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10278",
                  },
                  {
                     name: "RHSA-2019:0990",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0990",
                  },
                  {
                     name: "openSUSE-SU-2019:1450",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html",
                  },
                  {
                     name: "RHSA-2019:1322",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1322",
                  },
                  {
                     name: "RHSA-2019:1502",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1502",
                  },
                  {
                     name: "RHSA-2019:2805",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2805",
                  },
                  {
                     name: "[oss-security] 20210720 CVE-2021-33910: Denial of service (stack exhaustion) in systemd (PID 1)",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2021/07/20/2",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-6454",
      datePublished: "2019-03-17T16:38:57",
      dateReserved: "2019-01-16T00:00:00",
      dateUpdated: "2024-08-04T20:23:21.049Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-3843

Vulnerability from cvelistv5

Published

2019-04-26 20:27

Modified

2024-08-04 19:19

Severity ?

4.5 (Medium) - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Summary

It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3843	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5JXQAKSTMABZ46EVCRMW62DHWYHTTFES/	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/bid/108116	vdb-entry, x_refsource_BID
	https://security.netapp.com/advisory/ntap-20190619-0002/	x_refsource_CONFIRM
	https://usn.ubuntu.com/4269-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	[freedesktop.org]	systemd	Version: 242

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T19:19:18.567Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3843",
               },
               {
                  name: "FEDORA-2019-7322053e74",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5JXQAKSTMABZ46EVCRMW62DHWYHTTFES/",
               },
               {
                  name: "108116",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/108116",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190619-0002/",
               },
               {
                  name: "USN-4269-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4269-1/",
               },
               {
                  name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
               },
               {
                  name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "systemd",
               vendor: "[freedesktop.org]",
               versions: [
                  {
                     status: "affected",
                     version: "242",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "HIGH",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 4.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-266",
                     description: "CWE-266",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-06-29T14:07:57",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3843",
            },
            {
               name: "FEDORA-2019-7322053e74",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5JXQAKSTMABZ46EVCRMW62DHWYHTTFES/",
            },
            {
               name: "108116",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/108116",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190619-0002/",
            },
            {
               name: "USN-4269-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4269-1/",
            },
            {
               name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
            },
            {
               name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2019-3843",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "systemd",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "242",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "[freedesktop.org]",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.",
                  },
               ],
            },
            impact: {
               cvss: [
                  [
                     {
                        vectorString: "4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                        version: "3.0",
                     },
                  ],
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-266",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3843",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3843",
                  },
                  {
                     name: "FEDORA-2019-7322053e74",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5JXQAKSTMABZ46EVCRMW62DHWYHTTFES/",
                  },
                  {
                     name: "108116",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/108116",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190619-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190619-0002/",
                  },
                  {
                     name: "USN-4269-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4269-1/",
                  },
                  {
                     name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E",
                  },
                  {
                     name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2019-3843",
      datePublished: "2019-04-26T20:27:30",
      dateReserved: "2019-01-03T00:00:00",
      dateUpdated: "2024-08-04T19:19:18.567Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

cve-2019-3842

Vulnerability from cvelistv5

cve-2019-3844

Vulnerability from cvelistv5

cve-2019-6454

Vulnerability from cvelistv5

cve-2019-3843

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature