SUSE update for the Linux Kernel
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 36 |
| CVE-ID | CVE-2020-0433 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2020-25673 CVE-2020-27170 CVE-2020-27171 CVE-2020-27673 CVE-2020-27815 CVE-2020-35519 CVE-2020-36310 CVE-2020-36311 CVE-2020-36312 CVE-2020-36322 CVE-2021-20219 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVE-2021-28038 CVE-2021-28660 CVE-2021-28688 CVE-2021-28950 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29265 CVE-2021-29647 CVE-2021-29650 CVE-2021-30002 CVE-2021-3428 CVE-2021-3444 CVE-2021-3483 CVE-2021-26931 |
| CWE-ID | CWE-416 CWE-401 CWE-400 CWE-203 CWE-193 CWE-20 CWE-125 CWE-835 CWE-264 CWE-404 CWE-697 CWE-200 CWE-119 CWE-770 CWE-787 CWE-665 CWE-834 CWE-362 CWE-77 CWE-190 |
| Exploitation vector | Network |
| Public exploit | Public exploit code for vulnerability #27 is available. |
| Vulnerable software |
SUSE Linux Enterprise High Availability Operating systems & Components / Operating system SUSE Manager Proxy Operating systems & Components / Operating system SUSE Manager Retail Branch Server Operating systems & Components / Operating system SUSE Manager Server Operating systems & Components / Operating system SUSE Linux Enterprise Module for Live Patching Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing Operating systems & Components / Operating system SUSE Enterprise Storage Operating systems & Components / Operating system SUSE CaaS Platform Operating systems & Components / Operating system SUSE Linux Enterprise Server Operating systems & Components / Operating system ocfs2-kmp-default-debuginfo Operating systems & Components / Operating system package or component ocfs2-kmp-default Operating systems & Components / Operating system package or component gfs2-kmp-default-debuginfo Operating systems & Components / Operating system package or component gfs2-kmp-default Operating systems & Components / Operating system package or component dlm-kmp-default-debuginfo Operating systems & Components / Operating system package or component dlm-kmp-default Operating systems & Components / Operating system package or component cluster-md-kmp-default-debuginfo Operating systems & Components / Operating system package or component cluster-md-kmp-default Operating systems & Components / Operating system package or component kernel-livepatch-4_12_14-197_89-default Operating systems & Components / Operating system package or component kernel-default-livepatch-devel Operating systems & Components / Operating system package or component kernel-default-livepatch Operating systems & Components / Operating system package or component kernel-zfcpdump-debugsource Operating systems & Components / Operating system package or component kernel-zfcpdump-debuginfo Operating systems & Components / Operating system package or component kernel-default-man Operating systems & Components / Operating system package or component kernel-source Operating systems & Components / Operating system package or component kernel-macros Operating systems & Components / Operating system package or component kernel-docs Operating systems & Components / Operating system package or component kernel-devel Operating systems & Components / Operating system package or component reiserfs-kmp-default-debuginfo Operating systems & Components / Operating system package or component reiserfs-kmp-default Operating systems & Components / Operating system package or component kernel-syms Operating systems & Components / Operating system package or component kernel-obs-build-debugsource Operating systems & Components / Operating system package or component kernel-obs-build Operating systems & Components / Operating system package or component kernel-default-devel-debuginfo Operating systems & Components / Operating system package or component kernel-default-devel Operating systems & Components / Operating system package or component kernel-default-debugsource Operating systems & Components / Operating system package or component kernel-default-debuginfo Operating systems & Components / Operating system package or component kernel-default-base-debuginfo Operating systems & Components / Operating system package or component kernel-default-base Operating systems & Components / Operating system package or component kernel-default Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 36 vulnerabilities.
1) Use-after-free
EUVDB-ID: #VU47103
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-0433
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local authenticated user to execute arbitrary code.
In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151939299
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Use-after-free
EUVDB-ID: #VU63652
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-25670
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error in the NFC LLCP protocol implementation. A local user can perform manipulation with an unknown input for the llcp_sock_bind() function to crash or escalate their privileges on the system.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Use-after-free
EUVDB-ID: #VU63653
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-25671
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error in the NFC LLCP protocol implementation. A local user can trigger the llcp_sock_connect() function to crash or escalate their privileges on the system.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Memory leak
EUVDB-ID: #VU63654
Risk: High
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2020-25672
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform DoS attack on the target system.
The vulnerability exists due memory leak in the NFC LLCP protocol implementation when triggering the llcp_sock_connect() function. A remote attacker can force the application to leak memory and perform denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Resource exhaustion
EUVDB-ID: #VU63656
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-25673
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper control consumption of internal resources in non-blocking socket in llcp_sock_connect() function. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Observable discrepancy
EUVDB-ID: #VU51774
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-27170
CWE-ID:
CWE-203 - Observable discrepancy
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists in kernel/bpf/verifier.c due to kernel performs undesirable out-of-bounds speculation on
pointer arithmetic, leading to side-channel attacks that defeat Spectre
mitigations. A local user can run a specially crafted program to gain access to sensitive information.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
7) Off-by-one
EUVDB-ID: #VU51775
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-27171
CWE-ID:
CWE-193 - Off-by-one Error
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to an off-by-one error in kernel/bpf/verifier.c affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations. A local user can run a specially crafted program to gain access to sensitive information on the system.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
8) Input validation error
EUVDB-ID: #VU94154
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-27673
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the clear_linked(), consume_one_event(), __evtchn_fifo_handle_events() and evtchn_fifo_percpu_init() functions in drivers/xen/events/events_fifo.c, within the module_param(), DEFINE_RWLOCK(), enable_dynirq(), notify_remote_via_irq(), EXPORT_SYMBOL_GPL(), xen_irq_init(), xen_free_irq(), xen_send_IPI_one(), __xen_evtchn_do_upcall(), xen_setup_callback_vector(), xen_evtchn_cpu_prepare() and xen_init_IRQ() functions in drivers/xen/events/events_base.c, within the active_evtchns() and evtchn_2l_handle_events() functions in drivers/xen/events/events_2l.c. A local user can perform a denial of service (DoS) attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
9) Out-of-bounds read
EUVDB-ID: #VU49169
Risk: Low
CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-27815
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in fs/jfs/jfs_dmap.c. A local user can trigger out-of-bounds read error and crash the kernel.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
10) Out-of-bounds read
EUVDB-ID: #VU51552
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-35519
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the x25_bind() function in net/x25/af_x25.c in the Linux kernel. A local user can run a specially crafted program to read contents of memory on the system.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
11) Infinite loop
EUVDB-ID: #VU61272
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-36310
CWE-ID:
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to infinite loop in set_memory_region_test in arch/x86/kvm/svm/svm.c. A local user can consume all available system resources and cause denial of service conditions.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
12) Permissions, Privileges, and Access Controls
EUVDB-ID: #VU55262
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-36311
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service attack.
The vulnerability exists due to an error in arch/x86/kvm/svm/sev.c in Linux kernel, which allows soft lockup by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions).
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
13) Memory leak
EUVDB-ID: #VU67183
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-36312
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform DoS attack on the target system.
The vulnerability exists in the KVM hypervisor of the Linux kernel. A local user can force the application to leak memory and perform denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
14) Improper Resource Shutdown or Release
EUVDB-ID: #VU59473
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-36322
CWE-ID:
CWE-404 - Improper Resource Shutdown or Release
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists in the FUSE filesystem implementation in the Linux kernel due to fuse_do_getattr() calls make_bad_inode() in inappropriate situations. A local user can run a specially crafted program to trigger kernel crash.
Note, the vulnerability exists due to incomplete fix for #VU58207 (CVE-2021-28950).
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
15) Incorrect comparison
EUVDB-ID: #VU95683
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-20219
CWE-ID:
CWE-697 - Incorrect Comparison
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could delay the loop (due to a changing ldata->read_head, and a missing sanity check) and cause a threat to the system availability.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
16) Information disclosure
EUVDB-ID: #VU51453
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-27363
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to the show_transport_handle() shows iSCSI transport handle to non-root users. A local user can gain unauthorized access to sensitive information and use it along with another vulnerability, such as #VU51452, to escalate privileges on the system.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
17) Permissions, Privileges, and Access Controls
EUVDB-ID: #VU51452
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-27364
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to iscsi_if_recv_msg() allows non-root users to connect and send commands to the Linux kernel. A local user can escalate privileges on the system.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
18) Buffer overflow
EUVDB-ID: #VU51451
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-27365
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error when processing Netlink messages in Linux kernel through 5.11.3, as certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. A local unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message, trigger memory corruption and execute arbitrary code on the system with elevated privileges.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
19) Allocation of resources without limits or throttling
EUVDB-ID: #VU92417
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-28038
CWE-ID:
CWE-770 - Allocation of Resources Without Limits or Throttling
Exploit availability: No
DescriptionThe vulnerability allows a local user to a crash the entire system.
The vulnerability exists due to allocation of resources without limits or throttling error within the xenvif_tx_action() function in drivers/net/xen-netback/netback.c. A local user can a crash the entire system.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
20) Out-of-bounds write
EUVDB-ID: #VU56817
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-28660
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: No
DescriptionThe vulnerability allows a local user to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input in the "rtw_wx_set_scan" in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c. A local user can trigger out-of-bounds write and execute arbitrary code on the target system.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
21) Improper Initialization
EUVDB-ID: #VU63658
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-28688
CWE-ID:
CWE-665 - Improper Initialization
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service attack.
The vulnerability exists due to improper initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. A local user can perform a denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
22) Excessive Iteration
EUVDB-ID: #VU58207
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-28950
CWE-ID:
CWE-834 - Excessive Iteration
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to excessive iteration in fs/fuse/fuse_i.h in the Linux kernel. A local user can run a specially crafted program to perform a denial of service attack.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
23) Race condition
EUVDB-ID: #VU63573
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-28964
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service attack.
The vulnerability exists due to a race condition in the get_old_root() function in fs/btrfs/ctree.c component in the Linux kernel. A local user can exploit the race and perform a denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
24) Resource exhaustion
EUVDB-ID: #VU64830
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-28971
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to mishandling of PEBS status in a PEBS record In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
25) Buffer overflow
EUVDB-ID: #VU56819
Risk: Low
CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-28972
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in the drivers/pci/hotplug/rpadlpar_sysfs.c. A local administrator can trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
26) Command Injection
EUVDB-ID: #VU56241
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-29154
CWE-ID:
CWE-77 - Command injection
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to incorrect computation of branch displacements within the BPF JIT compilers in the Linux kernel in arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c. A local user can inject and execute arbitrary commands with elevated privileges.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
27) Out-of-bounds read
EUVDB-ID: #VU67490
Risk: Low
CVSSv4.0: 5.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID: CVE-2021-29155
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists in retrieve_ptr_limit in kernel/bpf/verifier.c in the Linux kernel mechanism. A local, special user privileged (CAP_SYS_ADMIN) BPF program running on affected systems may bypass the protection, and execute speculatively out-of-bounds loads from the kernel memory.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
28) Input validation error
EUVDB-ID: #VU93697
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-29264
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the gfar_add_rx_frag() and gfar_clean_rx_ring() functions in drivers/net/ethernet/freescale/gianfar.c. A local user can perform a denial of service (DoS) attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
29) Race condition
EUVDB-ID: #VU91488
Risk: Low
CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-29265
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a race condition within the usbip_sockfd_store() function in drivers/usb/usbip/stub_dev.c. A local user can perform a denial of service (DoS) attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
30) Information disclosure
EUVDB-ID: #VU57040
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-29647
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to an error in qrtr_recvmsg(0 function in net/qrtr/qrtr.c caused by a partially uninitialized data structure. A local user can read sensitive information from kernel memory.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
31) Buffer overflow
EUVDB-ID: #VU56240
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-29650
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error within the netfilter subsystem in net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h. A local user can trigger memory corruption upon the assignment of a new table value and cause denial of service.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
32) Memory leak
EUVDB-ID: #VU68552
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-30002
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform DoS attack on the target system.
The vulnerability exists due memory leak within the webcam support driver in video_usercopy() function in drivers/media/v4l2-core/v4l2-ioctl.c in Linux kernel. A local user can trigger leak memory and perform denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
33) Integer overflow
EUVDB-ID: #VU51551
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-3428
CWE-ID:
CWE-190 - Integer overflow
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to integer overflow in fs/ext4/extents.c in ext4_es_cache_extent() function, if an extent tree is corrupted in a crafted ext4 filesystem. A local user can mount a specially crafted filesystem and perform a denial of service (DoS) attack.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
34) Out-of-bounds read
EUVDB-ID: #VU90368
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-3444
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code.
The vulnerability exists due to an out-of-bounds read error within the fixup_bpf_calls() function in kernel/bpf/verifier.c. A local user can execute arbitrary code.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
35) Use-after-free
EUVDB-ID: #VU63659
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-3483
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error in the Nosy driver in the Linux kernel. A local user can trigger use-after-free and to escalate privileges on the system.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
36) Allocation of resources without limits or throttling
EUVDB-ID: #VU92418
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-26931
CWE-ID:
CWE-770 - Allocation of Resources Without Limits or Throttling
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to allocation of resources without limits or throttling error within the scsiback_gnttab_data_map_batch() function in drivers/xen/xen-scsiback.c. A local user can perform a denial of service (DoS) attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise High Availability: 15-SP1
SUSE Manager Proxy: 4.0
SUSE Manager Retail Branch Server: 4.0
SUSE Manager Server: 4.0
SUSE Linux Enterprise Module for Live Patching: 15-SP1
SUSE Linux Enterprise Server for SAP: 15-SP1
SUSE Linux Enterprise High Performance Computing: 15-SP1-LTSS - 15-SP1-ESPOS
SUSE Enterprise Storage: 6
SUSE CaaS Platform: 4.0
SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS
ocfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
ocfs2-kmp-default: before 4.12.14-197.89.2
gfs2-kmp-default-debuginfo: before 4.12.14-197.89.2
gfs2-kmp-default: before 4.12.14-197.89.2
dlm-kmp-default-debuginfo: before 4.12.14-197.89.2
dlm-kmp-default: before 4.12.14-197.89.2
cluster-md-kmp-default-debuginfo: before 4.12.14-197.89.2
cluster-md-kmp-default: before 4.12.14-197.89.2
kernel-livepatch-4_12_14-197_89-default: before 1-3.3.2
kernel-default-livepatch-devel: before 4.12.14-197.89.2
kernel-default-livepatch: before 4.12.14-197.89.2
kernel-zfcpdump-debugsource: before 4.12.14-197.89.2
kernel-zfcpdump-debuginfo: before 4.12.14-197.89.2
kernel-default-man: before 4.12.14-197.89.2
kernel-source: before 4.12.14-197.89.2
kernel-macros: before 4.12.14-197.89.2
kernel-docs: before 4.12.14-197.89.3
kernel-devel: before 4.12.14-197.89.2
reiserfs-kmp-default-debuginfo: before 4.12.14-197.89.2
reiserfs-kmp-default: before 4.12.14-197.89.2
kernel-syms: before 4.12.14-197.89.2
kernel-obs-build-debugsource: before 4.12.14-197.89.2
kernel-obs-build: before 4.12.14-197.89.2
kernel-default-devel-debuginfo: before 4.12.14-197.89.2
kernel-default-devel: before 4.12.14-197.89.2
kernel-default-debugsource: before 4.12.14-197.89.2
kernel-default-debuginfo: before 4.12.14-197.89.2
kernel-default-base-debuginfo: before 4.12.14-197.89.2
kernel-default-base: before 4.12.14-197.89.2
kernel-default: before 4.12.14-197.89.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-livepatch-4_12_14-197_89-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-man:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20211624-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
