SUSE update for gcc12

1) Security features bypass

EUVDB-ID: #VU81045

Risk: Medium

CVSSv3.1: 4.9 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-4039

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to the GCC's stack smashing protection does not detect or defend against overflows of dynamically-sized local variables on AArch64 targets. A remote attacker can bypass expected security restrictions and successfully exploit buffer overflow vulnerabilities.

Mitigation

Update the affected package gcc12 to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Micro: 5.1 - 5.5

openSUSE Leap Micro: 5.3 - 5.4

Development Tools Module: 15-SP4 - 15-SP5

SUSE Package Hub 15: 15-SP4 - 15-SP5

Basesystem Module: 15-SP4 - 15-SP5

SUSE Linux Enterprise Micro for Rancher: 5.2 - 5.4

SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5

SUSE Linux Enterprise Server 15: SP1 - SP5

SUSE Linux Enterprise Real Time 15: SP4 - SP5

SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5

SUSE Linux Enterprise Desktop 15: SP4 - SP5

Legacy Module: 15-SP4

SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3

SUSE Linux Enterprise Server 15 SP2 LTSS: 15-SP2

SUSE Linux Enterprise Server 15 SP1 LTSS: 15-SP1

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP3

SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS: 15-SP2

SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS: 15-SP1

SUSE Enterprise Storage: 7.1

SUSE Manager Retail Branch Server: 4.2 - 4.3

SUSE Manager Server: 4.2 - 4.3

SUSE Manager Proxy: 4.2 - 4.3

SUSE CaaS Platform: 4.0

openSUSE Leap: 15.4

libhwasan0-debuginfo: before 12.3.0+git1204-150000.1.16.1

libhwasan0: before 12.3.0+git1204-150000.1.16.1

libquadmath0-debuginfo: before 12.3.0+git1204-150000.1.16.1

libquadmath0: before 12.3.0+git1204-150000.1.16.1

libubsan1-32bit: before 12.3.0+git1204-150000.1.16.1

libobjc4-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libstdc++6-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgfortran5-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libobjc4-32bit: before 12.3.0+git1204-150000.1.16.1

libubsan1-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgomp1-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgfortran5-32bit: before 12.3.0+git1204-150000.1.16.1

libgcc_s1-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libitm1-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libatomic1-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libatomic1-32bit: before 12.3.0+git1204-150000.1.16.1

libitm1-32bit: before 12.3.0+git1204-150000.1.16.1

libgcc_s1-32bit: before 12.3.0+git1204-150000.1.16.1

libstdc++6-32bit: before 12.3.0+git1204-150000.1.16.1

libgomp1-32bit: before 12.3.0+git1204-150000.1.16.1

gcc12-info: before 12.3.0+git1204-150000.1.16.1

libgdruntime3: before 12.3.0+git1204-150000.1.16.1

gcc12-d: before 12.3.0+git1204-150000.1.16.1

libgphobos3-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgphobos3: before 12.3.0+git1204-150000.1.16.1

libgdruntime3-debuginfo: before 12.3.0+git1204-150000.1.16.1

gcc12-d-debuginfo: before 12.3.0+git1204-150000.1.16.1

cross-nvptx-newlib12-devel: before 12.3.0+git1204-150000.1.16.1

libada12-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libada12-32bit: before 12.3.0+git1204-150000.1.16.1

gcc12-fortran-32bit: before 12.3.0+git1204-150000.1.16.1

libgphobos3-32bit: before 12.3.0+git1204-150000.1.16.1

gcc12-c++-32bit: before 12.3.0+git1204-150000.1.16.1

libgphobos3-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

gcc12-go-32bit: before 12.3.0+git1204-150000.1.16.1

gcc12-objc-32bit: before 12.3.0+git1204-150000.1.16.1

cross-nvptx-gcc12-debuginfo: before 12.3.0+git1204-150000.1.16.1

cross-nvptx-gcc12-debugsource: before 12.3.0+git1204-150000.1.16.1

libstdc++6-pp-32bit: before 12.3.0+git1204-150000.1.16.1

libquadmath0-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

gcc12-32bit: before 12.3.0+git1204-150000.1.16.1

libquadmath0-32bit: before 12.3.0+git1204-150000.1.16.1

libgo21-32bit: before 12.3.0+git1204-150000.1.16.1

gcc12-d-32bit: before 12.3.0+git1204-150000.1.16.1

gcc12-obj-c++-32bit: before 12.3.0+git1204-150000.1.16.1

libstdc++6-devel-gcc12-32bit: before 12.3.0+git1204-150000.1.16.1

gcc12-ada-32bit: before 12.3.0+git1204-150000.1.16.1

libasan8-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgdruntime3-32bit: before 12.3.0+git1204-150000.1.16.1

libasan8-32bit: before 12.3.0+git1204-150000.1.16.1

cross-nvptx-gcc12: before 12.3.0+git1204-150000.1.16.1

libgdruntime3-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgo21-32bit-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgfortran5-debuginfo: before 12.3.0+git1204-150000.1.16.1

gcc12-locale: before 12.3.0+git1204-150000.1.16.1

libasan8: before 12.3.0+git1204-150000.1.16.1

libasan8-debuginfo: before 12.3.0+git1204-150000.1.16.1

cpp12: before 12.3.0+git1204-150000.1.16.1

gcc12-go: before 12.3.0+git1204-150000.1.16.1

gcc12: before 12.3.0+git1204-150000.1.16.1

liblsan0: before 12.3.0+git1204-150000.1.16.1

gcc12-obj-c++-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgomp1-debuginfo: before 12.3.0+git1204-150000.1.16.1

libubsan1: before 12.3.0+git1204-150000.1.16.1

gcc12-objc: before 12.3.0+git1204-150000.1.16.1

libitm1-debuginfo: before 12.3.0+git1204-150000.1.16.1

gcc12-fortran: before 12.3.0+git1204-150000.1.16.1

cpp12-debuginfo: before 12.3.0+git1204-150000.1.16.1

libatomic1: before 12.3.0+git1204-150000.1.16.1

gcc12-PIE: before 12.3.0+git1204-150000.1.16.1

libstdc++6-locale: before 12.3.0+git1204-150000.1.16.1

libada12: before 12.3.0+git1204-150000.1.16.1

libgfortran5: before 12.3.0+git1204-150000.1.16.1

gcc12-ada-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgo21-debuginfo: before 12.3.0+git1204-150000.1.16.1

libubsan1-debuginfo: before 12.3.0+git1204-150000.1.16.1

libobjc4-debuginfo: before 12.3.0+git1204-150000.1.16.1

gcc12-objc-debuginfo: before 12.3.0+git1204-150000.1.16.1

gcc12-obj-c++: before 12.3.0+git1204-150000.1.16.1

libatomic1-debuginfo: before 12.3.0+git1204-150000.1.16.1

libada12-debuginfo: before 12.3.0+git1204-150000.1.16.1

libobjc4: before 12.3.0+git1204-150000.1.16.1

gcc12-go-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgo21: before 12.3.0+git1204-150000.1.16.1

libstdc++6-pp: before 12.3.0+git1204-150000.1.16.1

liblsan0-debuginfo: before 12.3.0+git1204-150000.1.16.1

libgomp1: before 12.3.0+git1204-150000.1.16.1

gcc12-c++: before 12.3.0+git1204-150000.1.16.1

libitm1: before 12.3.0+git1204-150000.1.16.1

gcc12-testresults: before 12.3.0+git1204-150000.1.16.1

gcc12-c++-debuginfo: before 12.3.0+git1204-150000.1.16.1

libtsan2-debuginfo: before 12.3.0+git1204-150000.1.16.1

libtsan2: before 12.3.0+git1204-150000.1.16.1

gcc12-fortran-debuginfo: before 12.3.0+git1204-150000.1.16.1

gcc12-ada: before 12.3.0+git1204-150000.1.16.1

libstdc++6-devel-gcc12: before 12.3.0+git1204-150000.1.16.1

libgcc_s1: before 12.3.0+git1204-150000.1.16.1

libstdc++6: before 12.3.0+git1204-150000.1.16.1

gcc12-debuginfo: before 12.3.0+git1204-150000.1.16.1

gcc12-debugsource: before 12.3.0+git1204-150000.1.16.1

libgcc_s1-debuginfo: before 12.3.0+git1204-150000.1.16.1

libstdc++6-debuginfo: before 12.3.0+git1204-150000.1.16.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.2:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap_micro:5.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:development_tools_module:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:development_tools_module:15-SP5:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_package_hub_15:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_package_hub_15:15-SP5:*:*:*:*:*:*:
• cpe:2.3:o:suse:basesystem_module:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.2:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP1:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP1:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP1:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:legacy_module:15-SP4:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp3_ltss:15-SP3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:15-SP2:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp1_ltss:15-SP1:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15_sp2_ltss:15-SP2:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15_sp1_ltss:15-SP1:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_enterprise_storage:7.1:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.2:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_server:4.2:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_manager_proxy:4.2:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_caas_platform:4.0:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:
• cpe:2.3:o:suse:libhwasan0-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libhwasan0:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libquadmath0-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libquadmath0:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libubsan1-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libobjc4-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libstdc_6-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgfortran5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libobjc4-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libubsan1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgomp1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgfortran5-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgcc_s1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libitm1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libatomic1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libatomic1-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libitm1-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgcc_s1-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libstdc_6-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgomp1-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-info:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgdruntime3:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-d:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgphobos3-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgphobos3:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgdruntime3-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-d-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cross-nvptx-newlib12-devel:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libada12-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libada12-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-fortran-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgphobos3-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-c_-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgphobos3-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-go-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-objc-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cross-nvptx-gcc12-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cross-nvptx-gcc12-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libstdc_6-pp-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libquadmath0-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libquadmath0-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgo21-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-d-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-obj-c_-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libstdc_6-devel-gcc12-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-ada-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libasan8-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgdruntime3-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libasan8-32bit:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cross-nvptx-gcc12:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgdruntime3-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgo21-32bit-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgfortran5-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-locale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libasan8:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libasan8-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cpp12:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-go:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:liblsan0:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-obj-c_-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgomp1-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libubsan1:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-objc:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libitm1-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-fortran:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:cpp12-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libatomic1:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-pie:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libstdc_6-locale:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libada12:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgfortran5:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-ada-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgo21-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libubsan1-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libobjc4-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-objc-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-obj-c:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libatomic1-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libada12-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libobjc4:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-go-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgo21:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libstdc_6-pp:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:liblsan0-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgomp1:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-c:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libitm1:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-testresults:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-c_-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libtsan2-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libtsan2:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-fortran-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-ada:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libstdc_6-devel-gcc12:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgcc_s1:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libstdc_6:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:gcc12-debugsource:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libgcc_s1-debuginfo:*:*:*:*:*:suse_linux:*:
• cpe:2.3:o:suse:libstdc_6-debuginfo:*:*:*:*:*:suse_linux:*:

External links

http://www.suse.com/support/update/announcement/2023/suse-su-20233661-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.