PT-2018-11203 · Suse · Suse Linux Smt+1

Jake Miller · Publicado 2018-09-27 · Atualizado 2019-10-09 · CVE-2018-12471

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions SUSE Linux SMT versions prior to 3.0.37

Description A vulnerability allows remote attackers to read data from the server or cause a denial of service by referencing blocking elements.

Recommendations For versions prior to 3.0.37, update to version 3.0.37 or later to resolve the issue.

Correção

DoS

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-12471

SUSE-SU-2018:2898-1

SUSE-SU-2018:2898-2

SUSE-SU-2018:2899-1

Produtos afetados

Suse Linux Smt

Suse

Referências · 23

• https://bugzilla.suse.com/977043 · Nota
• https://bugzilla.suse.com/1097824 · Nota
• https://suse.com/support/update/announcement/2018/suse-su-20182898-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:2898-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2018:2898-2 · Aviso do Fabricante
• https://bugzilla.suse.com/show_bug.cgi?id=1103809 · Nota
• https://osv.dev/vulnerability/CVE-2018-12471 · Aviso do Fabricante
• https://bugzilla.suse.com/1037811 · Nota
• https://bugzilla.suse.com/1103810 · Nota
• https://suse.com/security/cve/CVE-2018-12471 · Nota
• https://suse.com/support/update/announcement/2018/suse-su-20182898-2 · Nota
• https://suse.com/security/cve/CVE-2018-12472 · Nota
• https://bugzilla.suse.com/1006984 · Nota
• https://bugzilla.suse.com/1104076 · Nota
• https://suse.com/security/cve/CVE-2018-12470 · Nota