PT-2018-11203 · Suse · Suse Linux Smt+1

Jake Miller · Published 2018-09-27 · Updated 2019-10-09 · CVE-2018-12471

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions SUSE Linux SMT versions prior to 3.0.37

Description A vulnerability allows remote attackers to read data from the server or cause a denial of service by referencing blocking elements.

Recommendations For versions prior to 3.0.37, update to version 3.0.37 or later to resolve the issue.

Fix

DoS

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2018-12471

SUSE-SU-2018:2898-1

SUSE-SU-2018:2898-2

SUSE-SU-2018:2899-1

Affected Products

Suse Linux Smt

Suse

References · 23

• https://osv.dev/vulnerability/SUSE-SU-2018:2898-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2898-2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-12471 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2899-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12471 · Security Note
• https://bugzilla.suse.com/977043 · Note
• https://bugzilla.suse.com/1097824 · Note
• https://suse.com/support/update/announcement/2018/suse-su-20182898-1 · Note
• https://bugzilla.suse.com/show_bug.cgi?id=1103809 · Note
• https://bugzilla.suse.com/1037811 · Note
• https://bugzilla.suse.com/1103810 · Note
• https://suse.com/security/cve/CVE-2018-12471 · Note
• https://suse.com/support/update/announcement/2018/suse-su-20182898-2 · Note
• https://suse.com/security/cve/CVE-2018-12472 · Note
• https://bugzilla.suse.com/1006984 · Note