Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-5707 (GCVE-0-2015-5707)
Vulnerability from cvelistv5 – Published: 2015-10-19 10:00 – Updated: 2024-08-06 06:59
VLAI
EPSS
Summary
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
27 references
Date Public
2015-08-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T06:59:04.042Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "USN-2738-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2738-1"
},
{
"name": "SUSE-SU-2015:2089",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
},
{
"name": "USN-2733-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2733-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"name": "SUSE-SU-2015:2087",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
},
{
"name": "USN-2750-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2750-1"
},
{
"name": "USN-2737-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2737-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://source.android.com/security/bulletin/2017-07-01"
},
{
"name": "SUSE-SU-2015:1611",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html"
},
{
"name": "DSA-3329",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3329"
},
{
"name": "1033521",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033521"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "USN-2760-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2760-1"
},
{
"name": "SUSE-SU-2015:2091",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
},
{
"name": "SUSE-SU-2015:1478",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"name": "USN-2759-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2759-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "SUSE-SU-2015:2084",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
},
{
"name": "SUSE-SU-2015:2085",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
},
{
"name": "USN-2734-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2734-1"
},
{
"name": "[oss-security] 20150801 CVE request: Integer overflow in SCSI generic driver in Linux \u003c4.1",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2015/08/01/6"
},
{
"name": "SUSE-SU-2015:2086",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
},
{
"name": "SUSE-SU-2015:1592",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html"
},
{
"name": "SUSE-SU-2015:2090",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
},
{
"name": "76145",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/76145"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-08-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-16T09:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "USN-2738-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2738-1"
},
{
"name": "SUSE-SU-2015:2089",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
},
{
"name": "USN-2733-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2733-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"name": "SUSE-SU-2015:2087",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
},
{
"name": "USN-2750-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2750-1"
},
{
"name": "USN-2737-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2737-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://source.android.com/security/bulletin/2017-07-01"
},
{
"name": "SUSE-SU-2015:1611",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html"
},
{
"name": "DSA-3329",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3329"
},
{
"name": "1033521",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1033521"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "USN-2760-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2760-1"
},
{
"name": "SUSE-SU-2015:2091",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
},
{
"name": "SUSE-SU-2015:1478",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"name": "USN-2759-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2759-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "SUSE-SU-2015:2084",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
},
{
"name": "SUSE-SU-2015:2085",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
},
{
"name": "USN-2734-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2734-1"
},
{
"name": "[oss-security] 20150801 CVE request: Integer overflow in SCSI generic driver in Linux \u003c4.1",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2015/08/01/6"
},
{
"name": "SUSE-SU-2015:2086",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
},
{
"name": "SUSE-SU-2015:1592",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html"
},
{
"name": "SUSE-SU-2015:2090",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
},
{
"name": "76145",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/76145"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-5707",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "USN-2738-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2738-1"
},
{
"name": "SUSE-SU-2015:2089",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
},
{
"name": "USN-2733-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2733-1"
},
{
"name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee",
"refsource": "CONFIRM",
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"name": "SUSE-SU-2015:2087",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
},
{
"name": "USN-2750-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2750-1"
},
{
"name": "USN-2737-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2737-1"
},
{
"name": "https://source.android.com/security/bulletin/2017-07-01",
"refsource": "CONFIRM",
"url": "https://source.android.com/security/bulletin/2017-07-01"
},
{
"name": "SUSE-SU-2015:1611",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html"
},
{
"name": "DSA-3329",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3329"
},
{
"name": "1033521",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1033521"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030"
},
{
"name": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee",
"refsource": "CONFIRM",
"url": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81",
"refsource": "CONFIRM",
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "USN-2760-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2760-1"
},
{
"name": "SUSE-SU-2015:2091",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
},
{
"name": "SUSE-SU-2015:1478",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"name": "USN-2759-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2759-1"
},
{
"name": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81",
"refsource": "CONFIRM",
"url": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "SUSE-SU-2015:2084",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
},
{
"name": "SUSE-SU-2015:2085",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
},
{
"name": "USN-2734-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2734-1"
},
{
"name": "[oss-security] 20150801 CVE request: Integer overflow in SCSI generic driver in Linux \u003c4.1",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2015/08/01/6"
},
{
"name": "SUSE-SU-2015:2086",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
},
{
"name": "SUSE-SU-2015:1592",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html"
},
{
"name": "SUSE-SU-2015:2090",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
},
{
"name": "76145",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/76145"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2015-5707",
"datePublished": "2015-10-19T10:00:00.000Z",
"dateReserved": "2015-08-02T00:00:00.000Z",
"dateUpdated": "2024-08-06T06:59:04.042Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2015-5707",
"date": "2026-05-28",
"epss": "0.00091",
"percentile": "0.25587"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.6.0\", \"versionEndExcluding\": \"4.1.0\", \"matchCriteriaId\": \"4884A404-34BE-4D52-B749-219701AF2BC2\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B5A6F2F3-4894-4392-8296-3B8DD2679084\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F38D3B7E-8429-473F-BB31-FC3583EE5A5B\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16F59A04-14CF-49E2-9973-645477EA09DA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4BC592E-17CC-4DD4-8B2C-CFD99383649C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*\", \"matchCriteriaId\": \"C202F75B-221A-40BB-8A0D-451335B39937\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"DD4BBD63-E038-45CE-9537-D96831E99A06\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*\", \"matchCriteriaId\": \"0EA03350-8702-43D5-8605-5FB765A3F60B\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.\"}, {\"lang\": \"es\", \"value\": \"Desbordamiento de entero en la funci\\u00f3n sg_start_req en drivers/scsi/sg.c en el kernel de Linux 2.6.x hasta la versi\\u00f3n 4.x en versiones anteriores a 4.1 permite a usuarios locales provocar una denegaci\\u00f3n de servicio o posiblemente tener otro impacto no especificado a trav\\u00e9s de un valor iov_count grande en una petici\\u00f3n de escritura.\"}]",
"id": "CVE-2015-5707",
"lastModified": "2024-11-21T02:33:41.107",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 4.6, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 3.9, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2015-10-19T10:59:05.037",
"references": "[{\"url\": \"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3329\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2015/08/01/6\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/76145\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033521\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2733-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2734-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2737-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2738-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2750-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2759-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2760-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1250030\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://source.android.com/security/bulletin/2017-07-01\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3329\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2015/08/01/6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/76145\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033521\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2733-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2734-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2737-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2738-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2750-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2759-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2760-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1250030\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://source.android.com/security/bulletin/2017-07-01\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-190\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2015-5707\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2015-10-19T10:59:05.037\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de entero en la funci\u00f3n sg_start_req en drivers/scsi/sg.c en el kernel de Linux 2.6.x hasta la versi\u00f3n 4.x en versiones anteriores a 4.1 permite a usuarios locales provocar una denegaci\u00f3n de servicio o posiblemente tener otro impacto no especificado a trav\u00e9s de un valor iov_count grande en una petici\u00f3n de escritura.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":4.6,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.0\",\"versionEndExcluding\":\"4.1.0\",\"matchCriteriaId\":\"4884A404-34BE-4D52-B749-219701AF2BC2\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F38D3B7E-8429-473F-BB31-FC3583EE5A5B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4BC592E-17CC-4DD4-8B2C-CFD99383649C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*\",\"matchCriteriaId\":\"C202F75B-221A-40BB-8A0D-451335B39937\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD4BBD63-E038-45CE-9537-D96831E99A06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*\",\"matchCriteriaId\":\"0EA03350-8702-43D5-8605-5FB765A3F60B\"}]}]}],\"references\":[{\"url\":\"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3329\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2015/08/01/6\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/76145\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033521\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2733-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2734-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2737-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2738-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2750-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2759-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2760-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1250030\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://source.android.com/security/bulletin/2017-07-01\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3329\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2015/08/01/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/76145\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033521\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2733-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2734-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2737-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2738-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2750-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2759-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2760-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1250030\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://source.android.com/security/bulletin/2017-07-01\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
CERTFR-2015-AVI-417
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans le noyau Linux d'Ubuntu. Elles permettent à un attaquant de provoquer un déni de service et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Ubuntu 12.04 LTS
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eUbuntu 12.04 LTS\u003c/P\u003e",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2015-5707",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5707"
},
{
"name": "CVE-2015-6252",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-6252"
},
{
"name": "CVE-2015-6526",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-6526"
}
],
"links": [],
"reference": "CERTFR-2015-AVI-417",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2015-10-05T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux\nd\u0027\u003cspan class=\"textit\"\u003eUbuntu\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2759-1 du 01 octobre 2015",
"url": "http://www.ubuntu.com/usn/usn-2759-1/"
}
]
}
CERTFR-2016-AVI-073
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans le noyau Linux de Suse. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un déni de service.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| SUSE | SUSE Linux Enterprise Live Patching | SUSE Linux Enterprise Live Patching 12 | ||
| SUSE | SUSE Linux Enterprise Server | SUSE Linux Enterprise Server 12-SP1 | ||
| SUSE | SUSE Linux Enterprise Desktop | SUSE Linux Enterprise Desktop 12-SP1 | ||
| SUSE | N/A | SUSE Linux Enterprise Module for Public Cloud 12 | ||
| SUSE | N/A | SUSE Linux Enterprise Workstation Extension 12-SP1 | ||
| SUSE | N/A | SUSE Linux Enterprise Software Development Kit 12-SP1 |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SUSE Linux Enterprise Live Patching 12",
"product": {
"name": "SUSE Linux Enterprise Live Patching",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Server 12-SP1",
"product": {
"name": "SUSE Linux Enterprise Server",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Desktop 12-SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Module for Public Cloud 12",
"product": {
"name": "N/A",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Workstation Extension 12-SP1",
"product": {
"name": "N/A",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Software Development Kit 12-SP1",
"product": {
"name": "N/A",
"vendor": {
"name": "SUSE",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2015-8767",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8767"
},
{
"name": "CVE-2016-0723",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0723"
},
{
"name": "CVE-2015-8569",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8569"
},
{
"name": "CVE-2015-8660",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8660"
},
{
"name": "CVE-2015-8785",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8785"
},
{
"name": "CVE-2015-5707",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5707"
},
{
"name": "CVE-2015-8575",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8575"
},
{
"name": "CVE-2015-8550",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8550"
},
{
"name": "CVE-2015-8551",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8551"
},
{
"name": "CVE-2015-8539",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8539"
},
{
"name": "CVE-2015-7550",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7550"
},
{
"name": "CVE-2013-7446",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7446"
},
{
"name": "CVE-2015-7799",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7799"
},
{
"name": "CVE-2015-0272",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0272"
},
{
"name": "CVE-2015-8543",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8543"
},
{
"name": "CVE-2016-2069",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2069"
},
{
"name": "CVE-2015-8215",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8215"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 suse-su-20160585-1 Suse du 25 f\u00e9vrier 2016",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160585-1.html"
}
],
"reference": "CERTFR-2016-AVI-073",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-02-26T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ele noyau Linux de Suse\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un d\u00e9ni de service.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Suse",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Suse suse-su-20160585-1 du 25 f\u00e9vrier 2016",
"url": null
}
]
}
CERTFR-2016-AVI-103
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans le noyau Linux de Suse. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| SUSE | N/A | SUSE Linux Enterprise Workstation Extension 12 | ||
| SUSE | SUSE Linux Enterprise Live Patching | SUSE Linux Enterprise Live Patching 12 | ||
| SUSE | N/A | SUSE Linux Enterprise Module for Public Cloud 12 | ||
| SUSE | SUSE Linux Enterprise Desktop | SUSE Linux Enterprise Desktop 12 | ||
| SUSE | N/A | SUSE Linux Enterprise Software Development Kit 12 | ||
| SUSE | SUSE Linux Enterprise Server | SUSE Linux Enterprise Server 12 |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SUSE Linux Enterprise Workstation Extension 12",
"product": {
"name": "N/A",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Live Patching 12",
"product": {
"name": "SUSE Linux Enterprise Live Patching",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Module for Public Cloud 12",
"product": {
"name": "N/A",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Software Development Kit 12",
"product": {
"name": "N/A",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server",
"vendor": {
"name": "SUSE",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2015-8767",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8767"
},
{
"name": "CVE-2016-0723",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0723"
},
{
"name": "CVE-2015-8785",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8785"
},
{
"name": "CVE-2015-5707",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5707"
},
{
"name": "CVE-2016-0774",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0774"
},
{
"name": "CVE-2013-7446",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7446"
},
{
"name": "CVE-2015-8709",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8709"
},
{
"name": "CVE-2016-2384",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2384"
},
{
"name": "CVE-2016-2069",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2069"
},
{
"name": "CVE-2015-8812",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8812"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Suse SUSE-SU-2016:0785-1 du 16 mars 2016",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160785-1.html"
}
],
"reference": "CERTFR-2016-AVI-103",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-03-18T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ele noyau Linux de Suse\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire,\nun d\u00e9ni de service et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Suse",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Suse SUSE-SU-2016:0785-1 du 16 mars 2016",
"url": null
}
]
}
CERTFR-2017-AVI-203
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Google Android (Nexus). Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Google Android (Nexus) toutes versions n'intégrant pas le correctif de sécurité du 5 juillet 2017
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eGoogle Android (Nexus) toutes versions n\u0027int\u00e9grant pas le correctif de s\u00e9curit\u00e9 du 5 juillet 2017\u003c/P\u003e",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2015-9039",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9039"
},
{
"name": "CVE-2015-9040",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9040"
},
{
"name": "CVE-2015-9036",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9036"
},
{
"name": "CVE-2015-9055",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9055"
},
{
"name": "CVE-2017-8268",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8268"
},
{
"name": "CVE-2017-0685",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0685"
},
{
"name": "CVE-2017-0709",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0709"
},
{
"name": "CVE-2017-0694",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0694"
},
{
"name": "CVE-2017-0700",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0700"
},
{
"name": "CVE-2015-9044",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9044"
},
{
"name": "CVE-2015-9037",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9037"
},
{
"name": "CVE-2016-10346",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10346"
},
{
"name": "CVE-2017-8271",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8271"
},
{
"name": "CVE-2017-0673",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0673"
},
{
"name": "CVE-2017-0689",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0689"
},
{
"name": "CVE-2015-9072",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9072"
},
{
"name": "CVE-2017-0708",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0708"
},
{
"name": "CVE-2017-0682",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0682"
},
{
"name": "CVE-2017-7308",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7308"
},
{
"name": "CVE-2016-10344",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10344"
},
{
"name": "CVE-2015-9038",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9038"
},
{
"name": "CVE-2015-9067",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9067"
},
{
"name": "CVE-2017-0681",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0681"
},
{
"name": "CVE-2015-9068",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9068"
},
{
"name": "CVE-2015-9050",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9050"
},
{
"name": "CVE-2014-9411",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9411"
},
{
"name": "CVE-2015-9062",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9062"
},
{
"name": "CVE-2017-8246",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8246"
},
{
"name": "CVE-2015-9049",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9049"
},
{
"name": "CVE-2014-9978",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9978"
},
{
"name": "CVE-2017-8257",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8257"
},
{
"name": "CVE-2015-5707",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5707"
},
{
"name": "CVE-2017-0699",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0699"
},
{
"name": "CVE-2017-0690",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0690"
},
{
"name": "CVE-2017-8261",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8261"
},
{
"name": "CVE-2017-0698",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0698"
},
{
"name": "CVE-2017-0668",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0668"
},
{
"name": "CVE-2015-9048",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9048"
},
{
"name": "CVE-2017-0693",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0693"
},
{
"name": "CVE-2017-0680",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0680"
},
{
"name": "CVE-2017-0702",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0702"
},
{
"name": "CVE-2017-8255",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8255"
},
{
"name": "CVE-2017-0688",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0688"
},
{
"name": "CVE-2017-5970",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5970"
},
{
"name": "CVE-2017-8260",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8260"
},
{
"name": "CVE-2014-9975",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9975"
},
{
"name": "CVE-2017-0674",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0674"
},
{
"name": "CVE-2017-0704",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0704"
},
{
"name": "CVE-2015-9046",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9046"
},
{
"name": "CVE-2017-8256",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8256"
},
{
"name": "CVE-2015-9061",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9061"
},
{
"name": "CVE-2017-3544",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3544"
},
{
"name": "CVE-2016-10347",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10347"
},
{
"name": "CVE-2017-9417",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9417"
},
{
"name": "CVE-2017-0683",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0683"
},
{
"name": "CVE-2014-9979",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9979"
},
{
"name": "CVE-2017-8265",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8265"
},
{
"name": "CVE-2015-0575",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0575"
},
{
"name": "CVE-2015-9035",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9035"
},
{
"name": "CVE-2014-9974",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9974"
},
{
"name": "CVE-2016-5872",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5872"
},
{
"name": "CVE-2017-0667",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0667"
},
{
"name": "CVE-2016-5863",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5863"
},
{
"name": "CVE-2017-0675",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0675"
},
{
"name": "CVE-2015-9042",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9042"
},
{
"name": "CVE-2016-10391",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10391"
},
{
"name": "CVE-2017-0340",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0340"
},
{
"name": "CVE-2017-0710",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0710"
},
{
"name": "CVE-2017-8272",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8272"
},
{
"name": "CVE-2014-9968",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9968"
},
{
"name": "CVE-2015-9041",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9041"
},
{
"name": "CVE-2017-8263",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8263"
},
{
"name": "CVE-2017-0706",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0706"
},
{
"name": "CVE-2015-9070",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9070"
},
{
"name": "CVE-2015-9071",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9071"
},
{
"name": "CVE-2014-9973",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9973"
},
{
"name": "CVE-2017-6074",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6074"
},
{
"name": "CVE-2015-8596",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8596"
},
{
"name": "CVE-2014-9980",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9980"
},
{
"name": "CVE-2017-8270",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8270"
},
{
"name": "CVE-2017-8267",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8267"
},
{
"name": "CVE-2017-0676",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0676"
},
{
"name": "CVE-2017-0672",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0672"
},
{
"name": "CVE-2017-8243",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8243"
},
{
"name": "CVE-2017-8266",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8266"
},
{
"name": "CVE-2017-0679",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0679"
},
{
"name": "CVE-2017-0697",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0697"
},
{
"name": "CVE-2015-8595",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8595"
},
{
"name": "CVE-2017-0666",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0666"
},
{
"name": "CVE-2017-8273",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8273"
},
{
"name": "CVE-2017-0691",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0691"
},
{
"name": "CVE-2015-9051",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9051"
},
{
"name": "CVE-2016-10389",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10389"
},
{
"name": "CVE-2015-9054",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9054"
},
{
"name": "CVE-2017-0671",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0671"
},
{
"name": "CVE-2016-10383",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10383"
},
{
"name": "CVE-2017-8259",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8259"
},
{
"name": "CVE-2015-9043",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9043"
},
{
"name": "CVE-2017-0695",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0695"
},
{
"name": "CVE-2017-0696",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0696"
},
{
"name": "CVE-2017-0326",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0326"
},
{
"name": "CVE-2015-9045",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9045"
},
{
"name": "CVE-2017-8254",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8254"
},
{
"name": "CVE-2015-9060",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9060"
},
{
"name": "CVE-2017-0686",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0686"
},
{
"name": "CVE-2014-9731",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9731"
},
{
"name": "CVE-2015-9052",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9052"
},
{
"name": "CVE-2017-0711",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0711"
},
{
"name": "CVE-2016-10388",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10388"
},
{
"name": "CVE-2017-0669",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0669"
},
{
"name": "CVE-2017-0684",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0684"
},
{
"name": "CVE-2016-10343",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10343"
},
{
"name": "CVE-2017-0707",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0707"
},
{
"name": "CVE-2017-0701",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0701"
},
{
"name": "CVE-2017-0692",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0692"
},
{
"name": "CVE-2017-8253",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8253"
},
{
"name": "CVE-2017-0677",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0677"
},
{
"name": "CVE-2014-9977",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9977"
},
{
"name": "CVE-2017-0705",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0705"
},
{
"name": "CVE-2015-9047",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9047"
},
{
"name": "CVE-2015-9069",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9069"
},
{
"name": "CVE-2015-9053",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9053"
},
{
"name": "CVE-2016-2109",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2109"
},
{
"name": "CVE-2015-9073",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9073"
},
{
"name": "CVE-2017-8269",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8269"
},
{
"name": "CVE-2017-0540",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0540"
},
{
"name": "CVE-2017-8258",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8258"
},
{
"name": "CVE-2015-8592",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8592"
},
{
"name": "CVE-2017-0664",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0664"
},
{
"name": "CVE-2015-9034",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-9034"
},
{
"name": "CVE-2017-0665",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0665"
},
{
"name": "CVE-2016-10382",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10382"
},
{
"name": "CVE-2017-8264",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8264"
},
{
"name": "CVE-2017-8262",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8262"
},
{
"name": "CVE-2017-0670",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0670"
},
{
"name": "CVE-2016-5871",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5871"
},
{
"name": "CVE-2017-0678",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0678"
}
],
"links": [],
"reference": "CERTFR-2017-AVI-203",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2017-07-06T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eGoogle Android (Nexus)\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android (Nexus)",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Android du 05 juillet 2017",
"url": "https://source.android.com/security/bulletin/2017-07-01"
}
]
}
CNVD-2015-05393
Vulnerability from cnvd - Published: 2015-08-20
VLAI
Title
Linux kernel ‘/scsi/sg.c’整数溢出漏洞
Description
Linux kernel是美国Linux基金会发布的操作系统Linux所使用的内核。
Linux kernel中存在整数溢出漏洞，攻击者可利用该漏洞使受影响的内核崩溃，造成拒绝服务，或执行任意代码。
Severity
中
Patch Name
Linux kernel ‘/scsi/sg.c’整数溢出漏洞的补丁
Patch Description
Linux kernel是美国Linux基金会发布的操作系统Linux所使用的内核。
Linux kernel中存在整数溢出漏洞，攻击者可利用该漏洞使受影响的内核崩溃，造成拒绝服务，或执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee
Reference
http://www.securityfocus.com/bid/76145
Impacted products
| Name | Linux Kernel |
|---|
{
"bids": {
"bid": {
"bidNumber": "76145"
}
},
"cves": {
"cve": {
"cveNumber": "CVE-2015-5707"
}
},
"description": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u53d1\u5e03\u7684\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002 \r\n\r\nLinux kernel\u4e2d\u5b58\u5728\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u53d7\u5f71\u54cd\u7684\u5185\u6838\u5d29\u6e83\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff0c\u6216\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
"discovererName": "Ben Hutchings",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\nhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2015-05393",
"openTime": "2015-08-20",
"patchDescription": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u53d1\u5e03\u7684\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002 \r\n\r\nLinux kernel\u4e2d\u5b58\u5728\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u53d7\u5f71\u54cd\u7684\u5185\u6838\u5d29\u6e83\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff0c\u6216\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Linux kernel \u2018/scsi/sg.c\u2019\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "Linux Kernel"
},
"referenceLink": "http://www.securityfocus.com/bid/76145",
"serverity": "\u4e2d",
"submitTime": "2015-08-14",
"title": "Linux kernel \u2018/scsi/sg.c\u2019\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e"
}
FKIE_CVE-2015-5707
Vulnerability from fkie_nvd - Published: 2015-10-19 10:59 - Updated: 2026-05-06 22:30
Severity
Summary
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| linux | linux_kernel | * | |
| canonical | ubuntu_linux | 12.04 | |
| canonical | ubuntu_linux | 14.04 | |
| canonical | ubuntu_linux | 15.04 | |
| debian | debian_linux | 7.0 | |
| debian | debian_linux | 8.0 | |
| suse | suse_linux_enterprise_desktop | 11 | |
| suse | suse_linux_enterprise_server | 11 | |
| suse | suse_linux_enterprise_server | 11 | |
| suse | suse_linux_enterprise_server | 11 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4884A404-34BE-4D52-B749-219701AF2BC2",
"versionEndExcluding": "4.1.0",
"versionStartIncluding": "2.6.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
"matchCriteriaId": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:*:*:*",
"matchCriteriaId": "F4BC592E-17CC-4DD4-8B2C-CFD99383649C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*",
"matchCriteriaId": "C202F75B-221A-40BB-8A0D-451335B39937",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*",
"matchCriteriaId": "DD4BBD63-E038-45CE-9537-D96831E99A06",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*",
"matchCriteriaId": "0EA03350-8702-43D5-8605-5FB765A3F60B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request."
},
{
"lang": "es",
"value": "Desbordamiento de entero en la funci\u00f3n sg_start_req en drivers/scsi/sg.c en el kernel de Linux 2.6.x hasta la versi\u00f3n 4.x en versiones anteriores a 4.1 permite a usuarios locales provocar una denegaci\u00f3n de servicio o posiblemente tener otro impacto no especificado a trav\u00e9s de un valor iov_count grande en una petici\u00f3n de escritura."
}
],
"id": "CVE-2015-5707",
"lastModified": "2026-05-06T22:30:45.220",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2015-10-19T10:59:05.037",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2015/dsa-3329"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2015/08/01/6"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/76145"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1033521"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2733-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2734-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2737-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2738-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2750-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2759-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2760-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://source.android.com/security/bulletin/2017-07-01"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2015/dsa-3329"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2015/08/01/6"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/76145"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1033521"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2733-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2734-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2737-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2738-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2750-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2759-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2760-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://source.android.com/security/bulletin/2017-07-01"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-190"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-RFCP-M7V6-H4FF
Vulnerability from github – Published: 2022-05-13 01:26 – Updated: 2022-05-13 01:26
VLAI
Details
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
{
"affected": [],
"aliases": [
"CVE-2015-5707"
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2015-10-19T10:59:00Z",
"severity": "MODERATE"
},
"details": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.",
"id": "GHSA-rfcp-m7v6-h4ff",
"modified": "2022-05-13T01:26:11Z",
"published": "2022-05-13T01:26:11Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5707"
},
{
"type": "WEB",
"url": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"type": "WEB",
"url": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030"
},
{
"type": "WEB",
"url": "https://source.android.com/security/bulletin/2017-07-01"
},
{
"type": "WEB",
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"type": "WEB",
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2015/dsa-3329"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2015/08/01/6"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/76145"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1033521"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2733-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2734-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2737-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2738-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2750-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2759-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2760-1"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2015-5707
Vulnerability from gsd - Updated: 2023-12-13 01:20Details
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2015-5707",
"description": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.",
"id": "GSD-2015-5707",
"references": [
"https://www.suse.com/security/cve/CVE-2015-5707.html",
"https://www.debian.org/security/2015/dsa-3329",
"https://ubuntu.com/security/CVE-2015-5707",
"https://advisories.mageia.org/CVE-2015-5707.html",
"https://linux.oracle.com/cve/CVE-2015-5707.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2015-5707"
],
"details": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.",
"id": "GSD-2015-5707",
"modified": "2023-12-13T01:20:06.230960Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-5707",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "USN-2738-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2738-1"
},
{
"name": "SUSE-SU-2015:2089",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
},
{
"name": "USN-2733-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2733-1"
},
{
"name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee",
"refsource": "CONFIRM",
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"name": "SUSE-SU-2015:2087",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
},
{
"name": "USN-2750-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2750-1"
},
{
"name": "USN-2737-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2737-1"
},
{
"name": "https://source.android.com/security/bulletin/2017-07-01",
"refsource": "CONFIRM",
"url": "https://source.android.com/security/bulletin/2017-07-01"
},
{
"name": "SUSE-SU-2015:1611",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html"
},
{
"name": "DSA-3329",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3329"
},
{
"name": "1033521",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1033521"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030"
},
{
"name": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee",
"refsource": "CONFIRM",
"url": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81",
"refsource": "CONFIRM",
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "USN-2760-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2760-1"
},
{
"name": "SUSE-SU-2015:2091",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
},
{
"name": "SUSE-SU-2015:1478",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"name": "USN-2759-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2759-1"
},
{
"name": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81",
"refsource": "CONFIRM",
"url": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "SUSE-SU-2015:2084",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
},
{
"name": "SUSE-SU-2015:2085",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
},
{
"name": "USN-2734-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2734-1"
},
{
"name": "[oss-security] 20150801 CVE request: Integer overflow in SCSI generic driver in Linux \u003c4.1",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2015/08/01/6"
},
{
"name": "SUSE-SU-2015:2086",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
},
{
"name": "SUSE-SU-2015:1592",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html"
},
{
"name": "SUSE-SU-2015:2090",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
},
{
"name": "76145",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/76145"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.1.0",
"versionStartIncluding": "2.6.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-5707"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-190"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"name": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee"
},
{
"name": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "[oss-security] 20150801 CVE request: Integer overflow in SCSI generic driver in Linux \u003c4.1",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2015/08/01/6"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1250030"
},
{
"name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81"
},
{
"name": "76145",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/76145"
},
{
"name": "SUSE-SU-2015:2087",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
},
{
"name": "SUSE-SU-2015:2086",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
},
{
"name": "SUSE-SU-2015:2091",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
},
{
"name": "SUSE-SU-2015:2090",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
},
{
"name": "SUSE-SU-2015:2089",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
},
{
"name": "SUSE-SU-2015:2084",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
},
{
"name": "SUSE-SU-2015:2085",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
},
{
"name": "SUSE-SU-2015:1611",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html"
},
{
"name": "USN-2760-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2760-1"
},
{
"name": "USN-2759-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2759-1"
},
{
"name": "SUSE-SU-2015:1592",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html"
},
{
"name": "USN-2734-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2734-1"
},
{
"name": "USN-2737-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2737-1"
},
{
"name": "USN-2733-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2733-1"
},
{
"name": "USN-2738-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2738-1"
},
{
"name": "USN-2750-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2750-1"
},
{
"name": "DSA-3329",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2015/dsa-3329"
},
{
"name": "SUSE-SU-2015:1478",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"name": "https://source.android.com/security/bulletin/2017-07-01",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://source.android.com/security/bulletin/2017-07-01"
},
{
"name": "1033521",
"refsource": "SECTRACK",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1033521"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2020-06-02T14:57Z",
"publishedDate": "2015-10-19T10:59Z"
}
}
}
SUSE-SU-2015:1478-1
Vulnerability from csaf_suse - Published: 2015-08-20 15:22 - Updated: 2015-08-20 15:22Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise Server 11 SP2 LTSS kernel was updated to
receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2015-5707: An integer overflow in the SCSI generic driver could
be potentially used by local attackers to crash the kernel or execute
code.
- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did
not prevent the TS_COMPAT flag from reaching a user-mode task, which
might have allowed local users to bypass the seccomp or audit protection
mechanism via a crafted application that uses the (1) fork or (2) close
system call, as demonstrated by an attack against seccomp before 3.16
(bnc#926240).
- CVE-2015-0777: drivers/xen/usbback/usbback.c in the Linux kernel
allowed guest OS users to obtain sensitive information from uninitialized
locations in host OS kernel memory via unspecified vectors (bnc#917830).
- CVE-2015-2150: Xen and the Linux kernel did not properly restrict access
to PCI command registers, which might have allowed local guest users to
cause a denial of service (non-maskable interrupt and host crash) by
disabling the (1) memory or (2) I/O decoding for a PCI Express device
and then accessing the device, which triggers an Unsupported Request
(UR) response (bnc#919463).
- CVE-2015-5364: A remote denial of service (hang) via UDP flood with
incorrect package checksums was fixed. (bsc#936831).
- CVE-2015-5366: A remote denial of service (unexpected error returns)
via UDP flood with incorrect package checksums was fixed. (bsc#936831).
- CVE-2015-1420: CVE-2015-1420: Race condition in the handle_to_path
function in fs/fhandle.c in the Linux kernel allowed local users to bypass
intended size restrictions and trigger read operations on additional
memory locations by changing the handle_bytes value of a file handle
during the execution of this function (bnc#915517).
- CVE-2015-4700: A local user could have created a bad instruction in
the JIT processed BPF code, leading to a kernel crash (bnc#935705).
- CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in
fs/pipe.c in the Linux kernel did not properly consider the side effects
of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls,
which allowed local users to cause a denial of service (system crash)
or possibly gain privileges via a crafted application, aka an 'I/O vector
array overrun' (bnc#933429).
- CVE-2015-3331: The __driver_rfc4106_decrypt function in
arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly
determine the memory locations used for encrypted data, which allowed
context-dependent attackers to cause a denial of service (buffer overflow
and system crash) or possibly execute arbitrary code by triggering a
crypto API call, as demonstrated by use of a libkcapi test program with
an AF_ALG(aead) socket (bnc#927257).
- CVE-2015-2922: The ndisc_router_discovery function in net/ipv6/ndisc.c
in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack
in the Linux kernel allowed remote attackers to reconfigure a hop-limit
setting via a small hop_limit value in a Router Advertisement (RA)
message (bnc#922583).
- CVE-2015-2041: net/llc/sysctl_net_llc.c in the Linux kernel used an
incorrect data type in a sysctl table, which allowed local users to
obtain potentially sensitive information from kernel memory or possibly
have unspecified other impact by accessing a sysctl entry (bnc#919007).
- CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the
Linux kernel did not initialize a certain list data structure during an
unhash operation, which allowed local users to gain privileges or cause
a denial of service (use-after-free and system crash) by leveraging the
ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or
IPPROTO_ICMPV6 protocol, and then making a connect system call after a
disconnect (bnc#929525).
- CVE-2014-8086: Race condition in the ext4_file_write_iter function
in fs/ext4/file.c in the Linux kernel allowed local users to cause a
denial of service (file unavailability) via a combination of a write
action and an F_SETFL fcntl operation for the O_DIRECT flag (bnc#900881).
- CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel
did not properly restrict use of User Verbs for registration of memory
regions, which allowed local users to access arbitrary physical memory
locations, and consequently cause a denial of service (system crash)
or gain privileges, by leveraging permissions on a uverbs device under
/dev/infiniband/ (bnc#914742).
- CVE-2014-9683: Off-by-one error in the ecryptfs_decode_from_filename
function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux
kernel allowed local users to cause a denial of service (buffer overflow
and system crash) or possibly gain privileges via a crafted filename
(bnc#918333).
- CVE-2015-2042: net/rds/sysctl.c in the Linux kernel used an incorrect
data type in a sysctl table, which allowed local users to obtain
potentially sensitive information from kernel memory or possibly have
unspecified other impact by accessing a sysctl entry (bnc#919018).
- CVE-2015-1421: Use-after-free vulnerability in the sctp_assoc_update
function in net/sctp/associola.c in the Linux kernel allowed remote
attackers to cause a denial of service (slab corruption and panic) or
possibly have unspecified other impact by triggering an INIT collision
that leads to improper handling of shared-key data (bnc#915577).
The following non-security bugs were fixed:
- HID: add ALWAYS_POLL quirk for a Logitech 0xc007 (bnc#931474).
- HID: add HP OEM mouse to quirk ALWAYS_POLL (bnc#931474).
- HID: add quirk for PIXART OEM mouse used by HP (bnc#931474).
- HID: usbhid: add always-poll quirk (bnc#931474).
- HID: usbhid: add another mouse that needs QUIRK_ALWAYS_POLL (bnc#931474).
- HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#931474).
- HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#931474).
- HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#931474).
- HID: usbhid: enable always-poll quirk for Elan Touchscreen.
- HID: usbhid: fix PIXART optical mouse (bnc#931474).
- HID: usbhid: more mice with ALWAYS_POLL (bnc#931474).
- HID: usbhid: yet another mouse with ALWAYS_POLL (bnc#931474).
- bnx2x: Fix kdump when iommu=on (bug#921769).
- cifs: fix use-after-free bug in find_writable_file (bnc#909477).
- coredump: ensure the fpu state is flushed for proper multi-threaded core dump (bsc#904671, bsc#929360).
- dm: fixed that LVM merge snapshot of root logical volume were not working (bsc#928801)
- deal with deadlock in d_walk fix (bnc#929148, bnc#929283).
- e1000: do not enable dma receives until after dma address has been setup (bsc#821931).
- fsnotify: Fix handling of renames in audit (bnc#915200).
- inet: add a redirect generation id in inetpeer (bnc#860593).
- inetpeer: initialize ->redirect_genid in inet_getpeer() (bnc#860593).
- kabi: hide bnc#860593 changes of struct inetpeer_addr_base (bnc#860593).
- kernel: fix data corruption when reading /proc/sysinfo (bsc#891087, bsc#937986, LTC#114480).
- libata: prevent HSM state change race between ISR and PIO (bsc#923245).
- time, ntp: Do not update time_state in middle of leap second (bsc#912916).
- s390-3215-tty-close-crash.patch: kernel: 3215 tty close crash (bsc#916010, LTC#120873).
- s390-3215-tty-close-race.patch: kernel: 3215 console crash (bsc#916010, LTC#94302).
- s390-3215-tty-hang.patch: Renamed from patches.arch/s390-tty-hang.patch.
- s390-3215-tty-hang.patch: Update references (bnc#898693, bnc#897995, LTC#114562).
- s390-dasd-retry-partition-detection.patch: s390/dasd: retry partition detection (bsc#916010, LTC#94302).
- s390-dasd-retry-partition-detection.patch: Update references (bsc#916010, LTC#120565).
- s390-sclp-tty-refcount.patch: kernel: sclp console tty reference counting (bsc#916010, LTC#115466).
- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).
- scsi/sg: sg_start_req(): make sure that there is not too many elements in iovec (bsc#940338).
- x86, xsave: remove thread_has_fpu() bug check in __sanitize_i387_state() (bsc#904671, bsc#929360).
- x86-mm-send-tlb-flush-ipis-to-online-cpus-only.patch: x86, mm: Send tlb flush IPIs to online cpus only (bnc#798406).
- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).
- x86/reboot: Fix a warning message triggered by stop_other_cpus() (bnc#930284).
- xen: Correctly re-enable interrupts in xen_spin_wait() (bsc#879878, bsc#908870).
- xfs: prevent deadlock trying to cover an active log (bsc#917093).
Patchnames: slessp2-kernel-20150819-12065
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.7 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
133 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise Server 11 SP2 LTSS kernel was updated to\nreceive various security and bugfixes.\n\nThe following security bugs were fixed:\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n be potentially used by local attackers to crash the kernel or execute\n code.\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n not prevent the TS_COMPAT flag from reaching a user-mode task, which\n might have allowed local users to bypass the seccomp or audit protection\n mechanism via a crafted application that uses the (1) fork or (2) close\n system call, as demonstrated by an attack against seccomp before 3.16\n (bnc#926240).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c in the Linux kernel\n allowed guest OS users to obtain sensitive information from uninitialized\n locations in host OS kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2150: Xen and the Linux kernel did not properly restrict access\n to PCI command registers, which might have allowed local guest users to\n cause a denial of service (non-maskable interrupt and host crash) by\n disabling the (1) memory or (2) I/O decoding for a PCI Express device\n and then accessing the device, which triggers an Unsupported Request\n (UR) response (bnc#919463).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: CVE-2015-1420: Race condition in the handle_to_path\n function in fs/fhandle.c in the Linux kernel allowed local users to bypass\n intended size restrictions and trigger read operations on additional\n memory locations by changing the handle_bytes value of a file handle\n during the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in\n fs/pipe.c in the Linux kernel did not properly consider the side effects\n of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls,\n which allowed local users to cause a denial of service (system crash)\n or possibly gain privileges via a crafted application, aka an \u0027I/O vector\n array overrun\u0027 (bnc#933429).\n- CVE-2015-3331: The __driver_rfc4106_decrypt function in\n arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly\n determine the memory locations used for encrypted data, which allowed\n context-dependent attackers to cause a denial of service (buffer overflow\n and system crash) or possibly execute arbitrary code by triggering a\n crypto API call, as demonstrated by use of a libkcapi test program with\n an AF_ALG(aead) socket (bnc#927257).\n- CVE-2015-2922: The ndisc_router_discovery function in net/ipv6/ndisc.c\n in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack\n in the Linux kernel allowed remote attackers to reconfigure a hop-limit\n setting via a small hop_limit value in a Router Advertisement (RA)\n message (bnc#922583).\n- CVE-2015-2041: net/llc/sysctl_net_llc.c in the Linux kernel used an\n incorrect data type in a sysctl table, which allowed local users to\n obtain potentially sensitive information from kernel memory or possibly\n have unspecified other impact by accessing a sysctl entry (bnc#919007).\n- CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the\n Linux kernel did not initialize a certain list data structure during an\n unhash operation, which allowed local users to gain privileges or cause\n a denial of service (use-after-free and system crash) by leveraging the\n ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or\n IPPROTO_ICMPV6 protocol, and then making a connect system call after a\n disconnect (bnc#929525).\n- CVE-2014-8086: Race condition in the ext4_file_write_iter function\n in fs/ext4/file.c in the Linux kernel allowed local users to cause a\n denial of service (file unavailability) via a combination of a write\n action and an F_SETFL fcntl operation for the O_DIRECT flag (bnc#900881).\n- CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel\n did not properly restrict use of User Verbs for registration of memory\n regions, which allowed local users to access arbitrary physical memory\n locations, and consequently cause a denial of service (system crash)\n or gain privileges, by leveraging permissions on a uverbs device under\n /dev/infiniband/ (bnc#914742).\n- CVE-2014-9683: Off-by-one error in the ecryptfs_decode_from_filename\n function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux\n kernel allowed local users to cause a denial of service (buffer overflow\n and system crash) or possibly gain privileges via a crafted filename\n (bnc#918333).\n- CVE-2015-2042: net/rds/sysctl.c in the Linux kernel used an incorrect\n data type in a sysctl table, which allowed local users to obtain\n potentially sensitive information from kernel memory or possibly have\n unspecified other impact by accessing a sysctl entry (bnc#919018).\n- CVE-2015-1421: Use-after-free vulnerability in the sctp_assoc_update\n function in net/sctp/associola.c in the Linux kernel allowed remote\n attackers to cause a denial of service (slab corruption and panic) or\n possibly have unspecified other impact by triggering an INIT collision\n that leads to improper handling of shared-key data (bnc#915577).\n\nThe following non-security bugs were fixed:\n- HID: add ALWAYS_POLL quirk for a Logitech 0xc007 (bnc#931474).\n- HID: add HP OEM mouse to quirk ALWAYS_POLL (bnc#931474).\n- HID: add quirk for PIXART OEM mouse used by HP (bnc#931474).\n- HID: usbhid: add always-poll quirk (bnc#931474).\n- HID: usbhid: add another mouse that needs QUIRK_ALWAYS_POLL (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen.\n- HID: usbhid: fix PIXART optical mouse (bnc#931474).\n- HID: usbhid: more mice with ALWAYS_POLL (bnc#931474).\n- HID: usbhid: yet another mouse with ALWAYS_POLL (bnc#931474).\n- bnx2x: Fix kdump when iommu=on (bug#921769).\n- cifs: fix use-after-free bug in find_writable_file (bnc#909477).\n- coredump: ensure the fpu state is flushed for proper multi-threaded core dump (bsc#904671, bsc#929360).\n- dm: fixed that LVM merge snapshot of root logical volume were not working (bsc#928801)\n- deal with deadlock in d_walk fix (bnc#929148, bnc#929283).\n- e1000: do not enable dma receives until after dma address has been setup (bsc#821931).\n- fsnotify: Fix handling of renames in audit (bnc#915200).\n- inet: add a redirect generation id in inetpeer (bnc#860593).\n- inetpeer: initialize -\u0026gt;redirect_genid in inet_getpeer() (bnc#860593).\n- kabi: hide bnc#860593 changes of struct inetpeer_addr_base (bnc#860593).\n- kernel: fix data corruption when reading /proc/sysinfo (bsc#891087, bsc#937986, LTC#114480).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- time, ntp: Do not update time_state in middle of leap second (bsc#912916).\n- s390-3215-tty-close-crash.patch: kernel: 3215 tty close crash (bsc#916010, LTC#120873).\n- s390-3215-tty-close-race.patch: kernel: 3215 console crash (bsc#916010, LTC#94302).\n- s390-3215-tty-hang.patch: Renamed from patches.arch/s390-tty-hang.patch.\n- s390-3215-tty-hang.patch: Update references (bnc#898693, bnc#897995, LTC#114562).\n- s390-dasd-retry-partition-detection.patch: s390/dasd: retry partition detection (bsc#916010, LTC#94302).\n- s390-dasd-retry-partition-detection.patch: Update references (bsc#916010, LTC#120565).\n- s390-sclp-tty-refcount.patch: kernel: sclp console tty reference counting (bsc#916010, LTC#115466).\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- scsi/sg: sg_start_req(): make sure that there is not too many elements in iovec (bsc#940338).\n- x86, xsave: remove thread_has_fpu() bug check in __sanitize_i387_state() (bsc#904671, bsc#929360).\n- x86-mm-send-tlb-flush-ipis-to-online-cpus-only.patch: x86, mm: Send tlb flush IPIs to online cpus only (bnc#798406).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/reboot: Fix a warning message triggered by stop_other_cpus() (bnc#930284).\n- xen: Correctly re-enable interrupts in xen_spin_wait() (bsc#879878, bsc#908870).\n- xfs: prevent deadlock trying to cover an active log (bsc#917093).\n ",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp2-kernel-20150819-12065",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1478-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1478-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151478-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1478-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-September/001563.html"
},
{
"category": "self",
"summary": "SUSE Bug 798406",
"url": "https://bugzilla.suse.com/798406"
},
{
"category": "self",
"summary": "SUSE Bug 821931",
"url": "https://bugzilla.suse.com/821931"
},
{
"category": "self",
"summary": "SUSE Bug 860593",
"url": "https://bugzilla.suse.com/860593"
},
{
"category": "self",
"summary": "SUSE Bug 879878",
"url": "https://bugzilla.suse.com/879878"
},
{
"category": "self",
"summary": "SUSE Bug 891087",
"url": "https://bugzilla.suse.com/891087"
},
{
"category": "self",
"summary": "SUSE Bug 897995",
"url": "https://bugzilla.suse.com/897995"
},
{
"category": "self",
"summary": "SUSE Bug 898693",
"url": "https://bugzilla.suse.com/898693"
},
{
"category": "self",
"summary": "SUSE Bug 900881",
"url": "https://bugzilla.suse.com/900881"
},
{
"category": "self",
"summary": "SUSE Bug 904671",
"url": "https://bugzilla.suse.com/904671"
},
{
"category": "self",
"summary": "SUSE Bug 908870",
"url": "https://bugzilla.suse.com/908870"
},
{
"category": "self",
"summary": "SUSE Bug 909477",
"url": "https://bugzilla.suse.com/909477"
},
{
"category": "self",
"summary": "SUSE Bug 912916",
"url": "https://bugzilla.suse.com/912916"
},
{
"category": "self",
"summary": "SUSE Bug 914742",
"url": "https://bugzilla.suse.com/914742"
},
{
"category": "self",
"summary": "SUSE Bug 915200",
"url": "https://bugzilla.suse.com/915200"
},
{
"category": "self",
"summary": "SUSE Bug 915517",
"url": "https://bugzilla.suse.com/915517"
},
{
"category": "self",
"summary": "SUSE Bug 915577",
"url": "https://bugzilla.suse.com/915577"
},
{
"category": "self",
"summary": "SUSE Bug 916010",
"url": "https://bugzilla.suse.com/916010"
},
{
"category": "self",
"summary": "SUSE Bug 917093",
"url": "https://bugzilla.suse.com/917093"
},
{
"category": "self",
"summary": "SUSE Bug 917830",
"url": "https://bugzilla.suse.com/917830"
},
{
"category": "self",
"summary": "SUSE Bug 918333",
"url": "https://bugzilla.suse.com/918333"
},
{
"category": "self",
"summary": "SUSE Bug 919007",
"url": "https://bugzilla.suse.com/919007"
},
{
"category": "self",
"summary": "SUSE Bug 919018",
"url": "https://bugzilla.suse.com/919018"
},
{
"category": "self",
"summary": "SUSE Bug 919463",
"url": "https://bugzilla.suse.com/919463"
},
{
"category": "self",
"summary": "SUSE Bug 921769",
"url": "https://bugzilla.suse.com/921769"
},
{
"category": "self",
"summary": "SUSE Bug 922583",
"url": "https://bugzilla.suse.com/922583"
},
{
"category": "self",
"summary": "SUSE Bug 923245",
"url": "https://bugzilla.suse.com/923245"
},
{
"category": "self",
"summary": "SUSE Bug 926240",
"url": "https://bugzilla.suse.com/926240"
},
{
"category": "self",
"summary": "SUSE Bug 927257",
"url": "https://bugzilla.suse.com/927257"
},
{
"category": "self",
"summary": "SUSE Bug 928801",
"url": "https://bugzilla.suse.com/928801"
},
{
"category": "self",
"summary": "SUSE Bug 929148",
"url": "https://bugzilla.suse.com/929148"
},
{
"category": "self",
"summary": "SUSE Bug 929283",
"url": "https://bugzilla.suse.com/929283"
},
{
"category": "self",
"summary": "SUSE Bug 929360",
"url": "https://bugzilla.suse.com/929360"
},
{
"category": "self",
"summary": "SUSE Bug 929525",
"url": "https://bugzilla.suse.com/929525"
},
{
"category": "self",
"summary": "SUSE Bug 930284",
"url": "https://bugzilla.suse.com/930284"
},
{
"category": "self",
"summary": "SUSE Bug 930934",
"url": "https://bugzilla.suse.com/930934"
},
{
"category": "self",
"summary": "SUSE Bug 931474",
"url": "https://bugzilla.suse.com/931474"
},
{
"category": "self",
"summary": "SUSE Bug 933429",
"url": "https://bugzilla.suse.com/933429"
},
{
"category": "self",
"summary": "SUSE Bug 935705",
"url": "https://bugzilla.suse.com/935705"
},
{
"category": "self",
"summary": "SUSE Bug 936831",
"url": "https://bugzilla.suse.com/936831"
},
{
"category": "self",
"summary": "SUSE Bug 937032",
"url": "https://bugzilla.suse.com/937032"
},
{
"category": "self",
"summary": "SUSE Bug 937986",
"url": "https://bugzilla.suse.com/937986"
},
{
"category": "self",
"summary": "SUSE Bug 940338",
"url": "https://bugzilla.suse.com/940338"
},
{
"category": "self",
"summary": "SUSE Bug 940398",
"url": "https://bugzilla.suse.com/940398"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-8086 page",
"url": "https://www.suse.com/security/cve/CVE-2014-8086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-8159 page",
"url": "https://www.suse.com/security/cve/CVE-2014-8159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9683 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-0777 page",
"url": "https://www.suse.com/security/cve/CVE-2015-0777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1420 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1420/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1421 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1421/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1805 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-2041 page",
"url": "https://www.suse.com/security/cve/CVE-2015-2041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-2042 page",
"url": "https://www.suse.com/security/cve/CVE-2015-2042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-2150 page",
"url": "https://www.suse.com/security/cve/CVE-2015-2150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-2830 page",
"url": "https://www.suse.com/security/cve/CVE-2015-2830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-2922 page",
"url": "https://www.suse.com/security/cve/CVE-2015-2922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3331 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3331/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3636 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4700 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5364 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5364/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5366 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5366/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5707 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5707/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2015-08-20T15:22:44Z",
"generator": {
"date": "2015-08-20T15:22:44Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1478-1",
"initial_release_date": "2015-08-20T15:22:44Z",
"revision_history": [
{
"date": "2015-08-20T15:22:44Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-default-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-default-3.0.101-0.7.37.1.i586",
"product_id": "kernel-default-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-default-base-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-default-base-3.0.101-0.7.37.1.i586",
"product_id": "kernel-default-base-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-default-devel-3.0.101-0.7.37.1.i586",
"product_id": "kernel-default-devel-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-ec2-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-ec2-3.0.101-0.7.37.1.i586",
"product_id": "kernel-ec2-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-ec2-base-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-ec2-base-3.0.101-0.7.37.1.i586",
"product_id": "kernel-ec2-base-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"product_id": "kernel-ec2-devel-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-pae-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-pae-3.0.101-0.7.37.1.i586",
"product_id": "kernel-pae-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-pae-base-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-pae-base-3.0.101-0.7.37.1.i586",
"product_id": "kernel-pae-base-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-pae-devel-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-pae-devel-3.0.101-0.7.37.1.i586",
"product_id": "kernel-pae-devel-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-source-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-source-3.0.101-0.7.37.1.i586",
"product_id": "kernel-source-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-syms-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-syms-3.0.101-0.7.37.1.i586",
"product_id": "kernel-syms-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-trace-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-trace-3.0.101-0.7.37.1.i586",
"product_id": "kernel-trace-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-trace-base-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-trace-base-3.0.101-0.7.37.1.i586",
"product_id": "kernel-trace-base-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-trace-devel-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-trace-devel-3.0.101-0.7.37.1.i586",
"product_id": "kernel-trace-devel-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-xen-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-xen-3.0.101-0.7.37.1.i586",
"product_id": "kernel-xen-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-xen-base-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-xen-base-3.0.101-0.7.37.1.i586",
"product_id": "kernel-xen-base-3.0.101-0.7.37.1.i586"
}
},
{
"category": "product_version",
"name": "kernel-xen-devel-3.0.101-0.7.37.1.i586",
"product": {
"name": "kernel-xen-devel-3.0.101-0.7.37.1.i586",
"product_id": "kernel-xen-devel-3.0.101-0.7.37.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-default-3.0.101-0.7.37.1.s390x",
"product": {
"name": "kernel-default-3.0.101-0.7.37.1.s390x",
"product_id": "kernel-default-3.0.101-0.7.37.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-base-3.0.101-0.7.37.1.s390x",
"product": {
"name": "kernel-default-base-3.0.101-0.7.37.1.s390x",
"product_id": "kernel-default-base-3.0.101-0.7.37.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-3.0.101-0.7.37.1.s390x",
"product": {
"name": "kernel-default-devel-3.0.101-0.7.37.1.s390x",
"product_id": "kernel-default-devel-3.0.101-0.7.37.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-man-3.0.101-0.7.37.1.s390x",
"product": {
"name": "kernel-default-man-3.0.101-0.7.37.1.s390x",
"product_id": "kernel-default-man-3.0.101-0.7.37.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-source-3.0.101-0.7.37.1.s390x",
"product": {
"name": "kernel-source-3.0.101-0.7.37.1.s390x",
"product_id": "kernel-source-3.0.101-0.7.37.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-syms-3.0.101-0.7.37.1.s390x",
"product": {
"name": "kernel-syms-3.0.101-0.7.37.1.s390x",
"product_id": "kernel-syms-3.0.101-0.7.37.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-trace-3.0.101-0.7.37.1.s390x",
"product": {
"name": "kernel-trace-3.0.101-0.7.37.1.s390x",
"product_id": "kernel-trace-3.0.101-0.7.37.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-trace-base-3.0.101-0.7.37.1.s390x",
"product": {
"name": "kernel-trace-base-3.0.101-0.7.37.1.s390x",
"product_id": "kernel-trace-base-3.0.101-0.7.37.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"product": {
"name": "kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"product_id": "kernel-trace-devel-3.0.101-0.7.37.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-default-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-default-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-default-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-base-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-default-base-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-default-base-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-default-devel-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-ec2-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-ec2-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-ec2-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-ec2-base-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-ec2-devel-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-source-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-source-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-source-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-syms-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-syms-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-syms-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-trace-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-trace-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-trace-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-trace-base-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-trace-devel-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-xen-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-xen-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-xen-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-xen-base-3.0.101-0.7.37.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-xen-devel-3.0.101-0.7.37.1.x86_64",
"product": {
"name": "kernel-xen-devel-3.0.101-0.7.37.1.x86_64",
"product_id": "kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-default-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-3.0.101-0.7.37.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x"
},
"product_reference": "kernel-default-3.0.101-0.7.37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-default-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-default-base-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-3.0.101-0.7.37.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x"
},
"product_reference": "kernel-default-base-3.0.101-0.7.37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-default-base-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-default-devel-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-3.0.101-0.7.37.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x"
},
"product_reference": "kernel-default-devel-3.0.101-0.7.37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-man-3.0.101-0.7.37.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x"
},
"product_reference": "kernel-default-man-3.0.101-0.7.37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-ec2-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-ec2-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-ec2-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-ec2-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-ec2-base-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-ec2-base-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-ec2-base-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-ec2-devel-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-ec2-devel-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-pae-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-pae-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-pae-base-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-pae-base-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-pae-devel-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-pae-devel-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-source-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-3.0.101-0.7.37.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x"
},
"product_reference": "kernel-source-3.0.101-0.7.37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-source-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-syms-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-3.0.101-0.7.37.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x"
},
"product_reference": "kernel-syms-3.0.101-0.7.37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-syms-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-trace-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-3.0.101-0.7.37.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x"
},
"product_reference": "kernel-trace-3.0.101-0.7.37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-trace-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-base-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-trace-base-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-base-3.0.101-0.7.37.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x"
},
"product_reference": "kernel-trace-base-3.0.101-0.7.37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-base-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-devel-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-trace-devel-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-devel-3.0.101-0.7.37.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x"
},
"product_reference": "kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-devel-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-xen-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-xen-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-xen-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-xen-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-xen-base-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-xen-base-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-xen-base-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-xen-devel-3.0.101-0.7.37.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586"
},
"product_reference": "kernel-xen-devel-3.0.101-0.7.37.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-xen-devel-3.0.101-0.7.37.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
},
"product_reference": "kernel-xen-devel-3.0.101-0.7.37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-8086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-8086"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-8086",
"url": "https://www.suse.com/security/cve/CVE-2014-8086"
},
{
"category": "external",
"summary": "SUSE Bug 900881 for CVE-2014-8086",
"url": "https://bugzilla.suse.com/900881"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2014-8086"
},
{
"cve": "CVE-2014-8159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-8159"
}
],
"notes": [
{
"category": "general",
"text": "The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-8159",
"url": "https://www.suse.com/security/cve/CVE-2014-8159"
},
{
"category": "external",
"summary": "SUSE Bug 903967 for CVE-2014-8159",
"url": "https://bugzilla.suse.com/903967"
},
{
"category": "external",
"summary": "SUSE Bug 914742 for CVE-2014-8159",
"url": "https://bugzilla.suse.com/914742"
},
{
"category": "external",
"summary": "SUSE Bug 939241 for CVE-2014-8159",
"url": "https://bugzilla.suse.com/939241"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2014-8159"
},
{
"cve": "CVE-2014-9683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9683"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted filename.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9683",
"url": "https://www.suse.com/security/cve/CVE-2014-9683"
},
{
"category": "external",
"summary": "SUSE Bug 918333 for CVE-2014-9683",
"url": "https://bugzilla.suse.com/918333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "low"
}
],
"title": "CVE-2014-9683"
},
{
"cve": "CVE-2015-0777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-0777"
}
],
"notes": [
{
"category": "general",
"text": "drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-0777",
"url": "https://www.suse.com/security/cve/CVE-2015-0777"
},
{
"category": "external",
"summary": "SUSE Bug 917830 for CVE-2015-0777",
"url": "https://bugzilla.suse.com/917830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "low"
}
],
"title": "CVE-2015-0777"
},
{
"cve": "CVE-2015-1420",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1420"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1420",
"url": "https://www.suse.com/security/cve/CVE-2015-1420"
},
{
"category": "external",
"summary": "SUSE Bug 915517 for CVE-2015-1420",
"url": "https://bugzilla.suse.com/915517"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-1420"
},
{
"cve": "CVE-2015-1421",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1421"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1421",
"url": "https://www.suse.com/security/cve/CVE-2015-1421"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2015-1421",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 915577 for CVE-2015-1421",
"url": "https://bugzilla.suse.com/915577"
},
{
"category": "external",
"summary": "SUSE Bug 922004 for CVE-2015-1421",
"url": "https://bugzilla.suse.com/922004"
},
{
"category": "external",
"summary": "SUSE Bug 939261 for CVE-2015-1421",
"url": "https://bugzilla.suse.com/939261"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-1421"
},
{
"cve": "CVE-2015-1805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1805"
}
],
"notes": [
{
"category": "general",
"text": "The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an \"I/O vector array overrun.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1805",
"url": "https://www.suse.com/security/cve/CVE-2015-1805"
},
{
"category": "external",
"summary": "SUSE Bug 917839 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/917839"
},
{
"category": "external",
"summary": "SUSE Bug 933429 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/933429"
},
{
"category": "external",
"summary": "SUSE Bug 939270 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/939270"
},
{
"category": "external",
"summary": "SUSE Bug 964730 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/964730"
},
{
"category": "external",
"summary": "SUSE Bug 964732 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/964732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "important"
}
],
"title": "CVE-2015-1805"
},
{
"cve": "CVE-2015-2041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-2041"
}
],
"notes": [
{
"category": "general",
"text": "net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-2041",
"url": "https://www.suse.com/security/cve/CVE-2015-2041"
},
{
"category": "external",
"summary": "SUSE Bug 903967 for CVE-2015-2041",
"url": "https://bugzilla.suse.com/903967"
},
{
"category": "external",
"summary": "SUSE Bug 919007 for CVE-2015-2041",
"url": "https://bugzilla.suse.com/919007"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-2041"
},
{
"cve": "CVE-2015-2042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-2042"
}
],
"notes": [
{
"category": "general",
"text": "net/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-2042",
"url": "https://www.suse.com/security/cve/CVE-2015-2042"
},
{
"category": "external",
"summary": "SUSE Bug 903967 for CVE-2015-2042",
"url": "https://bugzilla.suse.com/903967"
},
{
"category": "external",
"summary": "SUSE Bug 919018 for CVE-2015-2042",
"url": "https://bugzilla.suse.com/919018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-2042"
},
{
"cve": "CVE-2015-2150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-2150"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-2150",
"url": "https://www.suse.com/security/cve/CVE-2015-2150"
},
{
"category": "external",
"summary": "SUSE Bug 800280 for CVE-2015-2150",
"url": "https://bugzilla.suse.com/800280"
},
{
"category": "external",
"summary": "SUSE Bug 903967 for CVE-2015-2150",
"url": "https://bugzilla.suse.com/903967"
},
{
"category": "external",
"summary": "SUSE Bug 919463 for CVE-2015-2150",
"url": "https://bugzilla.suse.com/919463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-2150"
},
{
"cve": "CVE-2015-2830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-2830"
}
],
"notes": [
{
"category": "general",
"text": "arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-2830",
"url": "https://www.suse.com/security/cve/CVE-2015-2830"
},
{
"category": "external",
"summary": "SUSE Bug 903967 for CVE-2015-2830",
"url": "https://bugzilla.suse.com/903967"
},
{
"category": "external",
"summary": "SUSE Bug 926240 for CVE-2015-2830",
"url": "https://bugzilla.suse.com/926240"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-2830"
},
{
"cve": "CVE-2015-2922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-2922"
}
],
"notes": [
{
"category": "general",
"text": "The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-2922",
"url": "https://www.suse.com/security/cve/CVE-2015-2922"
},
{
"category": "external",
"summary": "SUSE Bug 903967 for CVE-2015-2922",
"url": "https://bugzilla.suse.com/903967"
},
{
"category": "external",
"summary": "SUSE Bug 922583 for CVE-2015-2922",
"url": "https://bugzilla.suse.com/922583"
},
{
"category": "external",
"summary": "SUSE Bug 926223 for CVE-2015-2922",
"url": "https://bugzilla.suse.com/926223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-2922"
},
{
"cve": "CVE-2015-3331",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3331"
}
],
"notes": [
{
"category": "general",
"text": "The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3331",
"url": "https://www.suse.com/security/cve/CVE-2015-3331"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2015-3331",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 927257 for CVE-2015-3331",
"url": "https://bugzilla.suse.com/927257"
},
{
"category": "external",
"summary": "SUSE Bug 931231 for CVE-2015-3331",
"url": "https://bugzilla.suse.com/931231"
},
{
"category": "external",
"summary": "SUSE Bug 939262 for CVE-2015-3331",
"url": "https://bugzilla.suse.com/939262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "critical"
}
],
"title": "CVE-2015-3331"
},
{
"cve": "CVE-2015-3636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3636"
}
],
"notes": [
{
"category": "general",
"text": "The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3636",
"url": "https://www.suse.com/security/cve/CVE-2015-3636"
},
{
"category": "external",
"summary": "SUSE Bug 929525 for CVE-2015-3636",
"url": "https://bugzilla.suse.com/929525"
},
{
"category": "external",
"summary": "SUSE Bug 939277 for CVE-2015-3636",
"url": "https://bugzilla.suse.com/939277"
},
{
"category": "external",
"summary": "SUSE Bug 994624 for CVE-2015-3636",
"url": "https://bugzilla.suse.com/994624"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-3636"
},
{
"cve": "CVE-2015-4700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4700"
}
],
"notes": [
{
"category": "general",
"text": "The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service (system crash) by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4700",
"url": "https://www.suse.com/security/cve/CVE-2015-4700"
},
{
"category": "external",
"summary": "SUSE Bug 935705 for CVE-2015-4700",
"url": "https://bugzilla.suse.com/935705"
},
{
"category": "external",
"summary": "SUSE Bug 939273 for CVE-2015-4700",
"url": "https://bugzilla.suse.com/939273"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-4700"
},
{
"cve": "CVE-2015-5364",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5364"
}
],
"notes": [
{
"category": "general",
"text": "The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5364",
"url": "https://www.suse.com/security/cve/CVE-2015-5364"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 781018 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/781018"
},
{
"category": "external",
"summary": "SUSE Bug 936831 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/936831"
},
{
"category": "external",
"summary": "SUSE Bug 939276 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/939276"
},
{
"category": "external",
"summary": "SUSE Bug 945112 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/945112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-5364"
},
{
"cve": "CVE-2015-5366",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5366"
}
],
"notes": [
{
"category": "general",
"text": "The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5366",
"url": "https://www.suse.com/security/cve/CVE-2015-5366"
},
{
"category": "external",
"summary": "SUSE Bug 781018 for CVE-2015-5366",
"url": "https://bugzilla.suse.com/781018"
},
{
"category": "external",
"summary": "SUSE Bug 936831 for CVE-2015-5366",
"url": "https://bugzilla.suse.com/936831"
},
{
"category": "external",
"summary": "SUSE Bug 939276 for CVE-2015-5366",
"url": "https://bugzilla.suse.com/939276"
},
{
"category": "external",
"summary": "SUSE Bug 945112 for CVE-2015-5366",
"url": "https://bugzilla.suse.com/945112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-5366"
},
{
"cve": "CVE-2015-5707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5707"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5707",
"url": "https://www.suse.com/security/cve/CVE-2015-5707"
},
{
"category": "external",
"summary": "SUSE Bug 923755 for CVE-2015-5707",
"url": "https://bugzilla.suse.com/923755"
},
{
"category": "external",
"summary": "SUSE Bug 940338 for CVE-2015-5707",
"url": "https://bugzilla.suse.com/940338"
},
{
"category": "external",
"summary": "SUSE Bug 940342 for CVE-2015-5707",
"url": "https://bugzilla.suse.com/940342"
},
{
"category": "external",
"summary": "SUSE Bug 963994 for CVE-2015-5707",
"url": "https://bugzilla.suse.com/963994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-default-man-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-ec2-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-pae-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-source-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-syms-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-trace-devel-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-base-3.0.101-0.7.37.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kernel-xen-devel-3.0.101-0.7.37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-08-20T15:22:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-5707"
}
]
}
SUSE-SU-2015:1592-1
Vulnerability from csaf_suse - Published: 2015-09-09 17:05 - Updated: 2015-09-09 17:05Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise 11 SP3 Realtime kernel was updated to receive various security and bugfixes.
The following feature was added for RT:
- FATE#317131: The SocketCAN (Peak PCI) driver was added for CAN bus support.
Following security bugs were fixed:
- CVE-2015-5707: An integer overflow in the SCSI generic driver could
be potentially used by local attackers to crash the kernel or execute
code (bsc#940338).
- CVE-2015-5364: A remote denial of service (hang) via UDP flood with
incorrect package checksums was fixed. (bsc#936831).
- CVE-2015-5366: A remote denial of service (unexpected error returns)
via UDP flood with incorrect package checksums was fixed. (bsc#936831).
- CVE-2015-1420: A race condition in the handle_to_path function in
fs/fhandle.c in the Linux kernel allowed local users to bypass intended
size restrictions and trigger read operations on additional memory
locations by changing the handle_bytes value of a file handle during
the execution of this function (bnc#915517).
- CVE-2015-4700: A local user could have created a bad instruction in
the JIT processed BPF code, leading to a kernel crash (bnc#935705).
- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable
to a crash which could occur while fetching inode information from a
corrupted/malicious udf file system image. (bsc#933907).
- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various
issues in handling UDF filesystems in the Linux kernel allowed the
corruption of kernel memory and other issues. An attacker able to mount
a corrupted/malicious UDF file system image could cause the kernel to
crash. (bsc#933904 bsc#933896)
- CVE-2015-2150: The Linux kernel did not properly restrict access to
PCI command registers, which might have allowed local guest users to
cause a denial of service (non-maskable interrupt and host crash) by
disabling the (1) memory or (2) I/O decoding for a PCI Express device
and then accessing the device, which triggers an Unsupported Request
(UR) response (bsc#919463).
- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux
kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users
to obtain sensitive information from uninitialized locations in host OS
kernel memory via unspecified vectors (bnc#917830).
- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did
not prevent the TS_COMPAT flag from reaching a user-mode task, which
might have allowed local users to bypass the seccomp or audit protection
mechanism via a crafted application that uses the (1) fork or (2) close
system call, as demonstrated by an attack against seccomp before 3.16
(bnc#926240).
- CVE-2015-1805: The Linux kernels implementation of vectored pipe
read and write functionality did not take into account the I/O vectors
that were already processed when retrying after a failed atomic access
operation, potentially resulting in memory corruption due to an I/O vector
array overrun. A local, unprivileged user could use this flaw to crash
the system or, potentially, escalate their privileges on the system.
(bsc#933429).
Also the following non-security bugs were fixed:
- audit: keep inode pinned (bsc#851068).
- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).
- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).
- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).
- cifs: Fix missing crypto allocation (bnc#937402).
- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).
- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).
- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).
- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).
- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.
- ext3: Fix data corruption in inodes with journalled data (bsc#936637)
- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).
- fanotify: Fix deadlock with permission events (bsc#935053).
- fork: reset mm->pinned_vm (bnc#937855).
- hrtimer: prevent timer interrupt DoS (bnc#886785).
- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).
- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).
- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).
- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).
- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).
- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).
- ipr: Increase default adapter init stage change timeout (bsc#930761).
- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).
- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).
- kernel: add panic_on_warn. (bsc#934742)
- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).
- libata: prevent HSM state change race between ISR and PIO (bsc#923245).
- md: use kzalloc() when bitmap is disabled (bsc#939994).
- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).
- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).
- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).
- mm: restrict access to slab files under procfs and sysfs (bnc#936077).
- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).
- net: Fix 'ip rule delete table 256' (bsc#873385).
- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).
- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).
- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).
- nfsd: support disabling 64bit dir cookies (bnc#937503).
- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).
- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).
- pagecache limit: add tracepoints (bnc#924701).
- pagecache limit: Do not skip over small zones that easily (bnc#925881).
- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).
- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).
- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).
- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).
- pci: Disable Bus Master only on kexec reboot (bsc#920110).
- pci: disable Bus Master on PCI device shutdown (bsc#920110).
- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).
- pci: Don't try to disable Bus Master on disconnected PCI devices (bsc#920110).
- perf, nmi: Fix unknown NMI warning (bsc#929142).
- perf/x86/intel: Move NMI clearing to end of PMI handler (bsc#929142).
- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).
- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)
- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).
- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).
- scsi: set host msg status correctly (bnc#933936)
- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).
- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).
- udf: Remove repeated loads blocksize (bsc#933907).
- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).
- vmxnet3: Bump up driver version number (bsc#936423).
- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).
- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).
- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).
- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).
- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).
- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).
- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.
- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)
- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).
Patchnames: slertesp3-kernel-rt-201509-12099
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
128 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise 11 SP3 Realtime kernel was updated to receive various security and bugfixes.\n\nThe following feature was added for RT:\n- FATE#317131: The SocketCAN (Peak PCI) driver was added for CAN bus support.\n\nFollowing security bugs were fixed:\n\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n be potentially used by local attackers to crash the kernel or execute\n code (bsc#940338).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: A race condition in the handle_to_path function in\n fs/fhandle.c in the Linux kernel allowed local users to bypass intended\n size restrictions and trigger read operations on additional memory\n locations by changing the handle_bytes value of a file handle during\n the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable\n to a crash which could occur while fetching inode information from a\n corrupted/malicious udf file system image. (bsc#933907).\n- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various\n issues in handling UDF filesystems in the Linux kernel allowed the\n corruption of kernel memory and other issues. An attacker able to mount\n a corrupted/malicious UDF file system image could cause the kernel to\n crash. (bsc#933904 bsc#933896)\n- CVE-2015-2150: The Linux kernel did not properly restrict access to\n PCI command registers, which might have allowed local guest users to\n cause a denial of service (non-maskable interrupt and host crash) by\n disabling the (1) memory or (2) I/O decoding for a PCI Express device\n and then accessing the device, which triggers an Unsupported Request\n (UR) response (bsc#919463).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux\n kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users\n to obtain sensitive information from uninitialized locations in host OS\n kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n not prevent the TS_COMPAT flag from reaching a user-mode task, which\n might have allowed local users to bypass the seccomp or audit protection\n mechanism via a crafted application that uses the (1) fork or (2) close\n system call, as demonstrated by an attack against seccomp before 3.16\n (bnc#926240).\n- CVE-2015-1805: The Linux kernels implementation of vectored pipe\n read and write functionality did not take into account the I/O vectors\n that were already processed when retrying after a failed atomic access\n operation, potentially resulting in memory corruption due to an I/O vector\n array overrun. A local, unprivileged user could use this flaw to crash\n the system or, potentially, escalate their privileges on the system.\n (bsc#933429).\n\n\nAlso the following non-security bugs were fixed:\n- audit: keep inode pinned (bsc#851068).\n- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).\n- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637)\n- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipr: Increase default adapter init stage change timeout (bsc#930761).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn. (bsc#934742)\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: Fix \u0027ip rule delete table 256\u0027 (bsc#873385).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Disable Bus Master only on kexec reboot (bsc#920110).\n- pci: disable Bus Master on PCI device shutdown (bsc#920110).\n- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- pci: Don\u0027t try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler (bsc#929142).\n- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: set host msg status correctly (bnc#933936)\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86, tls: Interpret an all-zero struct user_desc as \u0027no segment\u0027 (bsc#920250).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slertesp3-kernel-rt-201509-12099",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1592-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1592-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151592-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1592-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-September/001596.html"
},
{
"category": "self",
"summary": "SUSE Bug 851068",
"url": "https://bugzilla.suse.com/851068"
},
{
"category": "self",
"summary": "SUSE Bug 867362",
"url": "https://bugzilla.suse.com/867362"
},
{
"category": "self",
"summary": "SUSE Bug 873385",
"url": "https://bugzilla.suse.com/873385"
},
{
"category": "self",
"summary": "SUSE Bug 883380",
"url": "https://bugzilla.suse.com/883380"
},
{
"category": "self",
"summary": "SUSE Bug 886785",
"url": "https://bugzilla.suse.com/886785"
},
{
"category": "self",
"summary": "SUSE Bug 894936",
"url": "https://bugzilla.suse.com/894936"
},
{
"category": "self",
"summary": "SUSE Bug 915517",
"url": "https://bugzilla.suse.com/915517"
},
{
"category": "self",
"summary": "SUSE Bug 917830",
"url": "https://bugzilla.suse.com/917830"
},
{
"category": "self",
"summary": "SUSE Bug 919463",
"url": "https://bugzilla.suse.com/919463"
},
{
"category": "self",
"summary": "SUSE Bug 920110",
"url": "https://bugzilla.suse.com/920110"
},
{
"category": "self",
"summary": "SUSE Bug 920250",
"url": "https://bugzilla.suse.com/920250"
},
{
"category": "self",
"summary": "SUSE Bug 920733",
"url": "https://bugzilla.suse.com/920733"
},
{
"category": "self",
"summary": "SUSE Bug 921430",
"url": "https://bugzilla.suse.com/921430"
},
{
"category": "self",
"summary": "SUSE Bug 923245",
"url": "https://bugzilla.suse.com/923245"
},
{
"category": "self",
"summary": "SUSE Bug 924701",
"url": "https://bugzilla.suse.com/924701"
},
{
"category": "self",
"summary": "SUSE Bug 925705",
"url": "https://bugzilla.suse.com/925705"
},
{
"category": "self",
"summary": "SUSE Bug 925881",
"url": "https://bugzilla.suse.com/925881"
},
{
"category": "self",
"summary": "SUSE Bug 925903",
"url": "https://bugzilla.suse.com/925903"
},
{
"category": "self",
"summary": "SUSE Bug 926240",
"url": "https://bugzilla.suse.com/926240"
},
{
"category": "self",
"summary": "SUSE Bug 926953",
"url": "https://bugzilla.suse.com/926953"
},
{
"category": "self",
"summary": "SUSE Bug 927355",
"url": "https://bugzilla.suse.com/927355"
},
{
"category": "self",
"summary": "SUSE Bug 927786",
"url": "https://bugzilla.suse.com/927786"
},
{
"category": "self",
"summary": "SUSE Bug 929142",
"url": "https://bugzilla.suse.com/929142"
},
{
"category": "self",
"summary": "SUSE Bug 929143",
"url": "https://bugzilla.suse.com/929143"
},
{
"category": "self",
"summary": "SUSE Bug 930092",
"url": "https://bugzilla.suse.com/930092"
},
{
"category": "self",
"summary": "SUSE Bug 930761",
"url": "https://bugzilla.suse.com/930761"
},
{
"category": "self",
"summary": "SUSE Bug 930934",
"url": "https://bugzilla.suse.com/930934"
},
{
"category": "self",
"summary": "SUSE Bug 931538",
"url": "https://bugzilla.suse.com/931538"
},
{
"category": "self",
"summary": "SUSE Bug 932348",
"url": "https://bugzilla.suse.com/932348"
},
{
"category": "self",
"summary": "SUSE Bug 932458",
"url": "https://bugzilla.suse.com/932458"
},
{
"category": "self",
"summary": "SUSE Bug 933429",
"url": "https://bugzilla.suse.com/933429"
},
{
"category": "self",
"summary": "SUSE Bug 933896",
"url": "https://bugzilla.suse.com/933896"
},
{
"category": "self",
"summary": "SUSE Bug 933904",
"url": "https://bugzilla.suse.com/933904"
},
{
"category": "self",
"summary": "SUSE Bug 933907",
"url": "https://bugzilla.suse.com/933907"
},
{
"category": "self",
"summary": "SUSE Bug 933936",
"url": "https://bugzilla.suse.com/933936"
},
{
"category": "self",
"summary": "SUSE Bug 934742",
"url": "https://bugzilla.suse.com/934742"
},
{
"category": "self",
"summary": "SUSE Bug 934944",
"url": "https://bugzilla.suse.com/934944"
},
{
"category": "self",
"summary": "SUSE Bug 935053",
"url": "https://bugzilla.suse.com/935053"
},
{
"category": "self",
"summary": "SUSE Bug 935572",
"url": "https://bugzilla.suse.com/935572"
},
{
"category": "self",
"summary": "SUSE Bug 935705",
"url": "https://bugzilla.suse.com/935705"
},
{
"category": "self",
"summary": "SUSE Bug 935866",
"url": "https://bugzilla.suse.com/935866"
},
{
"category": "self",
"summary": "SUSE Bug 935906",
"url": "https://bugzilla.suse.com/935906"
},
{
"category": "self",
"summary": "SUSE Bug 936077",
"url": "https://bugzilla.suse.com/936077"
},
{
"category": "self",
"summary": "SUSE Bug 936423",
"url": "https://bugzilla.suse.com/936423"
},
{
"category": "self",
"summary": "SUSE Bug 936637",
"url": "https://bugzilla.suse.com/936637"
},
{
"category": "self",
"summary": "SUSE Bug 936831",
"url": "https://bugzilla.suse.com/936831"
},
{
"category": "self",
"summary": "SUSE Bug 936875",
"url": "https://bugzilla.suse.com/936875"
},
{
"category": "self",
"summary": "SUSE Bug 936925",
"url": "https://bugzilla.suse.com/936925"
},
{
"category": "self",
"summary": "SUSE Bug 937032",
"url": "https://bugzilla.suse.com/937032"
},
{
"category": "self",
"summary": "SUSE Bug 937402",
"url": "https://bugzilla.suse.com/937402"
},
{
"category": "self",
"summary": "SUSE Bug 937444",
"url": "https://bugzilla.suse.com/937444"
},
{
"category": "self",
"summary": "SUSE Bug 937503",
"url": "https://bugzilla.suse.com/937503"
},
{
"category": "self",
"summary": "SUSE Bug 937641",
"url": "https://bugzilla.suse.com/937641"
},
{
"category": "self",
"summary": "SUSE Bug 937855",
"url": "https://bugzilla.suse.com/937855"
},
{
"category": "self",
"summary": "SUSE Bug 939910",
"url": "https://bugzilla.suse.com/939910"
},
{
"category": "self",
"summary": "SUSE Bug 939994",
"url": "https://bugzilla.suse.com/939994"
},
{
"category": "self",
"summary": "SUSE Bug 940338",
"url": "https://bugzilla.suse.com/940338"
},
{
"category": "self",
"summary": "SUSE Bug 940398",
"url": "https://bugzilla.suse.com/940398"
},
{
"category": "self",
"summary": "SUSE Bug 942350",
"url": "https://bugzilla.suse.com/942350"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9728 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9729 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9730 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9731 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9731/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-0777 page",
"url": "https://www.suse.com/security/cve/CVE-2015-0777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1420 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1420/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1805 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-2150 page",
"url": "https://www.suse.com/security/cve/CVE-2015-2150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-2830 page",
"url": "https://www.suse.com/security/cve/CVE-2015-2830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4167 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4167/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4700 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5364 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5364/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5366 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5366/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5707 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5707/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2015-09-09T17:05:11Z",
"generator": {
"date": "2015-09-09T17:05:11Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1592-1",
"initial_release_date": "2015-09-09T17:05:11Z",
"revision_history": [
{
"date": "2015-09-09T17:05:11Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"product": {
"name": "kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"product_id": "kernel-rt-3.0.101.rt130-0.33.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"product": {
"name": "kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"product_id": "kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"product": {
"name": "kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"product_id": "kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"product": {
"name": "kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"product_id": "kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"product": {
"name": "kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"product_id": "kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"product": {
"name": "kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"product_id": "kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"product": {
"name": "kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"product_id": "kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64",
"product": {
"name": "kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64",
"product_id": "kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Real Time 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Real Time 11 SP3",
"product_id": "SUSE Linux Enterprise Real Time 11 SP3"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-3.0.101.rt130-0.33.40.1.x86_64 as component of SUSE Linux Enterprise Real Time 11 SP3",
"product_id": "SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64"
},
"product_reference": "kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64 as component of SUSE Linux Enterprise Real Time 11 SP3",
"product_id": "SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64"
},
"product_reference": "kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64 as component of SUSE Linux Enterprise Real Time 11 SP3",
"product_id": "SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64"
},
"product_reference": "kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64 as component of SUSE Linux Enterprise Real Time 11 SP3",
"product_id": "SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64"
},
"product_reference": "kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64 as component of SUSE Linux Enterprise Real Time 11 SP3",
"product_id": "SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64"
},
"product_reference": "kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64 as component of SUSE Linux Enterprise Real Time 11 SP3",
"product_id": "SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64"
},
"product_reference": "kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64 as component of SUSE Linux Enterprise Real Time 11 SP3",
"product_id": "SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64"
},
"product_reference": "kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64 as component of SUSE Linux Enterprise Real Time 11 SP3",
"product_id": "SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
},
"product_reference": "kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 11 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-9728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9728"
}
],
"notes": [
{
"category": "general",
"text": "The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service (buffer over-read and system crash) via a crafted filesystem image, related to fs/udf/inode.c and fs/udf/symlink.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9728",
"url": "https://www.suse.com/security/cve/CVE-2014-9728"
},
{
"category": "external",
"summary": "SUSE Bug 911325 for CVE-2014-9728",
"url": "https://bugzilla.suse.com/911325"
},
{
"category": "external",
"summary": "SUSE Bug 933904 for CVE-2014-9728",
"url": "https://bugzilla.suse.com/933904"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "low"
}
],
"title": "CVE-2014-9728"
},
{
"cve": "CVE-2014-9729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9729"
}
],
"notes": [
{
"category": "general",
"text": "The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.18.2 does not ensure a certain data-structure size consistency, which allows local users to cause a denial of service (system crash) via a crafted UDF filesystem image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9729",
"url": "https://www.suse.com/security/cve/CVE-2014-9729"
},
{
"category": "external",
"summary": "SUSE Bug 911325 for CVE-2014-9729",
"url": "https://bugzilla.suse.com/911325"
},
{
"category": "external",
"summary": "SUSE Bug 933904 for CVE-2014-9729",
"url": "https://bugzilla.suse.com/933904"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "low"
}
],
"title": "CVE-2014-9729"
},
{
"cve": "CVE-2014-9730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9730"
}
],
"notes": [
{
"category": "general",
"text": "The udf_pc_to_char function in fs/udf/symlink.c in the Linux kernel before 3.18.2 relies on component lengths that are unused, which allows local users to cause a denial of service (system crash) via a crafted UDF filesystem image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9730",
"url": "https://www.suse.com/security/cve/CVE-2014-9730"
},
{
"category": "external",
"summary": "SUSE Bug 911325 for CVE-2014-9730",
"url": "https://bugzilla.suse.com/911325"
},
{
"category": "external",
"summary": "SUSE Bug 933904 for CVE-2014-9730",
"url": "https://bugzilla.suse.com/933904"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "low"
}
],
"title": "CVE-2014-9730"
},
{
"cve": "CVE-2014-9731",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9731"
}
],
"notes": [
{
"category": "general",
"text": "The UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is available for storing a symlink target\u0027s name along with a trailing \\0 character, which allows local users to obtain sensitive information via a crafted filesystem image, related to fs/udf/symlink.c and fs/udf/unicode.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9731",
"url": "https://www.suse.com/security/cve/CVE-2014-9731"
},
{
"category": "external",
"summary": "SUSE Bug 911325 for CVE-2014-9731",
"url": "https://bugzilla.suse.com/911325"
},
{
"category": "external",
"summary": "SUSE Bug 933896 for CVE-2014-9731",
"url": "https://bugzilla.suse.com/933896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "moderate"
}
],
"title": "CVE-2014-9731"
},
{
"cve": "CVE-2015-0777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-0777"
}
],
"notes": [
{
"category": "general",
"text": "drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-0777",
"url": "https://www.suse.com/security/cve/CVE-2015-0777"
},
{
"category": "external",
"summary": "SUSE Bug 917830 for CVE-2015-0777",
"url": "https://bugzilla.suse.com/917830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "low"
}
],
"title": "CVE-2015-0777"
},
{
"cve": "CVE-2015-1420",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1420"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1420",
"url": "https://www.suse.com/security/cve/CVE-2015-1420"
},
{
"category": "external",
"summary": "SUSE Bug 915517 for CVE-2015-1420",
"url": "https://bugzilla.suse.com/915517"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "moderate"
}
],
"title": "CVE-2015-1420"
},
{
"cve": "CVE-2015-1805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1805"
}
],
"notes": [
{
"category": "general",
"text": "The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an \"I/O vector array overrun.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1805",
"url": "https://www.suse.com/security/cve/CVE-2015-1805"
},
{
"category": "external",
"summary": "SUSE Bug 917839 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/917839"
},
{
"category": "external",
"summary": "SUSE Bug 933429 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/933429"
},
{
"category": "external",
"summary": "SUSE Bug 939270 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/939270"
},
{
"category": "external",
"summary": "SUSE Bug 964730 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/964730"
},
{
"category": "external",
"summary": "SUSE Bug 964732 for CVE-2015-1805",
"url": "https://bugzilla.suse.com/964732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "important"
}
],
"title": "CVE-2015-1805"
},
{
"cve": "CVE-2015-2150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-2150"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-2150",
"url": "https://www.suse.com/security/cve/CVE-2015-2150"
},
{
"category": "external",
"summary": "SUSE Bug 800280 for CVE-2015-2150",
"url": "https://bugzilla.suse.com/800280"
},
{
"category": "external",
"summary": "SUSE Bug 903967 for CVE-2015-2150",
"url": "https://bugzilla.suse.com/903967"
},
{
"category": "external",
"summary": "SUSE Bug 919463 for CVE-2015-2150",
"url": "https://bugzilla.suse.com/919463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "moderate"
}
],
"title": "CVE-2015-2150"
},
{
"cve": "CVE-2015-2830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-2830"
}
],
"notes": [
{
"category": "general",
"text": "arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-2830",
"url": "https://www.suse.com/security/cve/CVE-2015-2830"
},
{
"category": "external",
"summary": "SUSE Bug 903967 for CVE-2015-2830",
"url": "https://bugzilla.suse.com/903967"
},
{
"category": "external",
"summary": "SUSE Bug 926240 for CVE-2015-2830",
"url": "https://bugzilla.suse.com/926240"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "moderate"
}
],
"title": "CVE-2015-2830"
},
{
"cve": "CVE-2015-4167",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4167"
}
],
"notes": [
{
"category": "general",
"text": "The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data representation or integer overflow, and OOPS) via a crafted UDF filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4167",
"url": "https://www.suse.com/security/cve/CVE-2015-4167"
},
{
"category": "external",
"summary": "SUSE Bug 917839 for CVE-2015-4167",
"url": "https://bugzilla.suse.com/917839"
},
{
"category": "external",
"summary": "SUSE Bug 933907 for CVE-2015-4167",
"url": "https://bugzilla.suse.com/933907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "moderate"
}
],
"title": "CVE-2015-4167"
},
{
"cve": "CVE-2015-4700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4700"
}
],
"notes": [
{
"category": "general",
"text": "The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service (system crash) by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4700",
"url": "https://www.suse.com/security/cve/CVE-2015-4700"
},
{
"category": "external",
"summary": "SUSE Bug 935705 for CVE-2015-4700",
"url": "https://bugzilla.suse.com/935705"
},
{
"category": "external",
"summary": "SUSE Bug 939273 for CVE-2015-4700",
"url": "https://bugzilla.suse.com/939273"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "moderate"
}
],
"title": "CVE-2015-4700"
},
{
"cve": "CVE-2015-5364",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5364"
}
],
"notes": [
{
"category": "general",
"text": "The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5364",
"url": "https://www.suse.com/security/cve/CVE-2015-5364"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 781018 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/781018"
},
{
"category": "external",
"summary": "SUSE Bug 936831 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/936831"
},
{
"category": "external",
"summary": "SUSE Bug 939276 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/939276"
},
{
"category": "external",
"summary": "SUSE Bug 945112 for CVE-2015-5364",
"url": "https://bugzilla.suse.com/945112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "moderate"
}
],
"title": "CVE-2015-5364"
},
{
"cve": "CVE-2015-5366",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5366"
}
],
"notes": [
{
"category": "general",
"text": "The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5366",
"url": "https://www.suse.com/security/cve/CVE-2015-5366"
},
{
"category": "external",
"summary": "SUSE Bug 781018 for CVE-2015-5366",
"url": "https://bugzilla.suse.com/781018"
},
{
"category": "external",
"summary": "SUSE Bug 936831 for CVE-2015-5366",
"url": "https://bugzilla.suse.com/936831"
},
{
"category": "external",
"summary": "SUSE Bug 939276 for CVE-2015-5366",
"url": "https://bugzilla.suse.com/939276"
},
{
"category": "external",
"summary": "SUSE Bug 945112 for CVE-2015-5366",
"url": "https://bugzilla.suse.com/945112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "moderate"
}
],
"title": "CVE-2015-5366"
},
{
"cve": "CVE-2015-5707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5707"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5707",
"url": "https://www.suse.com/security/cve/CVE-2015-5707"
},
{
"category": "external",
"summary": "SUSE Bug 923755 for CVE-2015-5707",
"url": "https://bugzilla.suse.com/923755"
},
{
"category": "external",
"summary": "SUSE Bug 940338 for CVE-2015-5707",
"url": "https://bugzilla.suse.com/940338"
},
{
"category": "external",
"summary": "SUSE Bug 940342 for CVE-2015-5707",
"url": "https://bugzilla.suse.com/940342"
},
{
"category": "external",
"summary": "SUSE Bug 963994 for CVE-2015-5707",
"url": "https://bugzilla.suse.com/963994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-base-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-source-rt-3.0.101.rt130-0.33.40.1.x86_64",
"SUSE Linux Enterprise Real Time 11 SP3:kernel-syms-rt-3.0.101.rt130-0.33.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T17:05:11Z",
"details": "moderate"
}
],
"title": "CVE-2015-5707"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…