RHSA-2019:2029
Vulnerability from csaf_opensuse - Published: 2019-08-06 00:00 - Updated: 2026-09-20 11:03Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2019:2029.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2019:2029.
Patchnames: RHSA-2019:2029
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.4 (High)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
6.1 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
4.7 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
6.1 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
5.6 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2018-10853
Threats
Impact
low
References
94 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2019:2029.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2019:2029.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2019:2029",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2019_2029.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-10853 page",
"url": "https://www.suse.com/security/cve/CVE-2018-10853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13053 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13093 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13093/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13094 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13094/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13095 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14625 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14734 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14734/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-15594 page",
"url": "https://www.suse.com/security/cve/CVE-2018-15594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16658 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16885 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18281 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18281/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7755 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8087 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-9363 page",
"url": "https://www.suse.com/security/cve/CVE-2018-9363/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-9516 page",
"url": "https://www.suse.com/security/cve/CVE-2018-9516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-9517 page",
"url": "https://www.suse.com/security/cve/CVE-2018-9517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11599 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11810 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11833 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3459 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3460 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3882 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3900 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5489 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7222 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7222/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:03:52Z",
"generator": {
"date": "2019-08-06T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2019:2029",
"initial_release_date": "2019-08-06T00:00:00Z",
"revision_history": [
{
"date": "2019-08-06T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:03:52Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1062.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-1062.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-1062.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-1062.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1062.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "bpftool-0:3.10.0-1062.el7.x86_64",
"product_id": "bpftool-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1062.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-1062.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-1062.el7.x86_64",
"product_id": "kernel-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1062.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-1062.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1062.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1062.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1062.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1062.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-1062.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1062.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-1062.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "kernel-headers-0:3.10.0-1062.el7.x86_64",
"product_id": "kernel-headers-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1062.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-1062.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1062.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1062.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1062.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-1062.el7.x86_64",
"product_id": "perf-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1062.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-1062.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1062.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-1062.el7.x86_64",
"product_id": "python-perf-0:3.10.0-1062.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1062.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-1062.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-1062.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-1062.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "kernel-headers-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1062.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-1062.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-10853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-10853"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-10853",
"url": "https://www.suse.com/security/cve/CVE-2018-10853"
},
{
"category": "external",
"summary": "SUSE Bug 1097104 for CVE-2018-10853",
"url": "https://bugzilla.suse.com/1097104"
},
{
"category": "external",
"summary": "SUSE Bug 1097108 for CVE-2018-10853",
"url": "https://bugzilla.suse.com/1097108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-10853"
},
{
"cve": "CVE-2018-13053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13053"
}
],
"notes": [
{
"category": "general",
"text": "The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13053",
"url": "https://www.suse.com/security/cve/CVE-2018-13053"
},
{
"category": "external",
"summary": "SUSE Bug 1099924 for CVE-2018-13053",
"url": "https://bugzilla.suse.com/1099924"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2018-13053",
"url": "https://bugzilla.suse.com/1115893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-13053"
},
{
"cve": "CVE-2018-13093",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13093"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode-\u003ei_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13093",
"url": "https://www.suse.com/security/cve/CVE-2018-13093"
},
{
"category": "external",
"summary": "SUSE Bug 1100001 for CVE-2018-13093",
"url": "https://bugzilla.suse.com/1100001"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-13093"
},
{
"cve": "CVE-2018-13094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13094"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13094",
"url": "https://www.suse.com/security/cve/CVE-2018-13094"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-13094",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1100000 for CVE-2018-13094",
"url": "https://bugzilla.suse.com/1100000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-13094"
},
{
"cve": "CVE-2018-13095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13095"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13095",
"url": "https://www.suse.com/security/cve/CVE-2018-13095"
},
{
"category": "external",
"summary": "SUSE Bug 1099999 for CVE-2018-13095",
"url": "https://bugzilla.suse.com/1099999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-13095"
},
{
"cve": "CVE-2018-14625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14625"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14625",
"url": "https://www.suse.com/security/cve/CVE-2018-14625"
},
{
"category": "external",
"summary": "SUSE Bug 1106615 for CVE-2018-14625",
"url": "https://bugzilla.suse.com/1106615"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-14625"
},
{
"cve": "CVE-2018-14734",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14734"
}
],
"notes": [
{
"category": "general",
"text": "drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14734",
"url": "https://www.suse.com/security/cve/CVE-2018-14734"
},
{
"category": "external",
"summary": "SUSE Bug 1103119 for CVE-2018-14734",
"url": "https://bugzilla.suse.com/1103119"
},
{
"category": "external",
"summary": "SUSE Bug 1131390 for CVE-2018-14734",
"url": "https://bugzilla.suse.com/1131390"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-14734"
},
{
"cve": "CVE-2018-15594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-15594"
}
],
"notes": [
{
"category": "general",
"text": "arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-15594",
"url": "https://www.suse.com/security/cve/CVE-2018-15594"
},
{
"category": "external",
"summary": "SUSE Bug 1105348 for CVE-2018-15594",
"url": "https://bugzilla.suse.com/1105348"
},
{
"category": "external",
"summary": "SUSE Bug 1133319 for CVE-2018-15594",
"url": "https://bugzilla.suse.com/1133319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-15594"
},
{
"cve": "CVE-2018-16658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16658"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16658",
"url": "https://www.suse.com/security/cve/CVE-2018-16658"
},
{
"category": "external",
"summary": "SUSE Bug 1092903 for CVE-2018-16658",
"url": "https://bugzilla.suse.com/1092903"
},
{
"category": "external",
"summary": "SUSE Bug 1107689 for CVE-2018-16658",
"url": "https://bugzilla.suse.com/1107689"
},
{
"category": "external",
"summary": "SUSE Bug 1113751 for CVE-2018-16658",
"url": "https://bugzilla.suse.com/1113751"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-16658"
},
{
"cve": "CVE-2018-16885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16885"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory address. This issue only affects kernel version 3.10.x as shipped with Red Hat Enterprise Linux 7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16885",
"url": "https://www.suse.com/security/cve/CVE-2018-16885"
},
{
"category": "external",
"summary": "SUSE Bug 1120258 for CVE-2018-16885",
"url": "https://bugzilla.suse.com/1120258"
},
{
"category": "external",
"summary": "SUSE Bug 1265160 for CVE-2018-16885",
"url": "https://bugzilla.suse.com/1265160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-16885"
},
{
"cve": "CVE-2018-18281",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18281"
}
],
"notes": [
{
"category": "general",
"text": "Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18281",
"url": "https://www.suse.com/security/cve/CVE-2018-18281"
},
{
"category": "external",
"summary": "SUSE Bug 1113769 for CVE-2018-18281",
"url": "https://bugzilla.suse.com/1113769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18281"
},
{
"cve": "CVE-2018-7755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7755"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7755",
"url": "https://www.suse.com/security/cve/CVE-2018-7755"
},
{
"category": "external",
"summary": "SUSE Bug 1084513 for CVE-2018-7755",
"url": "https://bugzilla.suse.com/1084513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-7755"
},
{
"cve": "CVE-2018-8087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8087"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service (memory consumption) by triggering an out-of-array error case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8087",
"url": "https://www.suse.com/security/cve/CVE-2018-8087"
},
{
"category": "external",
"summary": "SUSE Bug 1085053 for CVE-2018-8087",
"url": "https://bugzilla.suse.com/1085053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-8087"
},
{
"cve": "CVE-2018-9363",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-9363"
}
],
"notes": [
{
"category": "general",
"text": "In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-9363",
"url": "https://www.suse.com/security/cve/CVE-2018-9363"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-9363",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1105292 for CVE-2018-9363",
"url": "https://bugzilla.suse.com/1105292"
},
{
"category": "external",
"summary": "SUSE Bug 1105293 for CVE-2018-9363",
"url": "https://bugzilla.suse.com/1105293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-9363"
},
{
"cve": "CVE-2018-9516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-9516"
}
],
"notes": [
{
"category": "general",
"text": "In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-71361580.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-9516",
"url": "https://www.suse.com/security/cve/CVE-2018-9516"
},
{
"category": "external",
"summary": "SUSE Bug 1108498 for CVE-2018-9516",
"url": "https://bugzilla.suse.com/1108498"
},
{
"category": "external",
"summary": "SUSE Bug 1123161 for CVE-2018-9516",
"url": "https://bugzilla.suse.com/1123161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-9516"
},
{
"cve": "CVE-2018-9517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-9517"
}
],
"notes": [
{
"category": "general",
"text": "In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-9517",
"url": "https://www.suse.com/security/cve/CVE-2018-9517"
},
{
"category": "external",
"summary": "SUSE Bug 1108488 for CVE-2018-9517",
"url": "https://bugzilla.suse.com/1108488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-9517"
},
{
"cve": "CVE-2019-11599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11599"
}
],
"notes": [
{
"category": "general",
"text": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11599",
"url": "https://www.suse.com/security/cve/CVE-2019-11599"
},
{
"category": "external",
"summary": "SUSE Bug 1131645 for CVE-2019-11599",
"url": "https://bugzilla.suse.com/1131645"
},
{
"category": "external",
"summary": "SUSE Bug 1133738 for CVE-2019-11599",
"url": "https://bugzilla.suse.com/1133738"
},
{
"category": "external",
"summary": "SUSE Bug 1157905 for CVE-2019-11599",
"url": "https://bugzilla.suse.com/1157905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11599"
},
{
"cve": "CVE-2019-11810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11810"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11810",
"url": "https://www.suse.com/security/cve/CVE-2019-11810"
},
{
"category": "external",
"summary": "SUSE Bug 1134399 for CVE-2019-11810",
"url": "https://bugzilla.suse.com/1134399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11810"
},
{
"cve": "CVE-2019-11833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11833"
}
],
"notes": [
{
"category": "general",
"text": "fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11833",
"url": "https://www.suse.com/security/cve/CVE-2019-11833"
},
{
"category": "external",
"summary": "SUSE Bug 1135281 for CVE-2019-11833",
"url": "https://bugzilla.suse.com/1135281"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11833"
},
{
"cve": "CVE-2019-3459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3459"
}
],
"notes": [
{
"category": "general",
"text": "A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3459",
"url": "https://www.suse.com/security/cve/CVE-2019-3459"
},
{
"category": "external",
"summary": "SUSE Bug 1120758 for CVE-2019-3459",
"url": "https://bugzilla.suse.com/1120758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3459"
},
{
"cve": "CVE-2019-3460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3460"
}
],
"notes": [
{
"category": "general",
"text": "A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3460",
"url": "https://www.suse.com/security/cve/CVE-2019-3460"
},
{
"category": "external",
"summary": "SUSE Bug 1120758 for CVE-2019-3460",
"url": "https://bugzilla.suse.com/1120758"
},
{
"category": "external",
"summary": "SUSE Bug 1155131 for CVE-2019-3460",
"url": "https://bugzilla.suse.com/1155131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3460"
},
{
"cve": "CVE-2019-3882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3882"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s vfio interface implementation that permits violation of the user\u0027s locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3882",
"url": "https://www.suse.com/security/cve/CVE-2019-3882"
},
{
"category": "external",
"summary": "SUSE Bug 1131416 for CVE-2019-3882",
"url": "https://bugzilla.suse.com/1131416"
},
{
"category": "external",
"summary": "SUSE Bug 1131427 for CVE-2019-3882",
"url": "https://bugzilla.suse.com/1131427"
},
{
"category": "external",
"summary": "SUSE Bug 1133319 for CVE-2019-3882",
"url": "https://bugzilla.suse.com/1133319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3882"
},
{
"cve": "CVE-2019-3900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3900"
}
],
"notes": [
{
"category": "general",
"text": "An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3900",
"url": "https://www.suse.com/security/cve/CVE-2019-3900"
},
{
"category": "external",
"summary": "SUSE Bug 1133374 for CVE-2019-3900",
"url": "https://bugzilla.suse.com/1133374"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-3900"
},
{
"cve": "CVE-2019-5489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5489"
}
],
"notes": [
{
"category": "general",
"text": "The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5489",
"url": "https://www.suse.com/security/cve/CVE-2019-5489"
},
{
"category": "external",
"summary": "SUSE Bug 1120843 for CVE-2019-5489",
"url": "https://bugzilla.suse.com/1120843"
},
{
"category": "external",
"summary": "SUSE Bug 1120885 for CVE-2019-5489",
"url": "https://bugzilla.suse.com/1120885"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5489"
},
{
"cve": "CVE-2019-7222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7222"
}
],
"notes": [
{
"category": "general",
"text": "The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7222",
"url": "https://www.suse.com/security/cve/CVE-2019-7222"
},
{
"category": "external",
"summary": "SUSE Bug 1124735 for CVE-2019-7222",
"url": "https://bugzilla.suse.com/1124735"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:bpftool-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1062.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-1062.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-1062.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-7222"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…