SUSE-SU-2026:1361-1 - Vulnerability-Lookup

SUSE-SU-2026:1361-1

Vulnerability from csaf_suse - Published: 2026-04-15 14:14 - Updated: 2026-04-15 14:14

Summary

Security update for himmelblau

Severity

Important

Notes

Title of the patch: Security update for himmelblau

Description of the patch: This update for himmelblau fixes the following issues: Update to version 2.3.9+git0.a9fd29b; (jsc#PED-14511): - CVE-2026-34397: Fix LPE due to name collision during NSS fake-primary group lookup (bsc#1261324). - CVE-2026-31979: Fix race condition when accessiung /tmp/krb5cc_uid (bsc#1259548). - CVE-2026-25727: deps(rust): Bump the `all-cargo-updates` group with 8 updates (bsc#1257904). - CVE-2025-58160: deps(rust): Bump `tracing-subscriber` in the cargo group (bsc#1249013). - CVE-2025-54882: Fix Kerberos credential cache permissions (bsc#1247735). - CVE-2025-53013: Fix permitted authentication with invalid Hello PIN (bsc#1245437). - CVE-2024-11738: Fix `rustls` network-reachable panic in `Acceptor::accept` (bsc#1233949). Other bug fixes: - Fix SELinux module packaging to use standard policy macros (bsc#1258236).

Patchnames: SUSE-2026-1361,SUSE-SLE-Module-Basesystem-15-SP7-2026-1361

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2024-11738

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2025-53013

5.2 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2025-54882

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2025-58160

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-25727

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-31979

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-34397

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-updates/2026…	self
	https://bugzilla.suse.com/1233949	self
	https://bugzilla.suse.com/1245437	self
	https://bugzilla.suse.com/1247735	self
	https://bugzilla.suse.com/1249013	self
	https://bugzilla.suse.com/1257904	self
	https://bugzilla.suse.com/1258236	self
	https://bugzilla.suse.com/1259548	self
	https://bugzilla.suse.com/1261324	self
	https://www.suse.com/security/cve/CVE-2024-11738/	self
	https://www.suse.com/security/cve/CVE-2025-53013/	self
	https://www.suse.com/security/cve/CVE-2025-54882/	self
	https://www.suse.com/security/cve/CVE-2025-58160/	self
	https://www.suse.com/security/cve/CVE-2026-25727/	self
	https://www.suse.com/security/cve/CVE-2026-31979/	self
	https://www.suse.com/security/cve/CVE-2026-34397/	self
	https://www.suse.com/security/cve/CVE-2024-11738	external
	https://bugzilla.suse.com/1233897	external
	https://www.suse.com/security/cve/CVE-2025-53013	external
	https://bugzilla.suse.com/1245437	external
	https://www.suse.com/security/cve/CVE-2025-54882	external
	https://bugzilla.suse.com/1247735	external
	https://www.suse.com/security/cve/CVE-2025-58160	external
	https://bugzilla.suse.com/1249007	external
	https://www.suse.com/security/cve/CVE-2026-25727	external
	https://bugzilla.suse.com/1257901	external
	https://www.suse.com/security/cve/CVE-2026-31979	external
	https://bugzilla.suse.com/1259548	external
	https://www.suse.com/security/cve/CVE-2026-34397	external
	https://bugzilla.suse.com/1261324	external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for himmelblau",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for himmelblau fixes the following issues:\n\nUpdate to version 2.3.9+git0.a9fd29b; (jsc#PED-14511):\n\n- CVE-2026-34397: Fix LPE due to name collision during NSS fake-primary group lookup (bsc#1261324).\n- CVE-2026-31979: Fix race condition when accessiung /tmp/krb5cc_uid (bsc#1259548).\n- CVE-2026-25727: deps(rust): Bump the `all-cargo-updates` group with 8 updates (bsc#1257904).\n- CVE-2025-58160: deps(rust): Bump `tracing-subscriber` in the cargo group (bsc#1249013).\n- CVE-2025-54882: Fix Kerberos credential cache permissions (bsc#1247735).\n- CVE-2025-53013: Fix permitted authentication with invalid Hello PIN (bsc#1245437).\n- CVE-2024-11738: Fix `rustls` network-reachable panic in `Acceptor::accept` (bsc#1233949).\n\nOther bug fixes:\n\n- Fix SELinux module packaging to use standard policy macros (bsc#1258236).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-1361,SUSE-SLE-Module-Basesystem-15-SP7-2026-1361",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1361-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:1361-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261361-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:1361-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045555.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1233949",
        "url": "https://bugzilla.suse.com/1233949"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245437",
        "url": "https://bugzilla.suse.com/1245437"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1247735",
        "url": "https://bugzilla.suse.com/1247735"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1249013",
        "url": "https://bugzilla.suse.com/1249013"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257904",
        "url": "https://bugzilla.suse.com/1257904"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258236",
        "url": "https://bugzilla.suse.com/1258236"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259548",
        "url": "https://bugzilla.suse.com/1259548"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261324",
        "url": "https://bugzilla.suse.com/1261324"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-11738 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-11738/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-53013 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-53013/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-54882 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-54882/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-58160 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-58160/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25727 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25727/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31979 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31979/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34397 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34397/"
      }
    ],
    "title": "Security update for himmelblau",
    "tracking": {
      "current_release_date": "2026-04-15T14:14:00Z",
      "generator": {
        "date": "2026-04-15T14:14:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:1361-1",
      "initial_release_date": "2026-04-15T14:14:00Z",
      "revision_history": [
        {
          "date": "2026-04-15T14:14:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
                "product": {
                  "name": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
                  "product_id": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "himmelblau-sso-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
                "product": {
                  "name": "himmelblau-sso-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
                  "product_id": "himmelblau-sso-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
                "product": {
                  "name": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
                  "product_id": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
                "product": {
                  "name": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
                  "product_id": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "himmelblau-qr-greeter-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
                "product": {
                  "name": "himmelblau-qr-greeter-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
                  "product_id": "himmelblau-qr-greeter-2.3.9+git0.a9fd29b-150700.3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
                "product": {
                  "name": "himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
                  "product_id": "himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
                "product": {
                  "name": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
                  "product_id": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "himmelblau-sso-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
                "product": {
                  "name": "himmelblau-sso-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
                  "product_id": "himmelblau-sso-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
                "product": {
                  "name": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
                  "product_id": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
                "product": {
                  "name": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
                  "product_id": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64"
        },
        "product_reference": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        },
        "product_reference": "himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch"
        },
        "product_reference": "himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64"
        },
        "product_reference": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        },
        "product_reference": "libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64"
        },
        "product_reference": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        },
        "product_reference": "pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-11738",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-11738"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-11738",
          "url": "https://www.suse.com/security/cve/CVE-2024-11738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233897 for CVE-2024-11738",
          "url": "https://bugzilla.suse.com/1233897"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T14:14:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-11738"
    },
    {
      "cve": "CVE-2025-53013",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-53013"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an *invalid* Linux Hello PIN, provided the host is offline. While the user gains access to the local system, Single Sign-On (SSO) fails due to the network being down and the inability to issue tokens (due to a failure to unlock the Hello key). The core issue lies in an incorrect assumption within the `acquire_token_by_hello_for_business_key` function: it was expected to return a `TPMFail` error for an invalid Hello key when offline, but instead, a preceding nonce request resulted in a `RequestFailed` error, leading the system to erroneously transition to an offline success state without validating the Hello key unlock. This impacts systems using Himmelblau for authentication when operating in an offline state with Hello PIN authentication enabled. Rocky Linux 8 (and variants) are not affected by this vulnerability. The problem is resolved in Himmelblau version 0.9.17. A workaround is available for users who cannot immediately upgrade. Disabling Hello PIN authentication by setting `enable_hello = false` in `/etc/himmelblau/himmelblau.conf` will mitigate the vulnerability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-53013",
          "url": "https://www.suse.com/security/cve/CVE-2025-53013"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245437 for CVE-2025-53013",
          "url": "https://bugzilla.suse.com/1245437"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T14:14:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-53013"
    },
    {
      "cve": "CVE-2025-54882",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-54882"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials are stored as world readable. This is fixed in versions 0.9.22 and 1.2.0. To work around this issue, remove all read access to Himmelblau caches for all users except for owners.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-54882",
          "url": "https://www.suse.com/security/cve/CVE-2025-54882"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1247735 for CVE-2025-54882",
          "url": "https://bugzilla.suse.com/1247735"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T14:14:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-54882"
    },
    {
      "cve": "CVE-2025-58160",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-58160"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to manipulate terminal title bars, clear screens or modify terminal display, and potentially mislead users through terminal manipulation. tracing-subscriber version 0.3.20 fixes this vulnerability by escaping ANSI control characters when writing events to destinations that may be printed to the terminal. A workaround involves avoiding printing logs to terminal emulators without escaping ANSI control sequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-58160",
          "url": "https://www.suse.com/security/cve/CVE-2025-58160"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249007 for CVE-2025-58160",
          "url": "https://bugzilla.suse.com/1249007"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T14:14:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-58160"
    },
    {
      "cve": "CVE-2026-25727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25727",
          "url": "https://www.suse.com/security/cve/CVE-2026-25727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257901 for CVE-2026-25727",
          "url": "https://bugzilla.suse.com/1257901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T14:14:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-25727"
    },
    {
      "cve": "CVE-2026-31979",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31979"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache files under /tmp/krb5cc_\u003cuid\u003e without symlink protections. Since commit 87a51ee, PrivateTmp is explicitly removed from the tasks daemon\u0027s systemd hardening, exposing it to the host /tmp. A local user can exploit this via symlink attacks to chown or overwrite arbitrary files, achieving local privilege escalation. This vulnerability is fixed in 3.1.0 and 2.3.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31979",
          "url": "https://www.suse.com/security/cve/CVE-2026-31979"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259548 for CVE-2026-31979",
          "url": "https://bugzilla.suse.com/1259548"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T14:14:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-31979"
    },
    {
      "cve": "CVE-2026-34397",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34397"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose mapped CN/short name exactly matches a privileged local group name (e.g., \"sudo\", \"wheel\", \"docker\", \"adm\") can cause the NSS module to resolve that group name to their fake primary group. If the system uses NSS results for group-based authorization decisions (sudo, polkit, etc.), this can grant the attacker the privileges of that group. This issue has been patched in versions 2.3.9 and 3.1.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34397",
          "url": "https://www.suse.com/security/cve/CVE-2026-34397"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261324 for CVE-2026-34397",
          "url": "https://bugzilla.suse.com/1261324"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config-2.3.9+git0.a9fd29b-150700.3.15.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau-2.3.9+git0.a9fd29b-150700.3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T14:14:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-34397"
    }
  ]
}

CVE-2026-25727 (GCVE-0-2026-25727)

Vulnerability from cvelistv5 – Published: 2026-02-06 19:20 – Updated: 2026-02-06 20:22

Title

time affected by a stack exhaustion denial of service attack

Summary

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack.

Severity ?

6.8 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

GitHub_M

References

URL

Tags

	https://github.com/time-rs/time/security/advisori…	x_refsource_CONFIRM
	https://github.com/time-rs/time/commit/1c63dc7985…	x_refsource_MISC
	https://github.com/time-rs/time/blob/main/CHANGEL…	x_refsource_MISC
	https://github.com/time-rs/time/releases/tag/v0.3.47	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	time-rs	time	Affected: >= 0.3.6, < 0.3.47

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25727",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-06T20:22:34.026090Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-06T20:22:58.488Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "time",
          "vendor": "time-rs",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 0.3.6, \u003c 0.3.47"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-06T19:20:56.298Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/time-rs/time/security/advisories/GHSA-r6v5-fh4h-64xc",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/time-rs/time/security/advisories/GHSA-r6v5-fh4h-64xc"
        },
        {
          "name": "https://github.com/time-rs/time/commit/1c63dc7985b8fa26bd8c689423cc56b7a03841ee",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/time-rs/time/commit/1c63dc7985b8fa26bd8c689423cc56b7a03841ee"
        },
        {
          "name": "https://github.com/time-rs/time/blob/main/CHANGELOG.md#0347-2026-02-05",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/time-rs/time/blob/main/CHANGELOG.md#0347-2026-02-05"
        },
        {
          "name": "https://github.com/time-rs/time/releases/tag/v0.3.47",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/time-rs/time/releases/tag/v0.3.47"
        }
      ],
      "source": {
        "advisory": "GHSA-r6v5-fh4h-64xc",
        "discovery": "UNKNOWN"
      },
      "title": "time affected by a stack exhaustion denial of service attack"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25727",
    "datePublished": "2026-02-06T19:20:56.298Z",
    "dateReserved": "2026-02-05T16:48:00.426Z",
    "dateUpdated": "2026-02-06T20:22:58.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-54882 (GCVE-0-2025-54882)

Vulnerability from cvelistv5 – Published: 2025-08-07 00:02 – Updated: 2025-08-07 14:32

Title

Himmelblau's Kerberos credential cache collection is world readable

Summary

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials are stored as world readable. This is fixed in versions 0.9.22 and 1.2.0. To work around this issue, remove all read access to Himmelblau caches for all users except for owners.

Severity ?

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

GitHub_M

References

URL

Tags

	https://github.com/himmelblau-idm/himmelblau/secu…	x_refsource_CONFIRM
	https://github.com/himmelblau-idm/himmelblau/comm…	x_refsource_MISC
	https://github.com/himmelblau-idm/himmelblau/comm…	x_refsource_MISC
	https://github.com/himmelblau-idm/himmelblau/rele…	x_refsource_MISC
	https://github.com/himmelblau-idm/himmelblau/rele…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	himmelblau-idm	himmelblau	Affected: >= 0.8.0, < 0.9.22 Affected: >= 1.0.0-beta, < 1.2.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-54882",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-07T14:31:57.797950Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-07T14:32:00.582Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-phfx-rjfw-wj83"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "himmelblau",
          "vendor": "himmelblau-idm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 0.8.0, \u003c 0.9.22"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.0.0-beta, \u003c 1.2.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials are stored as world readable. This is fixed in versions 0.9.22 and 1.2.0. To work around this issue, remove all read access to Himmelblau caches for all users except for owners."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522: Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-07T00:02:09.263Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-phfx-rjfw-wj83",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-phfx-rjfw-wj83"
        },
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/commit/b562053df3dffb1dd9ab3d09af986886773be2ad",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/commit/b562053df3dffb1dd9ab3d09af986886773be2ad"
        },
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/commit/faae58b0384aca8b21b4be5f1c507412eec3778a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/commit/faae58b0384aca8b21b4be5f1c507412eec3778a"
        },
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/releases/tag/0.9.22",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/releases/tag/0.9.22"
        },
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/releases/tag/1.2.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/releases/tag/1.2.0"
        }
      ],
      "source": {
        "advisory": "GHSA-phfx-rjfw-wj83",
        "discovery": "UNKNOWN"
      },
      "title": "Himmelblau\u0027s Kerberos credential cache collection is world readable"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-54882",
    "datePublished": "2025-08-07T00:02:09.263Z",
    "dateReserved": "2025-07-31T17:23:33.476Z",
    "dateUpdated": "2025-08-07T14:32:00.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-58160 (GCVE-0-2025-58160)

Vulnerability from cvelistv5 – Published: 2025-08-29 21:28 – Updated: 2025-09-02 14:08

Title

Tracing logging user input may result in poisoning logs with ANSI escape sequences

Summary

tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to manipulate terminal title bars, clear screens or modify terminal display, and potentially mislead users through terminal manipulation. tracing-subscriber version 0.3.20 fixes this vulnerability by escaping ANSI control characters when writing events to destinations that may be printed to the terminal. A workaround involves avoiding printing logs to terminal emulators without escaping ANSI control sequences.

Severity ?

2.3 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CWE

CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences

Assigner

GitHub_M

References

URL

Tags

https://github.com/tokio-rs/tracing/security/advi…

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	tokio-rs	tracing	Affected: < 0.3.20

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-58160",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-02T14:08:23.820634Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-02T14:08:42.323Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tracing",
          "vendor": "tokio-rs",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.3.20"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to manipulate terminal title bars, clear screens or modify terminal display, and potentially mislead users through terminal manipulation. tracing-subscriber version 0.3.20 fixes this vulnerability by escaping ANSI control characters when writing events to destinations that may be printed to the terminal. A workaround involves avoiding printing logs to terminal emulators without escaping ANSI control sequences."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-150",
              "description": "CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-29T21:28:22.563Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/tokio-rs/tracing/security/advisories/GHSA-xwfj-jgwm-7wp5",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/tokio-rs/tracing/security/advisories/GHSA-xwfj-jgwm-7wp5"
        }
      ],
      "source": {
        "advisory": "GHSA-xwfj-jgwm-7wp5",
        "discovery": "UNKNOWN"
      },
      "title": "Tracing logging user input may result in poisoning logs with ANSI escape sequences"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-58160",
    "datePublished": "2025-08-29T21:28:22.563Z",
    "dateReserved": "2025-08-27T13:34:56.186Z",
    "dateUpdated": "2025-09-02T14:08:42.323Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-34397 (GCVE-0-2026-34397)

Vulnerability from cvelistv5 – Published: 2026-04-01 17:25 – Updated: 2026-04-04 03:05

Title

himmelblau: NSS fake-primary group lookup reintroduces name collision risk

Summary

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose mapped CN/short name exactly matches a privileged local group name (e.g., "sudo", "wheel", "docker", "adm") can cause the NSS module to resolve that group name to their fake primary group. If the system uses NSS results for group-based authorization decisions (sudo, polkit, etc.), this can grant the attacker the privileges of that group. This issue has been patched in versions 2.3.9 and 3.1.1.

Severity ?

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-269 - Improper Privilege Management

Assigner

GitHub_M

References

URL

Tags

	https://github.com/himmelblau-idm/himmelblau/secu…	x_refsource_CONFIRM
	https://github.com/himmelblau-idm/himmelblau/rele…	x_refsource_MISC
	https://github.com/himmelblau-idm/himmelblau/rele…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	himmelblau-idm	himmelblau	Affected: >= 2.0.0-alpha, < 2.3.9 Affected: >= 3.0.0-alpha, < 3.1.1

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-34397",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-04T03:04:22.143352Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-04T03:05:13.451Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "himmelblau",
          "vendor": "himmelblau-idm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.0.0-alpha, \u003c 2.3.9"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.0.0-alpha, \u003c 3.1.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose mapped CN/short name exactly matches a privileged local group name (e.g., \"sudo\", \"wheel\", \"docker\", \"adm\") can cause the NSS module to resolve that group name to their fake primary group. If the system uses NSS results for group-based authorization decisions (sudo, polkit, etc.), this can grant the attacker the privileges of that group. This issue has been patched in versions 2.3.9 and 3.1.1."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269: Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-01T17:25:06.034Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-v7xx-7mqc-g835",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-v7xx-7mqc-g835"
        },
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/releases/tag/2.3.9",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/releases/tag/2.3.9"
        },
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/releases/tag/3.1.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/releases/tag/3.1.1"
        }
      ],
      "source": {
        "advisory": "GHSA-v7xx-7mqc-g835",
        "discovery": "UNKNOWN"
      },
      "title": "himmelblau: NSS fake-primary group lookup reintroduces name collision risk"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-34397",
    "datePublished": "2026-04-01T17:25:06.034Z",
    "dateReserved": "2026-03-27T13:45:29.619Z",
    "dateUpdated": "2026-04-04T03:05:13.451Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-53013 (GCVE-0-2025-53013)

Vulnerability from cvelistv5 – Published: 2025-06-26 18:02 – Updated: 2025-08-20 19:29

Title

Himmelblau offline auth permits authentication with invalid Hello PIN

Summary

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an *invalid* Linux Hello PIN, provided the host is offline. While the user gains access to the local system, Single Sign-On (SSO) fails due to the network being down and the inability to issue tokens (due to a failure to unlock the Hello key). The core issue lies in an incorrect assumption within the `acquire_token_by_hello_for_business_key` function: it was expected to return a `TPMFail` error for an invalid Hello key when offline, but instead, a preceding nonce request resulted in a `RequestFailed` error, leading the system to erroneously transition to an offline success state without validating the Hello key unlock. This impacts systems using Himmelblau for authentication when operating in an offline state with Hello PIN authentication enabled. Rocky Linux 8 (and variants) are not affected by this vulnerability. The problem is resolved in Himmelblau version 0.9.17. A workaround is available for users who cannot immediately upgrade. Disabling Hello PIN authentication by setting `enable_hello = false` in `/etc/himmelblau/himmelblau.conf` will mitigate the vulnerability.

Severity ?

5.2 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

CWE

CWE-287 - Improper Authentication

Assigner

GitHub_M

References

URL

Tags

	https://github.com/himmelblau-idm/himmelblau/secu…	x_refsource_CONFIRM
	https://github.com/himmelblau-idm/himmelblau/comm…	x_refsource_MISC
	https://github.com/himmelblau-idm/himmelblau/comm…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	himmelblau-idm	himmelblau	Affected: >= 0.9.10, < 0.9.17

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-53013",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-26T18:37:35.779863Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-26T18:47:31.356Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-08-20T19:29:16.720Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-53013-detect-himmelblau-vulnerable-configuration"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-53013-mitigate-himmelblau-vulnerable-configuration"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "himmelblau",
          "vendor": "himmelblau-idm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 0.9.10, \u003c 0.9.17"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an *invalid* Linux Hello PIN, provided the host is offline. While the user gains access to the local system, Single Sign-On (SSO) fails due to the network being down and the inability to issue tokens (due to a failure to unlock the Hello key). The core issue lies in an incorrect assumption within the `acquire_token_by_hello_for_business_key` function: it was expected to return a `TPMFail` error for an invalid Hello key when offline, but instead, a preceding nonce request resulted in a `RequestFailed` error, leading the system to erroneously transition to an offline success state without validating the Hello key unlock. This impacts systems using Himmelblau for authentication when operating in an offline state with Hello PIN authentication enabled. Rocky Linux 8 (and variants) are not affected by this vulnerability. The problem is resolved in Himmelblau version 0.9.17. A workaround is available for users who cannot immediately upgrade. Disabling Hello PIN authentication by setting `enable_hello = false` in `/etc/himmelblau/himmelblau.conf` will mitigate the vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-26T18:02:31.828Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-j93j-pwm6-p97j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-j93j-pwm6-p97j"
        },
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/commit/64b03739f1d5ee472b1cff3ed20ed9af1c65a6f8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/commit/64b03739f1d5ee472b1cff3ed20ed9af1c65a6f8"
        },
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/commit/78477d684df710d57c10091c87b92665cfac98ae",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/commit/78477d684df710d57c10091c87b92665cfac98ae"
        }
      ],
      "source": {
        "advisory": "GHSA-j93j-pwm6-p97j",
        "discovery": "UNKNOWN"
      },
      "title": "Himmelblau offline auth permits authentication with invalid Hello PIN"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-53013",
    "datePublished": "2025-06-26T18:02:31.828Z",
    "dateReserved": "2025-06-24T03:50:36.796Z",
    "dateUpdated": "2025-08-20T19:29:16.720Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-31979 (GCVE-0-2026-31979)

Vulnerability from cvelistv5 – Published: 2026-03-11 19:47 – Updated: 2026-03-11 20:07

Title

himmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache

Summary

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache files under /tmp/krb5cc_<uid> without symlink protections. Since commit 87a51ee, PrivateTmp is explicitly removed from the tasks daemon's systemd hardening, exposing it to the host /tmp. A local user can exploit this via symlink attacks to chown or overwrite arbitrary files, achieving local privilege escalation. This vulnerability is fixed in 3.1.0 and 2.3.8.

Severity ?

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

GitHub_M

References

URL

Tags

https://github.com/himmelblau-idm/himmelblau/secu…

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	himmelblau-idm	himmelblau	Affected: >= 1.0.0, < 2.3.8 Affected: >= 3.0.0-alpha, < 3.1.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-31979",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-11T20:07:04.015032Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-11T20:07:29.194Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "himmelblau",
          "vendor": "himmelblau-idm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 2.3.8"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.0.0-alpha, \u003c 3.1.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache files under /tmp/krb5cc_\u003cuid\u003e without symlink protections. Since commit 87a51ee, PrivateTmp is explicitly removed from the tasks daemon\u0027s systemd hardening, exposing it to the host /tmp. A local user can exploit this via symlink attacks to chown or overwrite arbitrary files, achieving local privilege escalation. This vulnerability is fixed in 3.1.0 and 2.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-11T19:47:05.935Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-44wm-q286-ghq3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-44wm-q286-ghq3"
        }
      ],
      "source": {
        "advisory": "GHSA-44wm-q286-ghq3",
        "discovery": "UNKNOWN"
      },
      "title": "himmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-31979",
    "datePublished": "2026-03-11T19:47:05.935Z",
    "dateReserved": "2026-03-10T15:40:10.487Z",
    "dateUpdated": "2026-03-11T20:07:29.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-11738 (GCVE-0-2024-11738)

Vulnerability from cvelistv5 – Published: 2024-12-06 14:54 – Updated: 2025-11-20 18:22

Title

Rustls: rustls network-reachable panic in `acceptor::accept`

Summary

A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.

Severity ?

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-248 - Uncaught Exception

Assigner

redhat

References

URL

Tags

	https://access.redhat.com/security/cve/CVE-2024-11738	vdb-entryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2328732	issue-trackingx_refsource_REDHAT
	https://github.com/advisories/GHSA-qg5g-gv98-5ffh
	https://github.com/rustls/rustls
	https://github.com/rustls/rustls/issues/2227
	https://rustsec.org/advisories/RUSTSEC-2024-0399.html

Impacted products

Vendor

Product

Version

Affected: 0.23.13 , < 0.23.18 (semver)

	Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1
	Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1

Date Public ?

2024-11-25 16:57

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-11738",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-06T17:45:01.886756Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-06T17:45:12.881Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/rustls/rustls",
          "defaultStatus": "unaffected",
          "packageName": "rustls",
          "versions": [
            {
              "lessThan": "0.23.18",
              "status": "affected",
              "version": "0.23.13",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:trusted_artifact_signer:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhtas/tuffer-rhel9",
          "product": "Red Hat Trusted Artifact Signer",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:trusted_artifact_signer:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhtas/tuftool-rhel9",
          "product": "Red Hat Trusted Artifact Signer",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-11-25T16:57:34.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-20T18:22:11.892Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-11738"
        },
        {
          "name": "RHBZ#2328732",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2328732"
        },
        {
          "url": "https://github.com/advisories/GHSA-qg5g-gv98-5ffh"
        },
        {
          "url": "https://github.com/rustls/rustls"
        },
        {
          "url": "https://github.com/rustls/rustls/issues/2227"
        },
        {
          "url": "https://rustsec.org/advisories/RUSTSEC-2024-0399.html"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-11-25T18:01:22.985Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-11-25T16:57:34.000Z",
          "value": "Made public."
        }
      ],
      "title": "Rustls: rustls network-reachable panic in `acceptor::accept`",
      "x_redhatCweChain": "CWE-248: Uncaught Exception"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-11738",
    "datePublished": "2024-12-06T14:54:11.310Z",
    "dateReserved": "2024-11-26T07:32:36.161Z",
    "dateUpdated": "2025-11-20T18:22:11.892Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.