Marcus Updateinfo to OVAL Converter5.52023-10-19T04:57:44CVE-2007-4559openSUSE Leap Micro 5.3
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
ModerateCVE-2007-4559SUSE bug 1203750SUSE bug 1204077cpe:/o:opensuse:leap-micro:5.3CVE-2017-5753openSUSE Leap Micro 5.3
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
ImportantCVE-2017-5753SUSE bug 1068032SUSE bug 1074562SUSE bug 1074578SUSE bug 1074701SUSE bug 1075006SUSE bug 1075419SUSE bug 1075748SUSE bug 1080039SUSE bug 1087084SUSE bug 1087939SUSE bug 1089055SUSE bug 1136865SUSE bug 1178658SUSE bug 1201877SUSE bug 1209547cpe:/o:opensuse:leap-micro:5.3CVE-2019-14560openSUSE Leap Micro 5.3
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
ModerateCVE-2019-14560SUSE bug 1174246cpe:/o:opensuse:leap-micro:5.3CVE-2019-18348openSUSE Leap Micro 5.3
An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1.
ModerateCVE-2019-18348SUSE bug 1155094cpe:/o:opensuse:leap-micro:5.3CVE-2019-2708openSUSE Leap Micro 5.3
Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
LowCVE-2019-2708SUSE bug 1174414cpe:/o:opensuse:leap-micro:5.3CVE-2020-10531openSUSE Leap Micro 5.3
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
ImportantCVE-2020-10531SUSE bug 1166844SUSE bug 1175778cpe:/o:opensuse:leap-micro:5.3CVE-2020-10735openSUSE Leap Micro 5.3
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
ImportantCVE-2020-10735SUSE bug 1203125SUSE bug 1204077SUSE bug 1204096SUSE bug 1204097SUSE bug 1205075SUSE bug 1208131cpe:/o:opensuse:leap-micro:5.3CVE-2020-14394openSUSE Leap Micro 5.3
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.
LowCVE-2020-14394SUSE bug 1180207cpe:/o:opensuse:leap-micro:5.3CVE-2020-21913openSUSE Leap Micro 5.3
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
ModerateCVE-2020-21913SUSE bug 1193951cpe:/o:opensuse:leap-micro:5.3CVE-2020-22218openSUSE Leap Micro 5.3
An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.
ImportantCVE-2020-22218SUSE bug 1214527cpe:/o:opensuse:leap-micro:5.3CVE-2020-24588openSUSE Leap Micro 5.3
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
ModerateCVE-2020-24588SUSE bug 1185861SUSE bug 1192868SUSE bug 1199701cpe:/o:opensuse:leap-micro:5.3CVE-2020-29129openSUSE Leap Micro 5.3
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
LowCVE-2020-29129SUSE bug 1179466SUSE bug 1179467SUSE bug 1179477SUSE bug 1179484cpe:/o:opensuse:leap-micro:5.3CVE-2020-29130openSUSE Leap Micro 5.3
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
ModerateCVE-2020-29130SUSE bug 1178658SUSE bug 1179467SUSE bug 1179477cpe:/o:opensuse:leap-micro:5.3CVE-2020-8492openSUSE Leap Micro 5.3
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
ModerateCVE-2020-8492SUSE bug 1162367cpe:/o:opensuse:leap-micro:5.3CVE-2021-20199openSUSE Leap Micro 5.3
Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.
LowCVE-2021-20199SUSE bug 1181640cpe:/o:opensuse:leap-micro:5.3CVE-2021-20206openSUSE Leap Micro 5.3
An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
ImportantCVE-2021-20206SUSE bug 1181961cpe:/o:opensuse:leap-micro:5.3CVE-2021-20251openSUSE Leap Micro 5.3
A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.
ImportantCVE-2021-20251SUSE bug 1206546SUSE bug 1208433SUSE bug 1209325SUSE bug 1209664cpe:/o:opensuse:leap-micro:5.3CVE-2021-30560openSUSE Leap Micro 5.3
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
ImportantCVE-2021-30560SUSE bug 1188373SUSE bug 1208574SUSE bug 1211500SUSE bug 1211501SUSE bug 1211544cpe:/o:opensuse:leap-micro:5.3CVE-2021-3507openSUSE Leap Micro 5.3
A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.
ModerateCVE-2021-3507SUSE bug 1185000cpe:/o:opensuse:leap-micro:5.3CVE-2021-3623openSUSE Leap Micro 5.3
A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.
ModerateCVE-2021-3623SUSE bug 1187767cpe:/o:opensuse:leap-micro:5.3CVE-2021-3638openSUSE Leap Micro 5.3
An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
LowCVE-2021-3638SUSE bug 1188609cpe:/o:opensuse:leap-micro:5.3CVE-2021-3750openSUSE Leap Micro 5.3
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions (such as reset) while the device is still transferring packets. This can ultimately lead to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code within the context of the QEMU process on the host. This flaw affects QEMU versions before 7.0.0.
ImportantCVE-2021-3750SUSE bug 1190011SUSE bug 1190015SUSE bug 1193880cpe:/o:opensuse:leap-micro:5.3CVE-2021-3782openSUSE Leap Micro 5.3
An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wl_shm buffer objects, or if it can coerce the server to create a large number of external references to the buffer storage. With the reference count overflowing, a use-after-free can be constructed on the wl_shm_pool tracking structure, where values may be incremented or decremented; it may also be possible to construct a limited oracle to leak 4 bytes of server-side memory to the attacking client at a time.
ModerateCVE-2021-3782SUSE bug 1190486cpe:/o:opensuse:leap-micro:5.3CVE-2021-38578openSUSE Leap Micro 5.3
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
ImportantCVE-2021-38578SUSE bug 1196741cpe:/o:opensuse:leap-micro:5.3CVE-2021-3928openSUSE Leap Micro 5.3
vim is vulnerable to Use of Uninitialized Variable
ModerateCVE-2021-3928SUSE bug 1192478cpe:/o:opensuse:leap-micro:5.3CVE-2021-4024openSUSE Leap Micro 5.3
A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM.
ModerateCVE-2021-4024SUSE bug 1193166cpe:/o:opensuse:leap-micro:5.3CVE-2021-41190openSUSE Leap Micro 5.3
The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both “manifests” and “layers” fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both “manifests” and “layers” fields or “manifests” and “config” fields if they are unable to update to version 1.0.1 of the spec.
ModerateCVE-2021-41190SUSE bug 1193273cpe:/o:opensuse:leap-micro:5.3CVE-2021-41229openSUSE Leap Micro 5.3
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.
ModerateCVE-2021-41229SUSE bug 1192760cpe:/o:opensuse:leap-micro:5.3CVE-2022-0670openSUSE Leap Micro 5.3
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
ImportantCVE-2022-0670SUSE bug 1201837cpe:/o:opensuse:leap-micro:5.3CVE-2022-1050openSUSE Leap Micro 5.3
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
ImportantCVE-2022-1050SUSE bug 1197653cpe:/o:opensuse:leap-micro:5.3CVE-2022-1664openSUSE Leap Micro 5.3
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
LowCVE-2022-1664SUSE bug 1199944cpe:/o:opensuse:leap-micro:5.3CVE-2022-1708openSUSE Leap Micro 5.3
A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.
ModerateCVE-2022-1708SUSE bug 1200285cpe:/o:opensuse:leap-micro:5.3CVE-2022-2031openSUSE Leap Micro 5.3
A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services.
ImportantCVE-2022-2031SUSE bug 1201495SUSE bug 1202815SUSE bug 1202999SUSE bug 1205061SUSE bug 1208433SUSE bug 1209664cpe:/o:opensuse:leap-micro:5.3CVE-2022-21216openSUSE Leap Micro 5.3
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
ImportantCVE-2022-21216SUSE bug 1208277SUSE bug 1209936SUSE bug 1211490SUSE bug 1211511SUSE bug 1213820cpe:/o:opensuse:leap-micro:5.3CVE-2022-2127openSUSE Leap Micro 5.3
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
ModerateCVE-2022-2127SUSE bug 1213174cpe:/o:opensuse:leap-micro:5.3CVE-2022-2196openSUSE Leap Micro 5.3
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks.?L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB?after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or past commit?2e7eab81425a
ModerateCVE-2022-2196SUSE bug 1206992cpe:/o:opensuse:leap-micro:5.3CVE-2022-23471openSUSE Leap Micro 5.3
containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, for example, a faulty command, the goroutine will be stuck waiting to send without a receiver, resulting in a memory leak. Kubernetes and crictl can both be configured to use containerd's CRI implementation and the stream server is used for handling container IO. This bug has been fixed in containerd 1.6.12 and 1.5.16. Users should update to these versions to resolve the issue. Users unable to upgrade should ensure that only trusted images and commands are used and that only trusted users have permissions to execute commands in running containers.
ModerateCVE-2022-23471SUSE bug 1206235cpe:/o:opensuse:leap-micro:5.3CVE-2022-23491openSUSE Leap Micro 5.3
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.
ModerateCVE-2022-23491SUSE bug 1206212SUSE bug 1207038cpe:/o:opensuse:leap-micro:5.3CVE-2022-23824openSUSE Leap Micro 5.3
IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.
ModerateCVE-2022-23824SUSE bug 1205209cpe:/o:opensuse:leap-micro:5.3CVE-2022-24805openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2022-24805SUSE bug 1201103cpe:/o:opensuse:leap-micro:5.3CVE-2022-24806openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2022-24806SUSE bug 1201103cpe:/o:opensuse:leap-micro:5.3CVE-2022-24807openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2022-24807SUSE bug 1201103cpe:/o:opensuse:leap-micro:5.3CVE-2022-24808openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2022-24808SUSE bug 1201103cpe:/o:opensuse:leap-micro:5.3CVE-2022-24809openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2022-24809SUSE bug 1201103cpe:/o:opensuse:leap-micro:5.3CVE-2022-24810openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2022-24810SUSE bug 1201103cpe:/o:opensuse:leap-micro:5.3CVE-2022-2601openSUSE Leap Micro 5.3
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism.
ModerateCVE-2022-2601SUSE bug 1205178cpe:/o:opensuse:leap-micro:5.3CVE-2022-27191openSUSE Leap Micro 5.3
The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
ImportantCVE-2022-27191SUSE bug 1197284cpe:/o:opensuse:leap-micro:5.3CVE-2022-27649openSUSE Leap Micro 5.3
A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
ModerateCVE-2022-27649SUSE bug 1197909cpe:/o:opensuse:leap-micro:5.3CVE-2022-27672openSUSE Leap Micro 5.3
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
ModerateCVE-2022-27672SUSE bug 1208286cpe:/o:opensuse:leap-micro:5.3CVE-2022-28737openSUSE Leap Micro 5.3
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario.
ImportantCVE-2022-28737SUSE bug 1198458SUSE bug 1205065SUSE bug 1205066SUSE bug 1205831cpe:/o:opensuse:leap-micro:5.3CVE-2022-2980openSUSE Leap Micro 5.3
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
LowCVE-2022-2980SUSE bug 1203155cpe:/o:opensuse:leap-micro:5.3CVE-2022-2982openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.0260.
ModerateCVE-2022-2982SUSE bug 1203152cpe:/o:opensuse:leap-micro:5.3CVE-2022-2989openSUSE Leap Micro 5.3
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
ModerateCVE-2022-2989SUSE bug 1202809cpe:/o:opensuse:leap-micro:5.3CVE-2022-3037openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
LowCVE-2022-3037SUSE bug 1202962cpe:/o:opensuse:leap-micro:5.3CVE-2022-3099openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.0360.
ModerateCVE-2022-3099SUSE bug 1203110cpe:/o:opensuse:leap-micro:5.3CVE-2022-3104openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc() and will cause the null pointer dereference.
ModerateCVE-2022-3104SUSE bug 1206396cpe:/o:opensuse:leap-micro:5.3CVE-2022-3105openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().
ModerateCVE-2022-3105SUSE bug 1206398cpe:/o:opensuse:leap-micro:5.3CVE-2022-3106openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kmalloc().
ModerateCVE-2022-3106SUSE bug 1206397cpe:/o:opensuse:leap-micro:5.3CVE-2022-3107openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kvmalloc_array() and will cause the null pointer dereference.
ModerateCVE-2022-3107SUSE bug 1206395cpe:/o:opensuse:leap-micro:5.3CVE-2022-3108openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().
ModerateCVE-2022-3108SUSE bug 1206389cpe:/o:opensuse:leap-micro:5.3CVE-2022-3111openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350_IRQ_CHG_FAST_RDY, which is registered in wm8350_init_charger().
ModerateCVE-2022-3111SUSE bug 1206394cpe:/o:opensuse:leap-micro:5.3CVE-2022-3112openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.
ModerateCVE-2022-3112SUSE bug 1206399cpe:/o:opensuse:leap-micro:5.3CVE-2022-3113openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of the return value of devm_kzalloc() and will cause the null pointer dereference.
ModerateCVE-2022-3113SUSE bug 1206390cpe:/o:opensuse:leap-micro:5.3CVE-2022-3114openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference.
ModerateCVE-2022-3114SUSE bug 1206391cpe:/o:opensuse:leap-micro:5.3CVE-2022-3115openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.
ModerateCVE-2022-3115SUSE bug 1206393cpe:/o:opensuse:leap-micro:5.3CVE-2022-3134openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.0389.
LowCVE-2022-3134SUSE bug 1203194cpe:/o:opensuse:leap-micro:5.3CVE-2022-3153openSUSE Leap Micro 5.3
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
ModerateCVE-2022-3153SUSE bug 1203272cpe:/o:opensuse:leap-micro:5.3CVE-2022-3165openSUSE Leap Micro 5.3
An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.
ModerateCVE-2022-3165SUSE bug 1203788cpe:/o:opensuse:leap-micro:5.3CVE-2022-3234openSUSE Leap Micro 5.3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
ImportantCVE-2022-3234SUSE bug 1203508SUSE bug 1206240SUSE bug 1208002SUSE bug 1208308SUSE bug 1208651SUSE bug 1209329cpe:/o:opensuse:leap-micro:5.3CVE-2022-3235openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.0490.
LowCVE-2022-3235SUSE bug 1203509cpe:/o:opensuse:leap-micro:5.3CVE-2022-32742openSUSE Leap Micro 5.3
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).
ModerateCVE-2022-32742SUSE bug 1201496SUSE bug 1202815cpe:/o:opensuse:leap-micro:5.3CVE-2022-32744openSUSE Leap Micro 5.3
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
ImportantCVE-2022-32744SUSE bug 1201493SUSE bug 1202815SUSE bug 1209664cpe:/o:opensuse:leap-micro:5.3CVE-2022-32745openSUSE Leap Micro 5.3
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.
ModerateCVE-2022-32745SUSE bug 1201492cpe:/o:opensuse:leap-micro:5.3CVE-2022-32746openSUSE Leap Micro 5.3
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.
ModerateCVE-2022-32746SUSE bug 1201490cpe:/o:opensuse:leap-micro:5.3CVE-2022-3278openSUSE Leap Micro 5.3
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.
LowCVE-2022-3278SUSE bug 1203799cpe:/o:opensuse:leap-micro:5.3CVE-2022-3296openSUSE Leap Micro 5.3
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
ModerateCVE-2022-3296SUSE bug 1203796SUSE bug 1205395cpe:/o:opensuse:leap-micro:5.3CVE-2022-3297openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.0579.
ModerateCVE-2022-3297SUSE bug 1203797cpe:/o:opensuse:leap-micro:5.3CVE-2022-33196openSUSE Leap Micro 5.3
Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access.
ImportantCVE-2022-33196SUSE bug 1208276SUSE bug 1209936SUSE bug 1211490SUSE bug 1211511SUSE bug 1213820cpe:/o:opensuse:leap-micro:5.3CVE-2022-3324openSUSE Leap Micro 5.3
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
ModerateCVE-2022-3324SUSE bug 1203820SUSE bug 1205395SUSE bug 1206240cpe:/o:opensuse:leap-micro:5.3CVE-2022-3344openSUSE Leap Micro 5.3
A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0).
ModerateCVE-2022-3344SUSE bug 1204652cpe:/o:opensuse:leap-micro:5.3CVE-2022-3352openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.0614.
ModerateCVE-2022-3352SUSE bug 1203924cpe:/o:opensuse:leap-micro:5.3CVE-2022-33972openSUSE Leap Micro 5.3
Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access.
ModerateCVE-2022-33972SUSE bug 1208479cpe:/o:opensuse:leap-micro:5.3CVE-2022-3437openSUSE Leap Micro 5.3
A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.
ModerateCVE-2022-3437SUSE bug 1204254SUSE bug 1205667SUSE bug 1208992cpe:/o:opensuse:leap-micro:5.3CVE-2022-3479openSUSE Leap Micro 5.3
A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can lead us to a segmentation fault or crash.
ModerateCVE-2022-3479SUSE bug 1204272cpe:/o:opensuse:leap-micro:5.3CVE-2022-3491openSUSE Leap Micro 5.3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.
LowCVE-2022-3491SUSE bug 1206028cpe:/o:opensuse:leap-micro:5.3CVE-2022-3520openSUSE Leap Micro 5.3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
ImportantCVE-2022-3520SUSE bug 1206071SUSE bug 1208100SUSE bug 1208649SUSE bug 1208651cpe:/o:opensuse:leap-micro:5.3CVE-2022-3523openSUSE Leap Micro 5.3
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211020.
ModerateCVE-2022-3523SUSE bug 1204363cpe:/o:opensuse:leap-micro:5.3CVE-2022-3555openSUSE Leap Micro 5.3
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
ModerateCVE-2022-3555SUSE bug 1204425cpe:/o:opensuse:leap-micro:5.3CVE-2022-3564openSUSE Leap Micro 5.3
A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.
ImportantCVE-2022-3564SUSE bug 1206073SUSE bug 1206314SUSE bug 1208030SUSE bug 1208044SUSE bug 1208085cpe:/o:opensuse:leap-micro:5.3CVE-2022-3570openSUSE Leap Micro 5.3
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact
ModerateCVE-2022-3570SUSE bug 1205422cpe:/o:opensuse:leap-micro:5.3CVE-2022-3591openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.0789.
ImportantCVE-2022-3591SUSE bug 1206072SUSE bug 1208100SUSE bug 1208649cpe:/o:opensuse:leap-micro:5.3CVE-2022-3597openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
ModerateCVE-2022-3597SUSE bug 1204641SUSE bug 1206220cpe:/o:opensuse:leap-micro:5.3CVE-2022-3598openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b.
ModerateCVE-2022-3598SUSE bug 1204642SUSE bug 1206220cpe:/o:opensuse:leap-micro:5.3CVE-2022-3599openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.
ModerateCVE-2022-3599SUSE bug 1204643SUSE bug 1206220cpe:/o:opensuse:leap-micro:5.3CVE-2022-36109openSUSE Leap Micro 5.3
Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. This bug is fixed in Moby (Docker Engine) 20.10.18. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade, this problem can be worked around by not using the `"USER $USERNAME"` Dockerfile instruction. Instead by calling `ENTRYPOINT ["su", "-", "user"]` the supplementary groups will be set up properly.
ModerateCVE-2022-36109SUSE bug 1205375cpe:/o:opensuse:leap-micro:5.3CVE-2022-36227openSUSE Leap Micro 5.3
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
LowCVE-2022-36227SUSE bug 1205629cpe:/o:opensuse:leap-micro:5.3CVE-2022-3626openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
ModerateCVE-2022-3626SUSE bug 1204644SUSE bug 1206220cpe:/o:opensuse:leap-micro:5.3CVE-2022-3627openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
ModerateCVE-2022-3627SUSE bug 1204645SUSE bug 1206220cpe:/o:opensuse:leap-micro:5.3CVE-2022-36280openSUSE Leap Micro 5.3
An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
ModerateCVE-2022-36280SUSE bug 1203332cpe:/o:opensuse:leap-micro:5.3CVE-2022-3650openSUSE Leap Micro 5.3
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
ImportantCVE-2022-3650SUSE bug 1204430cpe:/o:opensuse:leap-micro:5.3CVE-2022-3705openSUSE Leap Micro 5.3
A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.
ModerateCVE-2022-3705SUSE bug 1204779cpe:/o:opensuse:leap-micro:5.3CVE-2022-37454openSUSE Leap Micro 5.3
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.
ImportantCVE-2022-37454SUSE bug 1204577SUSE bug 1204966SUSE bug 1205836cpe:/o:opensuse:leap-micro:5.3CVE-2022-3775openSUSE Leap Micro 5.3
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.
ModerateCVE-2022-3775SUSE bug 1205182cpe:/o:opensuse:leap-micro:5.3CVE-2022-37966openSUSE Leap Micro 5.3
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
ImportantCVE-2022-37966SUSE bug 1205385SUSE bug 1208347SUSE bug 1208433SUSE bug 1209664cpe:/o:opensuse:leap-micro:5.3CVE-2022-37967openSUSE Leap Micro 5.3
Windows Kerberos Elevation of Privilege Vulnerability
ImportantCVE-2022-37967SUSE bug 1205386SUSE bug 1208347cpe:/o:opensuse:leap-micro:5.3CVE-2022-38023openSUSE Leap Micro 5.3
Netlogon RPC Elevation of Privilege Vulnerability
ImportantCVE-2022-38023SUSE bug 1206504SUSE bug 1209664SUSE bug 1213694cpe:/o:opensuse:leap-micro:5.3CVE-2022-38090openSUSE Leap Micro 5.3
Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access.
ModerateCVE-2022-38090SUSE bug 1208275cpe:/o:opensuse:leap-micro:5.3CVE-2022-38096openSUSE Leap Micro 5.3
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
ModerateCVE-2022-38096SUSE bug 1203331cpe:/o:opensuse:leap-micro:5.3CVE-2022-3854openSUSE Leap Micro 5.3
A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.
ModerateCVE-2022-3854SUSE bug 1205025cpe:/o:opensuse:leap-micro:5.3CVE-2022-3970openSUSE Leap Micro 5.3
A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.
ImportantCVE-2022-3970SUSE bug 1205392SUSE bug 1208311SUSE bug 1208312SUSE bug 1208338SUSE bug 1208655SUSE bug 1209328cpe:/o:opensuse:leap-micro:5.3CVE-2022-40897openSUSE Leap Micro 5.3
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
ModerateCVE-2022-40897SUSE bug 1206667cpe:/o:opensuse:leap-micro:5.3CVE-2022-40899openSUSE Leap Micro 5.3
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
ModerateCVE-2022-40899SUSE bug 1206673cpe:/o:opensuse:leap-micro:5.3CVE-2022-40982openSUSE Leap Micro 5.3
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
ModerateCVE-2022-40982SUSE bug 1206418SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.3CVE-2022-41409openSUSE Leap Micro 5.3
Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.
ModerateCVE-2022-41409SUSE bug 1213514cpe:/o:opensuse:leap-micro:5.3CVE-2022-4141openSUSE Leap Micro 5.3
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
ImportantCVE-2022-4141SUSE bug 1205797SUSE bug 1208649SUSE bug 1208651cpe:/o:opensuse:leap-micro:5.3CVE-2022-4144openSUSE Leap Micro 5.3
An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to crash the QEMU process on the host causing a denial of service condition.
ModerateCVE-2022-4144SUSE bug 1205808cpe:/o:opensuse:leap-micro:5.3CVE-2022-41804openSUSE Leap Micro 5.3
Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
ImportantCVE-2022-41804SUSE bug 1215580cpe:/o:opensuse:leap-micro:5.3CVE-2022-42331openSUSE Leap Micro 5.3
x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.
ModerateCVE-2022-42331SUSE bug 1209019cpe:/o:opensuse:leap-micro:5.3CVE-2022-42332openSUSE Leap Micro 5.3
x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as auxiliary data structures. To migrate or snapshot guests, Xen additionally runs them in so called log-dirty mode. The data structures needed by the log-dirty tracking are part of aformentioned auxiliary data. In order to keep error handling efforts within reasonable bounds, for operations which may require memory allocations shadow mode logic ensures up front that enough memory is available for the worst case requirements. Unfortunately, while page table memory is properly accounted for on the code path requiring the potential establishing of new shadows, demands by the log-dirty infrastructure were not taken into consideration. As a result, just established shadow page tables could be freed again immediately, while other code is still accessing them on the assumption that they would remain allocated.
ImportantCVE-2022-42332SUSE bug 1209017cpe:/o:opensuse:leap-micro:5.3CVE-2022-42333openSUSE Leap Micro 5.3
x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged entities, e.g. qemu running deprivileged in Dom0 or qemu running in a so called stub-domain. With this exposure it is an issue that - the number of the such controlled regions was unbounded (CVE-2022-42333), - installation and removal of such regions was not properly serialized (CVE-2022-42334).
ModerateCVE-2022-42333SUSE bug 1209018cpe:/o:opensuse:leap-micro:5.3CVE-2022-42334openSUSE Leap Micro 5.3
x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged entities, e.g. qemu running deprivileged in Dom0 or qemu running in a so called stub-domain. With this exposure it is an issue that - the number of the such controlled regions was unbounded (CVE-2022-42333), - installation and removal of such regions was not properly serialized (CVE-2022-42334).
ModerateCVE-2022-42334SUSE bug 1209018cpe:/o:opensuse:leap-micro:5.3CVE-2022-4269openSUSE Leap Micro 5.3
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.
ModerateCVE-2022-4269SUSE bug 1206024cpe:/o:opensuse:leap-micro:5.3CVE-2022-42898openSUSE Leap Micro 5.3
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."
ModerateCVE-2022-42898SUSE bug 1205126SUSE bug 1205667SUSE bug 1207423SUSE bug 1207690SUSE bug 1211487cpe:/o:opensuse:leap-micro:5.3CVE-2022-4292openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.0882.
ImportantCVE-2022-4292SUSE bug 1206075SUSE bug 1208100SUSE bug 1208649SUSE bug 1208651cpe:/o:opensuse:leap-micro:5.3CVE-2022-4293openSUSE Leap Micro 5.3
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
ModerateCVE-2022-4293SUSE bug 1206077SUSE bug 1211489cpe:/o:opensuse:leap-micro:5.3CVE-2022-42969openSUSE Leap Micro 5.3
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
ModerateCVE-2022-42969SUSE bug 1204364cpe:/o:opensuse:leap-micro:5.3CVE-2022-4304openSUSE Leap Micro 5.3
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.
ModerateCVE-2022-4304SUSE bug 1207534SUSE bug 1210067SUSE bug 1213146SUSE bug 1213289SUSE bug 1215014cpe:/o:opensuse:leap-micro:5.3CVE-2022-43551openSUSE Leap Micro 5.3
A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded.
ImportantCVE-2022-43551SUSE bug 1206308cpe:/o:opensuse:leap-micro:5.3CVE-2022-43552openSUSE Leap Micro 5.3
A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.
ModerateCVE-2022-43552SUSE bug 1206309cpe:/o:opensuse:leap-micro:5.3CVE-2022-4379openSUSE Leap Micro 5.3
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial
ImportantCVE-2022-4379SUSE bug 1206209SUSE bug 1206373cpe:/o:opensuse:leap-micro:5.3CVE-2022-4382openSUSE Leap Micro 5.3
A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.
ImportantCVE-2022-4382SUSE bug 1206258SUSE bug 1206363cpe:/o:opensuse:leap-micro:5.3CVE-2022-4415openSUSE Leap Micro 5.3
A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.
ModerateCVE-2022-4415SUSE bug 1205000cpe:/o:opensuse:leap-micro:5.3CVE-2022-4450openSUSE Leap Micro 5.3
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. This could be exploited by an attacker who has the ability to supply malicious PEM files for parsing to achieve a denial of service attack. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. These locations include the PEM_read_bio_TYPE() functions as well as the decoders introduced in OpenSSL 3.0. The OpenSSL asn1parse command line application is also impacted by this issue.
ModerateCVE-2022-4450SUSE bug 1207538cpe:/o:opensuse:leap-micro:5.3CVE-2022-44638openSUSE Leap Micro 5.3
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.
ImportantCVE-2022-44638SUSE bug 1205033SUSE bug 1208313SUSE bug 1208345SUSE bug 1211497cpe:/o:opensuse:leap-micro:5.3CVE-2022-44792openSUSE Leap Micro 5.3
handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
ModerateCVE-2022-44792SUSE bug 1205150SUSE bug 1207896cpe:/o:opensuse:leap-micro:5.3CVE-2022-44793openSUSE Leap Micro 5.3
handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
ModerateCVE-2022-44793SUSE bug 1205148SUSE bug 1207896cpe:/o:opensuse:leap-micro:5.3CVE-2022-45061openSUSE Leap Micro 5.3
An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.
ModerateCVE-2022-45061SUSE bug 1205244SUSE bug 1211488cpe:/o:opensuse:leap-micro:5.3CVE-2022-45154openSUSE Leap Micro 5.3
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions.
ModerateCVE-2022-45154SUSE bug 1207598cpe:/o:opensuse:leap-micro:5.3CVE-2022-45884openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.
ModerateCVE-2022-45884SUSE bug 1205756cpe:/o:opensuse:leap-micro:5.3CVE-2022-45885openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected.
ModerateCVE-2022-45885SUSE bug 1205758cpe:/o:opensuse:leap-micro:5.3CVE-2022-45886openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free.
ModerateCVE-2022-45886SUSE bug 1205760cpe:/o:opensuse:leap-micro:5.3CVE-2022-45887openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call.
ModerateCVE-2022-45887SUSE bug 1205762cpe:/o:opensuse:leap-micro:5.3CVE-2022-45919openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect after an open, because of the lack of a wait_event.
ImportantCVE-2022-45919SUSE bug 1205803SUSE bug 1208912SUSE bug 1214128SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.3CVE-2022-4662openSUSE Leap Micro 5.3
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.
ModerateCVE-2022-4662SUSE bug 1206664cpe:/o:opensuse:leap-micro:5.3CVE-2022-46663openSUSE Leap Micro 5.3
In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.
ModerateCVE-2022-46663SUSE bug 1207815cpe:/o:opensuse:leap-micro:5.3CVE-2022-46908openSUSE Leap Micro 5.3
SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.
ImportantCVE-2022-46908SUSE bug 1206337cpe:/o:opensuse:leap-micro:5.3CVE-2022-4744openSUSE Leap Micro 5.3
A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.
ImportantCVE-2022-4744SUSE bug 1209635SUSE bug 1209672SUSE bug 1211833cpe:/o:opensuse:leap-micro:5.3CVE-2022-47520openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet.
ImportantCVE-2022-47520SUSE bug 1206515SUSE bug 1207823cpe:/o:opensuse:leap-micro:5.3CVE-2022-47629openSUSE Leap Micro 5.3
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
ImportantCVE-2022-47629SUSE bug 1206579cpe:/o:opensuse:leap-micro:5.3CVE-2022-47929openSUSE Leap Micro 5.3
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdisc_graft in net/sched/sch_api.c.
ModerateCVE-2022-47929SUSE bug 1207237cpe:/o:opensuse:leap-micro:5.3CVE-2022-48281openSUSE Leap Micro 5.3
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
ImportantCVE-2022-48281SUSE bug 1207413SUSE bug 1208655SUSE bug 1209328SUSE bug 1209937cpe:/o:opensuse:leap-micro:5.3CVE-2022-48303openSUSE Leap Micro 5.3
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.
ModerateCVE-2022-48303SUSE bug 1207753cpe:/o:opensuse:leap-micro:5.3CVE-2022-4899openSUSE Leap Micro 5.3
A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
ModerateCVE-2022-4899SUSE bug 1209533cpe:/o:opensuse:leap-micro:5.3CVE-2022-4904openSUSE Leap Micro 5.3
A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.
ModerateCVE-2022-4904SUSE bug 1208067cpe:/o:opensuse:leap-micro:5.3CVE-2023-0045openSUSE Leap Micro 5.3
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set ?function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update, but the IBPB is only issued on the next schedule, when the TIF bits are checked. This leaves the victim vulnerable to values already injected on the BTB, prior to the prctl syscall. ?The patch that added the support for the conditional mitigation via prctl (ib_prctl_set) dates back to the kernel 4.9.176.
We recommend upgrading past commit?a664ec9158eeddd75121d39c9a0758016097fa96
ModerateCVE-2023-0045SUSE bug 1207773cpe:/o:opensuse:leap-micro:5.3CVE-2023-0049openSUSE Leap Micro 5.3
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
ModerateCVE-2023-0049SUSE bug 1206866cpe:/o:opensuse:leap-micro:5.3CVE-2023-0051openSUSE Leap Micro 5.3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
ModerateCVE-2023-0051SUSE bug 1206867cpe:/o:opensuse:leap-micro:5.3CVE-2023-0054openSUSE Leap Micro 5.3
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
ModerateCVE-2023-0054SUSE bug 1206868cpe:/o:opensuse:leap-micro:5.3CVE-2023-0056openSUSE Leap Micro 5.3
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.
ImportantCVE-2023-0056SUSE bug 1207181cpe:/o:opensuse:leap-micro:5.3CVE-2023-0122openSUSE Leap Micro 5.3
A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4.
ModerateCVE-2023-0122SUSE bug 1207050cpe:/o:opensuse:leap-micro:5.3CVE-2023-0179openSUSE Leap Micro 5.3
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
ImportantCVE-2023-0179SUSE bug 1207034SUSE bug 1207139SUSE bug 1215208cpe:/o:opensuse:leap-micro:5.3CVE-2023-0215openSUSE Leap Micro 5.3
The public API function BIO_new_NDEF is a helper function used for streaming
ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the
SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by
end user applications.
The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter
BIO onto the front of it to form a BIO chain, and then returns the new head of
the BIO chain to the caller. Under certain conditions, for example if a CMS
recipient public key is invalid, the new filter BIO is freed and the function
returns a NULL result indicating a failure. However, in this case, the BIO chain
is not properly cleaned up and the BIO passed by the caller still retains
internal pointers to the previously freed filter BIO. If the caller then goes on
to call BIO_pop() on the BIO then a use-after-free will occur. This will most
likely result in a crash.
This scenario occurs directly in the internal function B64_write_ASN1() which
may cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on
the BIO. This internal function is in turn called by the public API functions
PEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,
SMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.
Other public API functions that may be impacted by this include
i2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and
i2d_PKCS7_bio_stream.
The OpenSSL cms and smime command line applications are similarly affected.
ModerateCVE-2023-0215SUSE bug 1207536SUSE bug 1213146cpe:/o:opensuse:leap-micro:5.3CVE-2023-0225openSUSE Leap Micro 5.3
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
ModerateCVE-2023-0225SUSE bug 1209483cpe:/o:opensuse:leap-micro:5.3CVE-2023-0266openSUSE Leap Micro 5.3
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel.?SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit?56b88b50565cd8b946a2d00b0c83927b7ebb055e
ImportantCVE-2023-0266SUSE bug 1207134SUSE bug 1207190SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.3CVE-2023-0286openSUSE Leap Micro 5.3
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.
ImportantCVE-2023-0286SUSE bug 1207533SUSE bug 1207569SUSE bug 1211136SUSE bug 1211503SUSE bug 1213146SUSE bug 1214269cpe:/o:opensuse:leap-micro:5.3CVE-2023-0288openSUSE Leap Micro 5.3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
ModerateCVE-2023-0288SUSE bug 1207162cpe:/o:opensuse:leap-micro:5.3CVE-2023-0330openSUSE Leap Micro 5.3
A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.
ModerateCVE-2023-0330SUSE bug 1207205cpe:/o:opensuse:leap-micro:5.3CVE-2023-0386openSUSE Leap Micro 5.3
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
ImportantCVE-2023-0386SUSE bug 1209615SUSE bug 1210499cpe:/o:opensuse:leap-micro:5.3CVE-2023-0394openSUSE Leap Micro 5.3
A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.
ModerateCVE-2023-0394SUSE bug 1207168cpe:/o:opensuse:leap-micro:5.3CVE-2023-0433openSUSE Leap Micro 5.3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
LowCVE-2023-0433SUSE bug 1207396cpe:/o:opensuse:leap-micro:5.3CVE-2023-0459openSUSE Leap Micro 5.3
Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit?74e19ef0ff8061ef55957c3abd71614ef0f42f47
ModerateCVE-2023-0459SUSE bug 1211738SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.3CVE-2023-0461openSUSE Leap Micro 5.3
There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS?or CONFIG_XFRM_ESPINTCP?has to be configured, but the operation does not require any privilege.
There is a use-after-free bug of icsk_ulp_data?of a struct inet_connection_sock.
When CONFIG_TLS?is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.
The setsockopt?TCP_ULP?operation does not require any privilege.
We recommend upgrading past commit?2c02d41d71f90a5168391b6a5f2954112ba2307c
ImportantCVE-2023-0461SUSE bug 1208787SUSE bug 1208911SUSE bug 1211833cpe:/o:opensuse:leap-micro:5.3CVE-2023-0464openSUSE Leap Micro 5.3
A security vulnerability has been identified in all supported versions
of OpenSSL related to the verification of X.509 certificate chains
that include policy constraints. Attackers may be able to exploit this
vulnerability by creating a malicious certificate chain that triggers
exponential use of computational resources, leading to a denial-of-service
(DoS) attack on affected systems.
Policy processing is disabled by default but can be enabled by passing
the `-policy' argument to the command line utilities or by calling the
`X509_VERIFY_PARAM_set1_policies()' function.
ModerateCVE-2023-0464SUSE bug 1209624cpe:/o:opensuse:leap-micro:5.3CVE-2023-0465openSUSE Leap Micro 5.3
Applications that use a non-default option when verifying certificates may be
vulnerable to an attack from a malicious CA to circumvent certain checks.
Invalid certificate policies in leaf certificates are silently ignored by
OpenSSL and other certificate policy checks are skipped for that certificate.
A malicious CA could use this to deliberately assert invalid certificate policies
in order to circumvent policy checking on the certificate altogether.
Policy processing is disabled by default but can be enabled by passing
the `-policy' argument to the command line utilities or by calling the
`X509_VERIFY_PARAM_set1_policies()' function.
ModerateCVE-2023-0465SUSE bug 1209878SUSE bug 1212331SUSE bug 1215014cpe:/o:opensuse:leap-micro:5.3CVE-2023-0466openSUSE Leap Micro 5.3
The function X509_VERIFY_PARAM_add0_policy() is documented to
implicitly enable the certificate policy check when doing certificate
verification. However the implementation of the function does not
enable the check which allows certificates with invalid or incorrect
policies to pass the certificate verification.
As suddenly enabling the policy check could break existing deployments it was
decided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()
function.
Instead the applications that require OpenSSL to perform certificate
policy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly
enable the policy check by calling X509_VERIFY_PARAM_set_flags() with
the X509_V_FLAG_POLICY_CHECK flag argument.
Certificate policy checks are disabled by default in OpenSSL and are not
commonly used by applications.
ModerateCVE-2023-0466SUSE bug 1209873cpe:/o:opensuse:leap-micro:5.3CVE-2023-0512openSUSE Leap Micro 5.3
Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
ImportantCVE-2023-0512SUSE bug 1207780SUSE bug 1210385cpe:/o:opensuse:leap-micro:5.3CVE-2023-0590openSUSE Leap Micro 5.3
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.
ImportantCVE-2023-0590SUSE bug 1207795SUSE bug 1207822SUSE bug 1211495SUSE bug 1211833cpe:/o:opensuse:leap-micro:5.3CVE-2023-0597openSUSE Leap Micro 5.3
A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some important data with expected location in memory.
ModerateCVE-2023-0597SUSE bug 1207845SUSE bug 1212395SUSE bug 1213271cpe:/o:opensuse:leap-micro:5.3CVE-2023-0614openSUSE Leap Micro 5.3
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
ModerateCVE-2023-0614SUSE bug 1209485cpe:/o:opensuse:leap-micro:5.3CVE-2023-0687openSUSE Leap Micro 5.3
** DISPUTED ** A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.
LowCVE-2023-0687SUSE bug 1207975cpe:/o:opensuse:leap-micro:5.3CVE-2023-0767openSUSE Leap Micro 5.3
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
ImportantCVE-2023-0767SUSE bug 1208138SUSE bug 1213200SUSE bug 1213818SUSE bug 1214271cpe:/o:opensuse:leap-micro:5.3CVE-2023-0778openSUSE Leap Micro 5.3
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
ModerateCVE-2023-0778SUSE bug 1208364cpe:/o:opensuse:leap-micro:5.3CVE-2023-0795openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0795SUSE bug 1208226cpe:/o:opensuse:leap-micro:5.3CVE-2023-0796openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0796SUSE bug 1208227cpe:/o:opensuse:leap-micro:5.3CVE-2023-0797openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0797SUSE bug 1208228cpe:/o:opensuse:leap-micro:5.3CVE-2023-0798openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0798SUSE bug 1208229cpe:/o:opensuse:leap-micro:5.3CVE-2023-0799openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0799SUSE bug 1208230cpe:/o:opensuse:leap-micro:5.3CVE-2023-0800openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0800SUSE bug 1208231cpe:/o:opensuse:leap-micro:5.3CVE-2023-0801openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0801SUSE bug 1208232cpe:/o:opensuse:leap-micro:5.3CVE-2023-0802openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0802SUSE bug 1208233cpe:/o:opensuse:leap-micro:5.3CVE-2023-0803openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0803SUSE bug 1208234cpe:/o:opensuse:leap-micro:5.3CVE-2023-0804openSUSE Leap Micro 5.3
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0804SUSE bug 1208236cpe:/o:opensuse:leap-micro:5.3CVE-2023-0922openSUSE Leap Micro 5.3
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
ModerateCVE-2023-0922SUSE bug 1209481cpe:/o:opensuse:leap-micro:5.3CVE-2023-0950openSUSE Leap Micro 5.3
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.6; 7.5 versions prior to 7.5.1.
ImportantCVE-2023-0950SUSE bug 1209242cpe:/o:opensuse:leap-micro:5.3CVE-2023-1017openSUSE Leap Micro 5.3
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
ImportantCVE-2023-1017SUSE bug 1206022cpe:/o:opensuse:leap-micro:5.3CVE-2023-1018openSUSE Leap Micro 5.3
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
LowCVE-2023-1018SUSE bug 1206023cpe:/o:opensuse:leap-micro:5.3CVE-2023-1075openSUSE Leap Micro 5.3
A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec->tx_ready.
LowCVE-2023-1075SUSE bug 1208598cpe:/o:opensuse:leap-micro:5.3CVE-2023-1076openSUSE Leap Micro 5.3
A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.
ModerateCVE-2023-1076SUSE bug 1208599SUSE bug 1214019cpe:/o:opensuse:leap-micro:5.3CVE-2023-1077openSUSE Leap Micro 5.3
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.
ImportantCVE-2023-1077SUSE bug 1208600SUSE bug 1208839SUSE bug 1213841SUSE bug 1213842cpe:/o:opensuse:leap-micro:5.3CVE-2023-1078openSUSE Leap Micro 5.3
A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.
ImportantCVE-2023-1078SUSE bug 1208601SUSE bug 1208603cpe:/o:opensuse:leap-micro:5.3CVE-2023-1079openSUSE Leap Micro 5.3
A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.
ModerateCVE-2023-1079SUSE bug 1208604cpe:/o:opensuse:leap-micro:5.3CVE-2023-1095openSUSE Leap Micro 5.3
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.
ModerateCVE-2023-1095SUSE bug 1208777cpe:/o:opensuse:leap-micro:5.3CVE-2023-1118openSUSE Leap Micro 5.3
A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
ModerateCVE-2023-1118SUSE bug 1208837SUSE bug 1208910SUSE bug 1210423SUSE bug 1211495SUSE bug 1213841SUSE bug 1213842cpe:/o:opensuse:leap-micro:5.3CVE-2023-1127openSUSE Leap Micro 5.3
Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.
ModerateCVE-2023-1127SUSE bug 1208828cpe:/o:opensuse:leap-micro:5.3CVE-2023-1170openSUSE Leap Micro 5.3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.
ModerateCVE-2023-1170SUSE bug 1208959cpe:/o:opensuse:leap-micro:5.3CVE-2023-1175openSUSE Leap Micro 5.3
Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
ModerateCVE-2023-1175SUSE bug 1208957cpe:/o:opensuse:leap-micro:5.3CVE-2023-1192openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-1192SUSE bug 1208995cpe:/o:opensuse:leap-micro:5.3CVE-2023-1206openSUSE Leap Micro 5.3
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.
ModerateCVE-2023-1206SUSE bug 1212703cpe:/o:opensuse:leap-micro:5.3CVE-2023-1249openSUSE Leap Micro 5.3
A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 ("coredump: Use the vma snapshot in fill_files_note") not applied yet, then kernel could be affected.
ModerateCVE-2023-1249SUSE bug 1209039cpe:/o:opensuse:leap-micro:5.3CVE-2023-1264openSUSE Leap Micro 5.3
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.
ModerateCVE-2023-1264SUSE bug 1209042cpe:/o:opensuse:leap-micro:5.3CVE-2023-1281openSUSE Leap Micro 5.3
Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation.?The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext.?A local attacker user can use this vulnerability to elevate its privileges to root.
This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.
ImportantCVE-2023-1281SUSE bug 1209634SUSE bug 1209683SUSE bug 1210335SUSE bug 1210423SUSE bug 1211833cpe:/o:opensuse:leap-micro:5.3CVE-2023-1355openSUSE Leap Micro 5.3
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.
ModerateCVE-2023-1355SUSE bug 1209187cpe:/o:opensuse:leap-micro:5.3CVE-2023-1380openSUSE Leap Micro 5.3
A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.
LowCVE-2023-1380SUSE bug 1209287cpe:/o:opensuse:leap-micro:5.3CVE-2023-1382openSUSE Leap Micro 5.3
A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel.
ModerateCVE-2023-1382SUSE bug 1209288cpe:/o:opensuse:leap-micro:5.3CVE-2023-1513openSUSE Leap Micro 5.3
A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.
LowCVE-2023-1513SUSE bug 1209532cpe:/o:opensuse:leap-micro:5.3CVE-2023-1582openSUSE Leap Micro 5.3
A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service.
ModerateCVE-2023-1582SUSE bug 1209636cpe:/o:opensuse:leap-micro:5.3CVE-2023-1611openSUSE Leap Micro 5.3
A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea
ModerateCVE-2023-1611SUSE bug 1209687cpe:/o:opensuse:leap-micro:5.3CVE-2023-1637openSUSE Leap Micro 5.3
A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.
ModerateCVE-2023-1637SUSE bug 1209779cpe:/o:opensuse:leap-micro:5.3CVE-2023-1652openSUSE Leap Micro 5.3
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.
ModerateCVE-2023-1652SUSE bug 1209788SUSE bug 1209797cpe:/o:opensuse:leap-micro:5.3CVE-2023-1670openSUSE Leap Micro 5.3
A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
ModerateCVE-2023-1670SUSE bug 1209871cpe:/o:opensuse:leap-micro:5.3CVE-2023-1829openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation.?The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure.?A local attacker user can use this vulnerability to elevate its privileges to root.
We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.
ImportantCVE-2023-1829SUSE bug 1210335SUSE bug 1210619cpe:/o:opensuse:leap-micro:5.3CVE-2023-1838openSUSE Leap Micro 5.3
A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.
ModerateCVE-2023-1838SUSE bug 1210203cpe:/o:opensuse:leap-micro:5.3CVE-2023-1855openSUSE Leap Micro 5.3
A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.
ModerateCVE-2023-1855SUSE bug 1210202cpe:/o:opensuse:leap-micro:5.3CVE-2023-1859openSUSE Leap Micro 5.3
A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.
LowCVE-2023-1859SUSE bug 1210169cpe:/o:opensuse:leap-micro:5.3CVE-2023-1981openSUSE Leap Micro 5.3
A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.
ModerateCVE-2023-1981SUSE bug 1210328cpe:/o:opensuse:leap-micro:5.3CVE-2023-1989openSUSE Leap Micro 5.3
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.
ImportantCVE-2023-1989SUSE bug 1210336SUSE bug 1210500SUSE bug 1213841SUSE bug 1213842SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.3CVE-2023-1990openSUSE Leap Micro 5.3
A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.
ModerateCVE-2023-1990SUSE bug 1210337SUSE bug 1210501SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.3CVE-2023-1998openSUSE Leap Micro 5.3
The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The same behavior can be observed on a bare-metal machine when forcing the mitigation to IBRS on boot command line.
This happened because when plain IBRS was enabled (not enhanced IBRS), the kernel had some logic that determined that STIBP was not needed. The IBRS bit implicitly protects against cross-thread branch target injection. However, with legacy IBRS, the IBRS bit was cleared on returning to userspace, due to performance reasons, which disabled the implicit STIBP and left userspace threads vulnerable to cross-thread branch target injection against which STIBP protects.
ModerateCVE-2023-1998SUSE bug 1210506cpe:/o:opensuse:leap-micro:5.3CVE-2023-2002openSUSE Leap Micro 5.3
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.
ModerateCVE-2023-2002SUSE bug 1210533SUSE bug 1210566cpe:/o:opensuse:leap-micro:5.3CVE-2023-2004openSUSE Leap Micro 5.3
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
ModerateCVE-2023-2004SUSE bug 1210419cpe:/o:opensuse:leap-micro:5.3CVE-2023-2007openSUSE Leap Micro 5.3
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.
ModerateCVE-2023-2007SUSE bug 1210448cpe:/o:opensuse:leap-micro:5.3CVE-2023-2008openSUSE Leap Micro 5.3
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
ModerateCVE-2023-2008SUSE bug 1210453cpe:/o:opensuse:leap-micro:5.3CVE-2023-2019openSUSE Leap Micro 5.3
A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.
ModerateCVE-2023-2019SUSE bug 1210454cpe:/o:opensuse:leap-micro:5.3CVE-2023-20569openSUSE Leap Micro 5.3
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
ModerateCVE-2023-20569SUSE bug 1213287cpe:/o:opensuse:leap-micro:5.3CVE-2023-20588openSUSE Leap Micro 5.3
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.?
ModerateCVE-2023-20588SUSE bug 1213927cpe:/o:opensuse:leap-micro:5.3CVE-2023-20593openSUSE Leap Micro 5.3
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
ModerateCVE-2023-20593SUSE bug 1213286SUSE bug 1213616SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.3CVE-2023-20867openSUSE Leap Micro 5.3
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
LowCVE-2023-20867SUSE bug 1212143SUSE bug 1214402cpe:/o:opensuse:leap-micro:5.3CVE-2023-20897openSUSE Leap Micro 5.3
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
ModerateCVE-2023-20897SUSE bug 1214796cpe:/o:opensuse:leap-micro:5.3CVE-2023-20898openSUSE Leap Micro 5.3
Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.
ModerateCVE-2023-20898SUSE bug 1214797cpe:/o:opensuse:leap-micro:5.3CVE-2023-20900openSUSE Leap Micro 5.3
A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html ?in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
ImportantCVE-2023-20900SUSE bug 1214566cpe:/o:opensuse:leap-micro:5.3CVE-2023-21102openSUSE Leap Micro 5.3
In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel
ImportantCVE-2023-21102SUSE bug 1212155SUSE bug 1212346cpe:/o:opensuse:leap-micro:5.3CVE-2023-2124openSUSE Leap Micro 5.3
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.
ModerateCVE-2023-2124SUSE bug 1210498cpe:/o:opensuse:leap-micro:5.3CVE-2023-21400openSUSE Leap Micro 5.3
In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.
ModerateCVE-2023-21400SUSE bug 1213272cpe:/o:opensuse:leap-micro:5.3CVE-2023-2156openSUSE Leap Micro 5.3
A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.
ImportantCVE-2023-2156SUSE bug 1211131SUSE bug 1211395cpe:/o:opensuse:leap-micro:5.3CVE-2023-2162openSUSE Leap Micro 5.3
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.
ModerateCVE-2023-2162SUSE bug 1210647SUSE bug 1210662SUSE bug 1213841SUSE bug 1213842SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.3CVE-2023-2166openSUSE Leap Micro 5.3
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.
ModerateCVE-2023-2166SUSE bug 1210627cpe:/o:opensuse:leap-micro:5.3CVE-2023-2176openSUSE Leap Micro 5.3
A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege.
ImportantCVE-2023-2176SUSE bug 1210629SUSE bug 1210630SUSE bug 1213842cpe:/o:opensuse:leap-micro:5.3CVE-2023-2177openSUSE Leap Micro 5.3
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.
ModerateCVE-2023-2177SUSE bug 1210643cpe:/o:opensuse:leap-micro:5.3CVE-2023-2235openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.
The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but?remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.
We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.
ImportantCVE-2023-2235SUSE bug 1210986SUSE bug 1210987cpe:/o:opensuse:leap-micro:5.3CVE-2023-2255openSUSE Leap Micro 5.3
Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3.
ImportantCVE-2023-2255SUSE bug 1211746cpe:/o:opensuse:leap-micro:5.3CVE-2023-22652openSUSE Leap Micro 5.3
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files.
This issue affects libeconf: before 0.5.2.
ImportantCVE-2023-22652SUSE bug 1211078cpe:/o:opensuse:leap-micro:5.3CVE-2023-2269openSUSE Leap Micro 5.3
A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.
ModerateCVE-2023-2269SUSE bug 1210806cpe:/o:opensuse:leap-micro:5.3CVE-2023-22745openSUSE Leap Micro 5.3
tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In affected versions `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `layer_handler` with an 8 bit layer number, but the array only has `TPM2_ERROR_TSS2_RC_LAYER_COUNT` entries, so trying to add a handler for higher-numbered layers or decode a response code with such a layer number reads/writes past the end of the buffer. This Buffer overrun, could result in arbitrary code execution. An example attack would be a MiTM bus attack that returns 0xFFFFFFFF for the RC. Given the common use case of TPM modules an attacker must have local access to the target machine with local system privileges which allows access to the TPM system. Usually TPM access requires administrative privilege.
ModerateCVE-2023-22745SUSE bug 1207325cpe:/o:opensuse:leap-micro:5.3CVE-2023-22809openSUSE Leap Micro 5.3
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.
ImportantCVE-2023-22809SUSE bug 1207082SUSE bug 1208053SUSE bug 1209326SUSE bug 1214446cpe:/o:opensuse:leap-micro:5.3CVE-2023-22995openSUSE Leap Micro 5.3
In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls.
LowCVE-2023-22995SUSE bug 1208741cpe:/o:opensuse:leap-micro:5.3CVE-2023-22998openSUSE Leap Micro 5.3
In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
ModerateCVE-2023-22998SUSE bug 1208776cpe:/o:opensuse:leap-micro:5.3CVE-2023-23000openSUSE Leap Micro 5.3
In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used.
LowCVE-2023-23000SUSE bug 1208816cpe:/o:opensuse:leap-micro:5.3CVE-2023-23001openSUSE Leap Micro 5.3
In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
LowCVE-2023-23001SUSE bug 1208829cpe:/o:opensuse:leap-micro:5.3CVE-2023-23004openSUSE Leap Micro 5.3
In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
LowCVE-2023-23004SUSE bug 1208843cpe:/o:opensuse:leap-micro:5.3CVE-2023-23006openSUSE Leap Micro 5.3
In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
ModerateCVE-2023-23006SUSE bug 1208845cpe:/o:opensuse:leap-micro:5.3CVE-2023-23454openSUSE Leap Micro 5.3
cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).
ImportantCVE-2023-23454SUSE bug 1207036SUSE bug 1207188SUSE bug 1208030SUSE bug 1208044SUSE bug 1208085SUSE bug 1211833cpe:/o:opensuse:leap-micro:5.3CVE-2023-23455openSUSE Leap Micro 5.3
atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).
ImportantCVE-2023-23455SUSE bug 1207125SUSE bug 1207189SUSE bug 1211833cpe:/o:opensuse:leap-micro:5.3CVE-2023-23559openSUSE Leap Micro 5.3
In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
ModerateCVE-2023-23559SUSE bug 1207051cpe:/o:opensuse:leap-micro:5.3CVE-2023-23908openSUSE Leap Micro 5.3
Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.
ImportantCVE-2023-23908cpe:/o:opensuse:leap-micro:5.3CVE-2023-23914openSUSE Leap Micro 5.3
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.
ImportantCVE-2023-23914SUSE bug 1207990SUSE bug 1207991cpe:/o:opensuse:leap-micro:5.3CVE-2023-23915openSUSE Leap Micro 5.3
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS.
ImportantCVE-2023-23915SUSE bug 1207991cpe:/o:opensuse:leap-micro:5.3CVE-2023-23916openSUSE Leap Micro 5.3
An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable "links" in this "decompression chain" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a "malloc bomb", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.
ModerateCVE-2023-23916SUSE bug 1207992cpe:/o:opensuse:leap-micro:5.3CVE-2023-23931openSUSE Leap Micro 5.3
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.
LowCVE-2023-23931SUSE bug 1208036cpe:/o:opensuse:leap-micro:5.3CVE-2023-2426openSUSE Leap Micro 5.3
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
ModerateCVE-2023-2426SUSE bug 1210996cpe:/o:opensuse:leap-micro:5.3CVE-2023-24329openSUSE Leap Micro 5.3
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
ImportantCVE-2023-24329SUSE bug 1208471SUSE bug 1213553SUSE bug 1213554SUSE bug 1213839cpe:/o:opensuse:leap-micro:5.3CVE-2023-24593openSUSE Leap Micro 5.3
** REJECT ** Rejected by upstream.
ModerateCVE-2023-24593SUSE bug 1209714cpe:/o:opensuse:leap-micro:5.3CVE-2023-2483openSUSE Leap Micro 5.3
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
ModerateCVE-2023-2483SUSE bug 1211037cpe:/o:opensuse:leap-micro:5.3CVE-2023-25012openSUSE Leap Micro 5.3
The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.
ModerateCVE-2023-25012SUSE bug 1207560SUSE bug 1207846cpe:/o:opensuse:leap-micro:5.3CVE-2023-2513openSUSE Leap Micro 5.3
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors.
ModerateCVE-2023-2513SUSE bug 1211105cpe:/o:opensuse:leap-micro:5.3CVE-2023-25153openSUSE Leap Micro 5.3
containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of service. This bug has been fixed in containerd 1.6.18 and 1.5.18. Users should update to these versions to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.
ModerateCVE-2023-25153SUSE bug 1208423cpe:/o:opensuse:leap-micro:5.3CVE-2023-25173openSUSE Leap Micro 5.3
containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. Downstream applications that use the containerd client library may be affected as well.
This bug has been fixed in containerd v1.6.18 and v.1.5.18. Users should update to these versions and recreate containers to resolve this issue. Users who rely on a downstream application that uses containerd's client library should check that application for a separate advisory and instructions. As a workaround, ensure that the `"USER $USERNAME"` Dockerfile instruction is not used. Instead, set the container entrypoint to a value similar to `ENTRYPOINT ["su", "-", "user"]` to allow `su` to properly set up supplementary groups.
ModerateCVE-2023-25173SUSE bug 1208426SUSE bug 1215588cpe:/o:opensuse:leap-micro:5.3CVE-2023-25180openSUSE Leap Micro 5.3
** REJECT ** Rejected by upstream.
ModerateCVE-2023-25180SUSE bug 1209713cpe:/o:opensuse:leap-micro:5.3CVE-2023-25193openSUSE Leap Micro 5.3
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
ImportantCVE-2023-25193SUSE bug 1207922SUSE bug 1213939cpe:/o:opensuse:leap-micro:5.3CVE-2023-25725openSUSE Leap Micro 5.3
HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.
CriticalCVE-2023-25725SUSE bug 1208132cpe:/o:opensuse:leap-micro:5.3CVE-2023-25809openSUSE Leap Micro 5.3
runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes `/sys/fs/cgroup` writable in following conditons: 1. when runc is executed inside the user namespace, and the `config.json` does not specify the cgroup namespace to be unshared (e.g.., `(docker|podman|nerdctl) run --cgroupns=host`, with Rootless Docker/Podman/nerdctl) or 2. when runc is executed outside the user namespace, and `/sys` is mounted with `rbind, ro` (e.g., `runc spec --rootless`; this condition is very rare). A container may gain the write access to user-owned cgroup hierarchy `/sys/fs/cgroup/user.slice/...` on the host . Other users's cgroup hierarchies are not affected. Users are advised to upgrade to version 1.1.5. Users unable to upgrade may unshare the cgroup namespace (`(docker|podman|nerdctl) run --cgroupns=private)`. This is the default behavior of Docker/Podman/nerdctl on cgroup v2 hosts. or add `/sys/fs/cgroup` to `maskedPaths`.
LowCVE-2023-25809SUSE bug 1209884cpe:/o:opensuse:leap-micro:5.3CVE-2023-2602openSUSE Leap Micro 5.3
A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.
LowCVE-2023-2602SUSE bug 1211418cpe:/o:opensuse:leap-micro:5.3CVE-2023-2603openSUSE Leap Micro 5.3
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
ModerateCVE-2023-2603SUSE bug 1211419cpe:/o:opensuse:leap-micro:5.3CVE-2023-2609openSUSE Leap Micro 5.3
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.
ImportantCVE-2023-2609SUSE bug 1211256cpe:/o:opensuse:leap-micro:5.3CVE-2023-2610openSUSE Leap Micro 5.3
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.
ImportantCVE-2023-2610SUSE bug 1211257cpe:/o:opensuse:leap-micro:5.3CVE-2023-26484openSUSE Leap Micro 5.3
KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicious user has taken over a Kubernetes node where virt-handler (the KubeVirt node-daemon) is running, the virt-handler service account can be used to modify all node specs. This can be misused to lure-in system-level-privileged components which can, for instance, read all secrets on the cluster, or can exec into pods on other nodes. This way, a compromised node can be used to elevate privileges beyond the node until potentially having full privileged access to the whole cluster. The simplest way to exploit this, once a user could compromise a specific node, is to set with the virt-handler service account all other nodes to unschedulable and simply wait until system-critical components with high privileges appear on its node. No patches are available as of time of publication. As a workaround, gatekeeper users can add a webhook which will block the `virt-handler` service account to modify the spec of a node.
ImportantCVE-2023-26484SUSE bug 1209359cpe:/o:opensuse:leap-micro:5.3CVE-2023-2650openSUSE Leap Micro 5.3
Issue summary: Processing some specially crafted ASN.1 object identifiers or
data containing them may be very slow.
Impact summary: Applications that use OBJ_obj2txt() directly, or use any of
the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message
size limit may experience notable to very long delays when processing those
messages, which may lead to a Denial of Service.
An OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -
most of which have no size limit. OBJ_obj2txt() may be used to translate
an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL
type ASN1_OBJECT) to its canonical numeric text form, which are the
sub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by
periods.
When one of the sub-identifiers in the OBJECT IDENTIFIER is very large
(these are sizes that are seen as absurdly large, taking up tens or hundreds
of KiBs), the translation to a decimal number in text may take a very long
time. The time complexity is O(n^2) with 'n' being the size of the
sub-identifiers in bytes (*).
With OpenSSL 3.0, support to fetch cryptographic algorithms using names /
identifiers in string form was introduced. This includes using OBJECT
IDENTIFIERs in canonical numeric text form as identifiers for fetching
algorithms.
Such OBJECT IDENTIFIERs may be received through the ASN.1 structure
AlgorithmIdentifier, which is commonly used in multiple protocols to specify
what cryptographic algorithm should be used to sign or verify, encrypt or
decrypt, or digest passed data.
Applications that call OBJ_obj2txt() directly with untrusted data are
affected, with any version of OpenSSL. If the use is for the mere purpose
of display, the severity is considered low.
In OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,
CMS, CMP/CRMF or TS. It also impacts anything that processes X.509
certificates, including simple things like verifying its signature.
The impact on TLS is relatively low, because all versions of OpenSSL have a
100KiB limit on the peer's certificate chain. Additionally, this only
impacts clients, or servers that have explicitly enabled client
authentication.
In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,
such as X.509 certificates. This is assumed to not happen in such a way
that it would cause a Denial of Service, so these versions are considered
not affected by this issue in such a way that it would be cause for concern,
and the severity is therefore considered low.
ModerateCVE-2023-2650SUSE bug 1211430cpe:/o:opensuse:leap-micro:5.3CVE-2023-26545openSUSE Leap Micro 5.3
In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device.
ModerateCVE-2023-26545SUSE bug 1208700SUSE bug 1208909SUSE bug 1210423cpe:/o:opensuse:leap-micro:5.3CVE-2023-2700openSUSE Leap Micro 5.3
A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.
ModerateCVE-2023-2700SUSE bug 1211390cpe:/o:opensuse:leap-micro:5.3CVE-2023-27320openSUSE Leap Micro 5.3
Sudo before 1.9.13p2 has a double free in the per-command chroot feature.
ModerateCVE-2023-27320SUSE bug 1208595cpe:/o:opensuse:leap-micro:5.3CVE-2023-27349openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-27349SUSE bug 1210398cpe:/o:opensuse:leap-micro:5.3CVE-2023-27371openSUSE Leap Micro 5.3
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
ModerateCVE-2023-27371SUSE bug 1208745cpe:/o:opensuse:leap-micro:5.3CVE-2023-27533openSUSE Leap Micro 5.3
A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.
ModerateCVE-2023-27533SUSE bug 1209209cpe:/o:opensuse:leap-micro:5.3CVE-2023-27534openSUSE Leap Micro 5.3
A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.
ModerateCVE-2023-27534SUSE bug 1209210cpe:/o:opensuse:leap-micro:5.3CVE-2023-27535openSUSE Leap Micro 5.3
An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.
ModerateCVE-2023-27535SUSE bug 1209211cpe:/o:opensuse:leap-micro:5.3CVE-2023-27536openSUSE Leap Micro 5.3
An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.
ModerateCVE-2023-27536SUSE bug 1209212cpe:/o:opensuse:leap-micro:5.3CVE-2023-27538openSUSE Leap Micro 5.3
An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.
ModerateCVE-2023-27538SUSE bug 1209214cpe:/o:opensuse:leap-micro:5.3CVE-2023-27561openSUSE Leap Micro 5.3
runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression.
ModerateCVE-2023-27561SUSE bug 1208962cpe:/o:opensuse:leap-micro:5.3CVE-2023-28319openSUSE Leap Micro 5.3
A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.
ModerateCVE-2023-28319SUSE bug 1211230cpe:/o:opensuse:leap-micro:5.3CVE-2023-28320openSUSE Leap Micro 5.3
A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.
LowCVE-2023-28320SUSE bug 1211231cpe:/o:opensuse:leap-micro:5.3CVE-2023-28321openSUSE Leap Micro 5.3
An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.
ModerateCVE-2023-28321SUSE bug 1211232cpe:/o:opensuse:leap-micro:5.3CVE-2023-28322openSUSE Leap Micro 5.3
An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
ImportantCVE-2023-28322SUSE bug 1211233cpe:/o:opensuse:leap-micro:5.3CVE-2023-28327openSUSE Leap Micro 5.3
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.
ModerateCVE-2023-28327SUSE bug 1209290cpe:/o:opensuse:leap-micro:5.3CVE-2023-28328openSUSE Leap Micro 5.3
A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service.
ModerateCVE-2023-28328SUSE bug 1209291cpe:/o:opensuse:leap-micro:5.3CVE-2023-28370openSUSE Leap Micro 5.3
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
LowCVE-2023-28370SUSE bug 1211741cpe:/o:opensuse:leap-micro:5.3CVE-2023-28410openSUSE Leap Micro 5.3
Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel version 6.2.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
ImportantCVE-2023-28410SUSE bug 1211263SUSE bug 1211819cpe:/o:opensuse:leap-micro:5.3CVE-2023-28464openSUSE Leap Micro 5.3
hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation.
ImportantCVE-2023-28464SUSE bug 1209052SUSE bug 1211111cpe:/o:opensuse:leap-micro:5.3CVE-2023-28466openSUSE Leap Micro 5.3
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
ImportantCVE-2023-28466SUSE bug 1209366SUSE bug 1210452SUSE bug 1211833SUSE bug 1213841cpe:/o:opensuse:leap-micro:5.3CVE-2023-28484openSUSE Leap Micro 5.3
In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.
ModerateCVE-2023-28484SUSE bug 1210411cpe:/o:opensuse:leap-micro:5.3CVE-2023-28486openSUSE Leap Micro 5.3
Sudo before 1.9.13 does not escape control characters in log messages.
ModerateCVE-2023-28486SUSE bug 1209362cpe:/o:opensuse:leap-micro:5.3CVE-2023-28487openSUSE Leap Micro 5.3
Sudo before 1.9.13 does not escape control characters in sudoreplay output.
ModerateCVE-2023-28487SUSE bug 1209361cpe:/o:opensuse:leap-micro:5.3CVE-2023-2861openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-2861SUSE bug 1212968cpe:/o:opensuse:leap-micro:5.3CVE-2023-28642openSUSE Leap Micro 5.3
runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.
ModerateCVE-2023-28642SUSE bug 1209888cpe:/o:opensuse:leap-micro:5.3CVE-2023-28736openSUSE Leap Micro 5.3
Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.
ModerateCVE-2023-28736SUSE bug 1214244cpe:/o:opensuse:leap-micro:5.3CVE-2023-28840openSUSE Leap Micro 5.3
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly referred to as *Docker*.
Swarm Mode, which is compiled in and delivered by default in dockerd and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.
The overlay network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.
Encrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.
When setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the u32 iptables extension provided by the xt_u32 kernel module to directly filter on a VXLAN packet's VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.
Two iptables rules serve to filter incoming VXLAN datagrams with a VNI that corresponds to an encrypted network and discards unencrypted datagrams. The rules are appended to the end of the INPUT filter chain, following any rules that have been previously set by the system administrator. Administrator-set rules take precedence over the rules Moby sets to discard unencrypted VXLAN datagrams, which can potentially admit unencrypted datagrams that should have been discarded.
The injection of arbitrary Ethernet frames can enable a Denial of Service attack. A sophisticated attacker may be able to establish a UDP or TCP connection by way of the container’s outbound gateway that would otherwise be blocked by a stateful firewall, or carry out other escalations beyond simple injection by smuggling packets into the overlay network.
Patches are available in Moby releases 23.0.3 and 20.10.24. As Mirantis Container Runtime's 20.10 releases are numbered differently, users of that platform should update to 20.10.16.
Some workarounds are available. Close the VXLAN port (by default, UDP port 4789) to incoming traffic at the Internet boundary to prevent all VXLAN packet injection, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster.
ImportantCVE-2023-28840SUSE bug 1214107SUSE bug 1215525cpe:/o:opensuse:leap-micro:5.3CVE-2023-28841openSUSE Leap Micro 5.3
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.
Swarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.
The `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.
Encrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.
When setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet's VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.
An iptables rule designates outgoing VXLAN datagrams with a VNI that corresponds to an encrypted overlay network for IPsec encapsulation.
Encrypted overlay networks on affected platforms silently transmit unencrypted data. As a result, `overlay` networks may appear to be functional, passing traffic as expected, but without any of the expected confidentiality or data integrity guarantees.
It is possible for an attacker sitting in a trusted position on the network to read all of the application traffic that is moving across the overlay network, resulting in unexpected secrets or user data disclosure. Thus, because many database protocols, internal APIs, etc. are not protected by a second layer of encryption, a user may use Swarm encrypted overlay networks to provide confidentiality, which due to this vulnerability this is no longer guaranteed.
Patches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime's 20.10 releases are numbered differently, users of that platform should update to 20.10.16.
Some workarounds are available. Close the VXLAN port (by default, UDP port 4789) to outgoing traffic at the Internet boundary in order to prevent unintentionally leaking unencrypted traffic over the Internet, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster.
ModerateCVE-2023-28841SUSE bug 1214108SUSE bug 1215525cpe:/o:opensuse:leap-micro:5.3CVE-2023-28842openSUSE Leap Micro 5.3
Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.
Swarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.
The `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.
Encrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.
When setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet's VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.
The `overlay` driver dynamically and lazily defines the kernel configuration for the VXLAN network on each node as containers are attached and detached. Routes and encryption parameters are only defined for destination nodes that participate in the network. The iptables rules that prevent encrypted overlay networks from accepting unencrypted packets are not created until a peer is available with which to communicate.
Encrypted overlay networks silently accept cleartext VXLAN datagrams that are tagged with the VNI of an encrypted overlay network. As a result, it is possible to inject arbitrary Ethernet frames into the encrypted overlay network by encapsulating them in VXLAN datagrams. The implications of this can be quite dire, and GHSA-vwm3-crmr-xfxw should be referenced for a deeper exploration.
Patches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime's 20.10 releases are numbered differently, users of that platform should update to 20.10.16.
Some workarounds are available. In multi-node clusters, deploy a global ‘pause’ container for each encrypted overlay network, on every node. For a single-node cluster, do not use overlay networks of any sort. Bridge networks provide the same connectivity on a single node and have no multi-node features. The Swarm ingress feature is implemented using an overlay network, but can be disabled by publishing ports in `host` mode instead of `ingress` mode (allowing the use of an external load balancer), and removing the `ingress` network. If encrypted overlay networks are in exclusive use, block UDP port 4789 from traffic that has not been validated by IPSec.
ModerateCVE-2023-28842SUSE bug 1214109SUSE bug 1215525cpe:/o:opensuse:leap-micro:5.3CVE-2023-28938openSUSE Leap Micro 5.3
Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access.
LowCVE-2023-28938SUSE bug 1214245cpe:/o:opensuse:leap-micro:5.3CVE-2023-29383openSUSE Leap Micro 5.3
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
ModerateCVE-2023-29383SUSE bug 1210507cpe:/o:opensuse:leap-micro:5.3CVE-2023-29469openSUSE Leap Micro 5.3
An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value).
ModerateCVE-2023-29469SUSE bug 1210412cpe:/o:opensuse:leap-micro:5.3CVE-2023-29491openSUSE Leap Micro 5.3
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
ModerateCVE-2023-29491SUSE bug 1210434cpe:/o:opensuse:leap-micro:5.3CVE-2023-2953openSUSE Leap Micro 5.3
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
ModerateCVE-2023-2953SUSE bug 1211795cpe:/o:opensuse:leap-micro:5.3CVE-2023-2977openSUSE Leap Micro 5.3
A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is possible.
ModerateCVE-2023-2977SUSE bug 1211894cpe:/o:opensuse:leap-micro:5.3CVE-2023-2985openSUSE Leap Micro 5.3
A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem.
ModerateCVE-2023-2985SUSE bug 1211867cpe:/o:opensuse:leap-micro:5.3CVE-2023-3006openSUSE Leap Micro 5.3
A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.
ModerateCVE-2023-3006SUSE bug 1211855cpe:/o:opensuse:leap-micro:5.3CVE-2023-30078openSUSE Leap Micro 5.3
A stack overflow vulnerability exists in function econf_writeFile in file atlibeconf/lib/libeconf.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code.
ImportantCVE-2023-30078SUSE bug 1214597cpe:/o:opensuse:leap-micro:5.3CVE-2023-30079openSUSE Leap Micro 5.3
A stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code.
ImportantCVE-2023-30079SUSE bug 1214598cpe:/o:opensuse:leap-micro:5.3CVE-2023-30456openSUSE Leap Micro 5.3
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.
ModerateCVE-2023-30456SUSE bug 1210294cpe:/o:opensuse:leap-micro:5.3CVE-2023-30630openSUSE Leap Micro 5.3
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.
ModerateCVE-2023-30630SUSE bug 1210418cpe:/o:opensuse:leap-micro:5.3CVE-2023-30772openSUSE Leap Micro 5.3
The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.
ModerateCVE-2023-30772SUSE bug 1210329cpe:/o:opensuse:leap-micro:5.3CVE-2023-3090openSUSE Leap Micro 5.3
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if?CONFIG_IPVLAN is enabled.
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.
ImportantCVE-2023-3090SUSE bug 1212842SUSE bug 1212849SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.3CVE-2023-31083openSUSE Leap Micro 5.3
An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL pointer dereference may occur.
ModerateCVE-2023-31083SUSE bug 1210780cpe:/o:opensuse:leap-micro:5.3CVE-2023-31084openSUSE Leap Micro 5.3
An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process.
ModerateCVE-2023-31084SUSE bug 1210783cpe:/o:opensuse:leap-micro:5.3CVE-2023-3111openSUSE Leap Micro 5.3
A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().
ModerateCVE-2023-3111SUSE bug 1212051cpe:/o:opensuse:leap-micro:5.3CVE-2023-31124openSUSE Leap Micro 5.3
c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARES_RANDOM_FILE will not be set, as seen when cross compiling aarch64 android. This will downgrade to using rand() as a fallback which could allow an attacker to take advantage of the lack of entropy by not using a CSPRNG. This issue was patched in version 1.19.1.
LowCVE-2023-31124SUSE bug 1211607cpe:/o:opensuse:leap-micro:5.3CVE-2023-31130openSUSE Leap Micro 5.3
c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.
ModerateCVE-2023-31130SUSE bug 1211606cpe:/o:opensuse:leap-micro:5.3CVE-2023-31147openSUSE Leap Micro 5.3
c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom() are unavailable, c-ares uses rand() to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand() so will generate predictable output. Input from the random number generator is fed into a non-compilant RC4 implementation and may not be as strong as the original RC4 implementation. No attempt is made to look for modern OS-provided CSPRNGs like arc4random() that is widely available. This issue has been fixed in version 1.19.1.
ModerateCVE-2023-31147SUSE bug 1211605cpe:/o:opensuse:leap-micro:5.3CVE-2023-3117openSUSE Leap Micro 5.3
** REJECT ** Duplicate of CVE-2023-3390.
ImportantCVE-2023-3117SUSE bug 1212934SUSE bug 1213245cpe:/o:opensuse:leap-micro:5.3CVE-2023-31248openSUSE Leap Micro 5.3
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace
ImportantCVE-2023-31248SUSE bug 1213061SUSE bug 1213064cpe:/o:opensuse:leap-micro:5.3CVE-2023-3138openSUSE Leap Micro 5.3
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.
ImportantCVE-2023-3138SUSE bug 1212102SUSE bug 1212746SUSE bug 1213994cpe:/o:opensuse:leap-micro:5.3CVE-2023-3141openSUSE Leap Micro 5.3
A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.
ModerateCVE-2023-3141SUSE bug 1212129SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.3CVE-2023-31436openSUSE Leap Micro 5.3
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
ModerateCVE-2023-31436SUSE bug 1210940SUSE bug 1211260SUSE bug 1213841SUSE bug 1213842SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.3CVE-2023-31484openSUSE Leap Micro 5.3
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
ImportantCVE-2023-31484SUSE bug 1210999cpe:/o:opensuse:leap-micro:5.3CVE-2023-3161openSUSE Leap Micro 5.3
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.
ModerateCVE-2023-3161SUSE bug 1212154SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.3CVE-2023-3180openSUSE Leap Micro 5.3
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
ImportantCVE-2023-3180SUSE bug 1213925cpe:/o:opensuse:leap-micro:5.3CVE-2023-32001openSUSE Leap Micro 5.3
** REJECT ** We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for.
ModerateCVE-2023-32001SUSE bug 1213237cpe:/o:opensuse:leap-micro:5.3CVE-2023-32067openSUSE Leap Micro 5.3
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful shutdown of the connection. This issue has been patched in version 1.19.1.
ImportantCVE-2023-32067SUSE bug 1211604cpe:/o:opensuse:leap-micro:5.3CVE-2023-3212openSUSE Leap Micro 5.3
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.
ModerateCVE-2023-3212SUSE bug 1212265cpe:/o:opensuse:leap-micro:5.3CVE-2023-32181openSUSE Leap Micro 5.3
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files
This issue affects libeconf: before 0.5.2.
ImportantCVE-2023-32181SUSE bug 1211078cpe:/o:opensuse:leap-micro:5.3CVE-2023-32233openSUSE Leap Micro 5.3
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
ImportantCVE-2023-32233SUSE bug 1211043SUSE bug 1211187cpe:/o:opensuse:leap-micro:5.3CVE-2023-32324openSUSE Leap Micro 5.3
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.
ModerateCVE-2023-32324SUSE bug 1211643cpe:/o:opensuse:leap-micro:5.3CVE-2023-32360openSUSE Leap Micro 5.3
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.
ModerateCVE-2023-32360SUSE bug 1214254cpe:/o:opensuse:leap-micro:5.3CVE-2023-3255openSUSE Leap Micro 5.3
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.
ModerateCVE-2023-3255SUSE bug 1213001cpe:/o:opensuse:leap-micro:5.3CVE-2023-3268openSUSE Leap Micro 5.3
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.
ModerateCVE-2023-3268SUSE bug 1212502SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.3CVE-2023-32681openSUSE Leap Micro 5.3
Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header to requests. For HTTP connections sent through the tunnel, the proxy will identify the header in the request itself and remove it prior to forwarding to the destination server. However when sent over HTTPS, the `Proxy-Authorization` header must be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious actor to potentially exfiltrate sensitive information. This issue has been patched in version 2.31.0.
ModerateCVE-2023-32681SUSE bug 1211674cpe:/o:opensuse:leap-micro:5.3CVE-2023-3301openSUSE Leap Micro 5.3
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
ModerateCVE-2023-3301SUSE bug 1213414cpe:/o:opensuse:leap-micro:5.3CVE-2023-33288openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.
ModerateCVE-2023-33288SUSE bug 1211590cpe:/o:opensuse:leap-micro:5.3CVE-2023-33460openSUSE Leap Micro 5.3
There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
ModerateCVE-2023-33460SUSE bug 1212928cpe:/o:opensuse:leap-micro:5.3CVE-2023-3354openSUSE Leap Micro 5.3
A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.
ImportantCVE-2023-3354SUSE bug 1212850cpe:/o:opensuse:leap-micro:5.3CVE-2023-3357openSUSE Leap Micro 5.3
A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system.
ModerateCVE-2023-3357SUSE bug 1212605cpe:/o:opensuse:leap-micro:5.3CVE-2023-3358openSUSE Leap Micro 5.3
A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.
ModerateCVE-2023-3358SUSE bug 1212606cpe:/o:opensuse:leap-micro:5.3CVE-2023-3389openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.
Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer.
We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59 (4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and?0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable).
ModerateCVE-2023-3389SUSE bug 1212838cpe:/o:opensuse:leap-micro:5.3CVE-2023-3390openSUSE Leap Micro 5.3
A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.
We recommend upgrading past commit?1240eb93f0616b21c675416516ff3d74798fdc97.
ImportantCVE-2023-3390SUSE bug 1212846SUSE bug 1212934cpe:/o:opensuse:leap-micro:5.3CVE-2023-34241openSUSE Leap Micro 5.3
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function `httpClose(con->http)` being called in `scheduler/client.c`. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function `cupsdAcceptClient` if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in `cupsd.conf`) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from `/etc/hosts.allow` and `/etc/hosts.deny`.
Version 2.4.6 has a patch for this issue.
ImportantCVE-2023-34241SUSE bug 1212230cpe:/o:opensuse:leap-micro:5.3CVE-2023-34319openSUSE Leap Micro 5.3
The fix for XSA-423 added logic to Linux'es netback driver to deal with
a frontend splitting a packet in a way such that not all of the headers
would come in one piece. Unfortunately the logic introduced there
didn't account for the extreme case of the entire packet being split
into as many pieces as permitted by the protocol, yet still being
smaller than the area that's specially dealt with to keep all (possible)
headers together. Such an unusual packet would therefore trigger a
buffer overrun in the driver.
ModerateCVE-2023-34319SUSE bug 1213546cpe:/o:opensuse:leap-micro:5.3CVE-2023-34322openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-34322SUSE bug 1215145cpe:/o:opensuse:leap-micro:5.3CVE-2023-34323openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-34323SUSE bug 1215744cpe:/o:opensuse:leap-micro:5.3CVE-2023-34325openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-34325SUSE bug 1215747cpe:/o:opensuse:leap-micro:5.3CVE-2023-34326openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-34326SUSE bug 1215746cpe:/o:opensuse:leap-micro:5.3CVE-2023-34327openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-34327SUSE bug 1215748cpe:/o:opensuse:leap-micro:5.3CVE-2023-34328openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-34328SUSE bug 1215748cpe:/o:opensuse:leap-micro:5.3CVE-2023-3446openSUSE Leap Micro 5.3
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long
delays. Where the key or parameters that are being checked have been obtained
from an untrusted source this may lead to a Denial of Service.
The function DH_check() performs various checks on DH parameters. One of those
checks confirms that the modulus ('p' parameter) is not too large. Trying to use
a very large modulus is slow and OpenSSL will not normally use a modulus which
is over 10,000 bits in length.
However the DH_check() function checks numerous aspects of the key or parameters
that have been supplied. Some of those checks use the supplied modulus value
even if it has already been found to be too large.
An application that calls DH_check() and supplies a key or parameters obtained
from an untrusted source could be vulernable to a Denial of Service attack.
The function DH_check() is itself called by a number of other OpenSSL functions.
An application calling any of those other functions may similarly be affected.
The other functions affected by this are DH_check_ex() and
EVP_PKEY_param_check().
Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications
when using the '-check' option.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
ModerateCVE-2023-3446SUSE bug 1213487SUSE bug 1213853cpe:/o:opensuse:leap-micro:5.3CVE-2023-34966openSUSE Leap Micro 5.3
An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains the count of elements in an array-like structure. By passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a denial of service condition.
ImportantCVE-2023-34966SUSE bug 1213173cpe:/o:opensuse:leap-micro:5.3CVE-2023-34967openSUSE Leap Micro 5.3
A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker process, affecting all other clients this worker serves.
ModerateCVE-2023-34967SUSE bug 1213172cpe:/o:opensuse:leap-micro:5.3CVE-2023-34968openSUSE Leap Micro 5.3
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
ModerateCVE-2023-34968SUSE bug 1213171cpe:/o:opensuse:leap-micro:5.3CVE-2023-34969openSUSE Leap Micro 5.3
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
ModerateCVE-2023-34969SUSE bug 1212126cpe:/o:opensuse:leap-micro:5.3CVE-2023-35001openSUSE Leap Micro 5.3
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
ImportantCVE-2023-35001SUSE bug 1213059SUSE bug 1213063cpe:/o:opensuse:leap-micro:5.3CVE-2023-3567openSUSE Leap Micro 5.3
A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.
ImportantCVE-2023-3567SUSE bug 1213167SUSE bug 1213244SUSE bug 1213842SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.3CVE-2023-35788openSUSE Leap Micro 5.3
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.
ImportantCVE-2023-35788SUSE bug 1212504SUSE bug 1212509cpe:/o:opensuse:leap-micro:5.3CVE-2023-35823openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.
ModerateCVE-2023-35823SUSE bug 1212494cpe:/o:opensuse:leap-micro:5.3CVE-2023-35828openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.
ModerateCVE-2023-35828SUSE bug 1212513cpe:/o:opensuse:leap-micro:5.3CVE-2023-35829openSUSE Leap Micro 5.3
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.
ModerateCVE-2023-35829SUSE bug 1212495cpe:/o:opensuse:leap-micro:5.3CVE-2023-35945openSUSE Leap Micro 5.3
Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY` frame skips de-allocation of the bookkeeping structure and pending compressed header. The error return [code path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame. The clean-up code is right after the return statement, causing memory leak. Denial of service through memory exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.
ImportantCVE-2023-35945SUSE bug 1215713cpe:/o:opensuse:leap-micro:5.3CVE-2023-36054openSUSE Leap Micro 5.3
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.
ImportantCVE-2023-36054SUSE bug 1214054cpe:/o:opensuse:leap-micro:5.3CVE-2023-3609openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
ModerateCVE-2023-3609SUSE bug 1213586SUSE bug 1213587cpe:/o:opensuse:leap-micro:5.3CVE-2023-3610openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.
We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.
ImportantCVE-2023-3610SUSE bug 1213580SUSE bug 1213584cpe:/o:opensuse:leap-micro:5.3CVE-2023-3611openSUSE Leap Micro 5.3
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.
We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
ModerateCVE-2023-3611SUSE bug 1213585cpe:/o:opensuse:leap-micro:5.3CVE-2023-37327openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-37327SUSE bug 1213128cpe:/o:opensuse:leap-micro:5.3CVE-2023-37328openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-37328SUSE bug 1213131cpe:/o:opensuse:leap-micro:5.3CVE-2023-37453openSUSE Leap Micro 5.3
An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.
ModerateCVE-2023-37453SUSE bug 1213123cpe:/o:opensuse:leap-micro:5.3CVE-2023-3772openSUSE Leap Micro 5.3
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.
ModerateCVE-2023-3772SUSE bug 1213666cpe:/o:opensuse:leap-micro:5.3CVE-2023-3776openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
ModerateCVE-2023-3776SUSE bug 1213588SUSE bug 1215119SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.3CVE-2023-38039openSUSE Leap Micro 5.3
When curl retrieves an HTTP response, it stores the incoming headers so that
they can be accessed later via the libcurl headers API.
However, curl did not have a limit in how many or how large headers it would
accept in a response, allowing a malicious server to stream an endless series
of headers and eventually cause curl to run out of heap memory.
ImportantCVE-2023-38039SUSE bug 1215026cpe:/o:opensuse:leap-micro:5.3CVE-2023-3812openSUSE Leap Micro 5.3
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.
ImportantCVE-2023-3812SUSE bug 1213543SUSE bug 1213706cpe:/o:opensuse:leap-micro:5.3CVE-2023-3817openSUSE Leap Micro 5.3
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long
delays. Where the key or parameters that are being checked have been obtained
from an untrusted source this may lead to a Denial of Service.
The function DH_check() performs various checks on DH parameters. After fixing
CVE-2023-3446 it was discovered that a large q parameter value can also trigger
an overly long computation during some of these checks. A correct q value,
if present, cannot be larger than the modulus p parameter, thus it is
unnecessary to perform these checks if q is larger than p.
An application that calls DH_check() and supplies a key or parameters obtained
from an untrusted source could be vulnerable to a Denial of Service attack.
The function DH_check() is itself called by a number of other OpenSSL functions.
An application calling any of those other functions may similarly be affected.
The other functions affected by this are DH_check_ex() and
EVP_PKEY_param_check().
Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications
when using the "-check" option.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
ModerateCVE-2023-3817SUSE bug 1213853cpe:/o:opensuse:leap-micro:5.3CVE-2023-38408openSUSE Leap Micro 5.3
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
ImportantCVE-2023-38408SUSE bug 1213504cpe:/o:opensuse:leap-micro:5.3CVE-2023-38545openSUSE Leap Micro 5.3
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is asked to pass along the host name to the SOCKS5 proxy to allow
that to resolve the address instead of it getting done by curl itself, the
maximum length that host name can be is 255 bytes.
If the host name is detected to be longer, curl switches to local name
resolving and instead passes on the resolved address only. Due to this bug,
the local variable that means "let the host resolve the name" could get the
wrong value during a slow SOCKS5 handshake, and contrary to the intention,
copy the too long host name to the target buffer instead of copying just the
resolved address there.
The target buffer being a heap based buffer, and the host name coming from the
URL that curl has been told to operate with.
ImportantCVE-2023-38545SUSE bug 1215888cpe:/o:opensuse:leap-micro:5.3CVE-2023-38546openSUSE Leap Micro 5.3
This flaw allows an attacker to insert cookies at will into a running program
using libcurl, if the specific series of conditions are met.
libcurl performs transfers. In its API, an application creates "easy handles"
that are the individual handles for single transfers.
libcurl provides a function call that duplicates en easy handle called
[curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).
If a transfer has cookies enabled when the handle is duplicated, the
cookie-enable state is also cloned - but without cloning the actual
cookies. If the source handle did not read any cookies from a specific file on
disk, the cloned version of the handle would instead store the file name as
`none` (using the four ASCII letters, no quotes).
Subsequent use of the cloned handle that does not explicitly set a source to
load cookies from would then inadvertently load cookies from a file named
`none` - if such a file exists and is readable in the current directory of the
program using libcurl. And if using the correct file format of course.
ModerateCVE-2023-38546SUSE bug 1215889cpe:/o:opensuse:leap-micro:5.3CVE-2023-3863openSUSE Leap Micro 5.3
A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.
ImportantCVE-2023-3863SUSE bug 1213601SUSE bug 1213603cpe:/o:opensuse:leap-micro:5.3CVE-2023-38633openSUSE Leap Micro 5.3
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.
ImportantCVE-2023-38633SUSE bug 1213502cpe:/o:opensuse:leap-micro:5.3CVE-2023-39192openSUSE Leap Micro 5.3
A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.
ModerateCVE-2023-39192SUSE bug 1215858cpe:/o:opensuse:leap-micro:5.3CVE-2023-39193openSUSE Leap Micro 5.3
A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.
ModerateCVE-2023-39193SUSE bug 1215860cpe:/o:opensuse:leap-micro:5.3CVE-2023-39194openSUSE Leap Micro 5.3
A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
LowCVE-2023-39194SUSE bug 1215861cpe:/o:opensuse:leap-micro:5.3CVE-2023-39615openSUSE Leap Micro 5.3
** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
ModerateCVE-2023-39615SUSE bug 1214768cpe:/o:opensuse:leap-micro:5.3CVE-2023-4004openSUSE Leap Micro 5.3
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.
ImportantCVE-2023-4004SUSE bug 1213812SUSE bug 1214812cpe:/o:opensuse:leap-micro:5.3CVE-2023-4016openSUSE Leap Micro 5.3
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.
LowCVE-2023-4016SUSE bug 1214290cpe:/o:opensuse:leap-micro:5.3CVE-2023-40217openSUSE Leap Micro 5.3
An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly, there is a brief window where the SSLSocket instance will detect the socket as "not connected" and won't initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication, and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.)
ImportantCVE-2023-40217SUSE bug 1214692cpe:/o:opensuse:leap-micro:5.3CVE-2023-40225openSUSE Leap Micro 5.3
HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.
ModerateCVE-2023-40225SUSE bug 1214102cpe:/o:opensuse:leap-micro:5.3CVE-2023-4039openSUSE Leap Micro 5.3
A failure in the -fstack-protector feature in GCC-based toolchains
that target AArch64 allows an attacker to exploit an existing buffer
overflow in dynamically-sized local variables in your application
without this being detected. This stack-protector failure only applies
to C99-style dynamically-sized local variables or those created using
alloca(). The stack-protector operates as intended for statically-sized
local variables.
The default behavior when the stack-protector
detects an overflow is to terminate your application, resulting in
controlled loss of availability. An attacker who can exploit a buffer
overflow without triggering the stack-protector might be able to change
program flow control to cause an uncontrolled loss of availability or to
go further and affect confidentiality or integrity.
ImportantCVE-2023-4039SUSE bug 1214052cpe:/o:opensuse:leap-micro:5.3CVE-2023-40660openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-40660SUSE bug 1215762cpe:/o:opensuse:leap-micro:5.3CVE-2023-40661openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-40661SUSE bug 1215761cpe:/o:opensuse:leap-micro:5.3CVE-2023-4091openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-4091SUSE bug 1215904cpe:/o:opensuse:leap-micro:5.3CVE-2023-4128openSUSE Leap Micro 5.3
A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue.
ModerateCVE-2023-4128SUSE bug 1214149cpe:/o:opensuse:leap-micro:5.3CVE-2023-4133openSUSE Leap Micro 5.3
A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.
ModerateCVE-2023-4133SUSE bug 1213970cpe:/o:opensuse:leap-micro:5.3CVE-2023-4134openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-4134SUSE bug 1213971cpe:/o:opensuse:leap-micro:5.3CVE-2023-4147openSUSE Leap Micro 5.3
A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.
ImportantCVE-2023-4147SUSE bug 1213968SUSE bug 1215118cpe:/o:opensuse:leap-micro:5.3CVE-2023-4154openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-4154SUSE bug 1215908cpe:/o:opensuse:leap-micro:5.3CVE-2023-4155openSUSE Leap Micro 5.3
A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`).
ModerateCVE-2023-4155SUSE bug 1214022cpe:/o:opensuse:leap-micro:5.3CVE-2023-4156openSUSE Leap Micro 5.3
A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.
LowCVE-2023-4156SUSE bug 1214025cpe:/o:opensuse:leap-micro:5.3CVE-2023-4194openSUSE Leap Micro 5.3
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
ModerateCVE-2023-4194SUSE bug 1214019cpe:/o:opensuse:leap-micro:5.3CVE-2023-42669openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-42669SUSE bug 1215905cpe:/o:opensuse:leap-micro:5.3CVE-2023-4273openSUSE Leap Micro 5.3
A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.
ImportantCVE-2023-4273SUSE bug 1214120SUSE bug 1214123cpe:/o:opensuse:leap-micro:5.3CVE-2023-42753openSUSE Leap Micro 5.3
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.
ModerateCVE-2023-42753cpe:/o:opensuse:leap-micro:5.3CVE-2023-42754openSUSE Leap Micro 5.3
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.
ModerateCVE-2023-42754SUSE bug 1215467cpe:/o:opensuse:leap-micro:5.3CVE-2023-43785openSUSE Leap Micro 5.3
A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.
LowCVE-2023-43785SUSE bug 1215683cpe:/o:opensuse:leap-micro:5.3CVE-2023-43786openSUSE Leap Micro 5.3
A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.
LowCVE-2023-43786SUSE bug 1215682SUSE bug 1215684cpe:/o:opensuse:leap-micro:5.3CVE-2023-43787openSUSE Leap Micro 5.3
A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
LowCVE-2023-43787SUSE bug 1215682SUSE bug 1215685cpe:/o:opensuse:leap-micro:5.3CVE-2023-43804openSUSE Leap Micro 5.3
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `Cookie` header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly. This issue has been patched in urllib3 version 1.26.17 or 2.0.5.
ModerateCVE-2023-43804SUSE bug 1215968cpe:/o:opensuse:leap-micro:5.3CVE-2023-4387openSUSE Leap Micro 5.3
A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.
ModerateCVE-2023-4387SUSE bug 1214350cpe:/o:opensuse:leap-micro:5.3CVE-2023-4389openSUSE Leap Micro 5.3
A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This issue may allow a local attacker with user privilege to crash the system or may lead to leaked internal kernel information.
ModerateCVE-2023-4389SUSE bug 1214351cpe:/o:opensuse:leap-micro:5.3CVE-2023-4459openSUSE Leap Micro 5.3
A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.
ModerateCVE-2023-4459SUSE bug 1214451cpe:/o:opensuse:leap-micro:5.3CVE-2023-4504openSUSE Leap Micro 5.3
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.
ImportantCVE-2023-4504SUSE bug 1215204cpe:/o:opensuse:leap-micro:5.3CVE-2023-4563openSUSE Leap Micro 5.3
** REJECT ** This was assigned as a duplicate of CVE-2023-4244.
LowCVE-2023-4563SUSE bug 1214727cpe:/o:opensuse:leap-micro:5.3CVE-2023-4569openSUSE Leap Micro 5.3
A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause a double-deactivations of catchall elements, which results in a memory leak.
LowCVE-2023-4569SUSE bug 1214729cpe:/o:opensuse:leap-micro:5.3CVE-2023-4622openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.
ImportantCVE-2023-4622SUSE bug 1215117SUSE bug 1215442cpe:/o:opensuse:leap-micro:5.3CVE-2023-4623openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
ImportantCVE-2023-4623SUSE bug 1215115SUSE bug 1215440cpe:/o:opensuse:leap-micro:5.3CVE-2023-4641openSUSE Leap Micro 5.3
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
LowCVE-2023-4641SUSE bug 1214806cpe:/o:opensuse:leap-micro:5.3CVE-2023-4733openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.1840.
ImportantCVE-2023-4733SUSE bug 1215004cpe:/o:opensuse:leap-micro:5.3CVE-2023-4734openSUSE Leap Micro 5.3
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
ModerateCVE-2023-4734SUSE bug 1214925cpe:/o:opensuse:leap-micro:5.3CVE-2023-4735openSUSE Leap Micro 5.3
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.
LowCVE-2023-4735SUSE bug 1214924cpe:/o:opensuse:leap-micro:5.3CVE-2023-4738openSUSE Leap Micro 5.3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
ImportantCVE-2023-4738SUSE bug 1214922cpe:/o:opensuse:leap-micro:5.3CVE-2023-4752openSUSE Leap Micro 5.3
Use After Free in GitHub repository vim/vim prior to 9.0.1858.
ImportantCVE-2023-4752SUSE bug 1215006cpe:/o:opensuse:leap-micro:5.3CVE-2023-4781openSUSE Leap Micro 5.3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
ImportantCVE-2023-4781SUSE bug 1215033SUSE bug 1215457cpe:/o:opensuse:leap-micro:5.3CVE-2023-4813openSUSE Leap Micro 5.3
A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.
ModerateCVE-2023-4813SUSE bug 1215286cpe:/o:opensuse:leap-micro:5.3CVE-2023-4881openSUSE Leap Micro 5.3
** REJECT ** CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team.
ModerateCVE-2023-4881SUSE bug 1215221cpe:/o:opensuse:leap-micro:5.3CVE-2023-4921openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue().
We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.
ImportantCVE-2023-4921SUSE bug 1215275SUSE bug 1215300cpe:/o:opensuse:leap-micro:5.3CVE-2023-5345openSUSE Leap Micro 5.3
A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.
In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free.
We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.
ModerateCVE-2023-5345SUSE bug 1215899SUSE bug 1215971cpe:/o:opensuse:leap-micro:5.3libpython3_6m1_0python3python3-baseopenSUSE-releasekernel-defaultkgraft-patch-3_12_38-44-defaultkgraft-patch-3_12_39-47-defaultkgraft-patch-3_12_43-52_6-defaultkgraft-patch-3_12_44-52_10-defaultkgraft-patch-3_12_44-52_18-defaultkgraft-patch-3_12_48-52_27-defaultkgraft-patch-3_12_49-11-defaultkgraft-patch-3_12_51-52_31-defaultkgraft-patch-3_12_51-52_34-defaultkgraft-patch-3_12_51-52_39-defaultkgraft-patch-3_12_51-60_20-defaultkgraft-patch-3_12_51-60_25-defaultkgraft-patch-3_12_53-60_30-defaultkgraft-patch-3_12_57-60_35-defaultkgraft-patch-3_12_59-60_41-defaultkgraft-patch-3_12_59-60_45-defaultkgraft-patch-3_12_32-33-defaultkgraft-patch-3_12_36-38-defaultkgraft-patch-4_4_21-69-defaultkgraft-patch-4_4_21-81-defaultkgraft-patch-4_4_21-84-defaultkgraft-patch-4_4_21-90-defaultkgraft-patch-4_4_38-93-defaultkgraft-patch-3_12_62-60_62-defaultkgraft-patch-3_12_62-60_64_8-defaultkgraft-patch-3_12_67-60_64_18-defaultkgraft-patch-3_12_67-60_64_21-defaultkgraft-patch-4_4_103-6_33-defaultkgraft-patch-4_4_103-6_38-defaultkgraft-patch-4_4_82-6_3-defaultkgraft-patch-4_4_82-6_6-defaultkgraft-patch-4_4_82-6_9-defaultkgraft-patch-4_4_92-6_18-defaultkgraft-patch-4_4_92-6_30-defaultkgraft-patch-4_4_49-92_11-defaultkgraft-patch-4_4_49-92_14-defaultkgraft-patch-4_4_59-92_17-defaultkgraft-patch-4_4_59-92_20-defaultkgraft-patch-4_4_59-92_24-defaultkgraft-patch-4_4_74-92_29-defaultkgraft-patch-4_4_74-92_32-defaultkgraft-patch-4_4_74-92_35-defaultkgraft-patch-4_4_74-92_38-defaultkgraft-patch-4_4_90-92_45-defaultkgraft-patch-4_12_14-95_40-defaultkgraft-patch-4_12_14-120-defaultkgraft-patch-4_12_14-122_7-defaultkernel-livepatch-4_12_14-150_41-defaultkernel-livepatch-4_12_14-197_26-defaultkgraft-patch-4_4_114-94_11-defaultkgraft-patch-4_4_114-94_14-defaultkgraft-patch-4_4_103-92_53-defaultkgraft-patch-4_4_103-92_56-defaultkgraft-patch-4_4_90-92_50-defaultkernel-livepatch-4_12_14-23-defaultkernel-livepatch-4_12_14-25_3-defaultkernel-default-basekernel-rtkgraft-patch-3_12_67-60_64_24-defaultkgraft-patch-3_12_69-60_64_29-defaultkgraft-patch-3_12_69-60_64_32-defaultkgraft-patch-3_12_69-60_64_35-defaultkgraft-patch-4_4_73-5-defaultkgraft-patch-4_4_120-94_17-defaultkgraft-patch-4_4_126-94_22-defaultkgraft-patch-4_12_14-95_19-defaultkgraft-patch-4_12_14-95_24-defaultkgraft-patch-4_12_14-95_29-defaultkgraft-patch-4_12_14-95_32-defaultkgraft-patch-4_12_14-95_37-defaultkgraft-patch-4_12_14-95_45-defaultkgraft-patch-4_12_14-95_48-defaultkgraft-patch-4_12_14-95_51-defaultkgraft-patch-4_12_14-122_12-defaultkgraft-patch-4_12_14-122_17-defaultkgraft-patch-4_12_14-122_20-defaultkernel-livepatch-4_12_14-150_22-defaultkernel-livepatch-4_12_14-150_27-defaultkernel-livepatch-4_12_14-150_32-defaultkernel-livepatch-4_12_14-150_35-defaultkernel-livepatch-4_12_14-150_38-defaultkernel-livepatch-4_12_14-150_47-defaultkernel-livepatch-4_12_14-195-defaultkernel-livepatch-4_12_14-197_10-defaultkernel-livepatch-4_12_14-197_15-defaultkernel-livepatch-4_12_14-197_18-defaultkernel-livepatch-4_12_14-197_21-defaultkernel-livepatch-4_12_14-197_29-defaultkernel-livepatch-4_12_14-197_34-defaultkernel-livepatch-4_12_14-197_37-defaultkernel-livepatch-4_12_14-197_4-defaultkernel-livepatch-4_12_14-197_40-defaultkernel-livepatch-4_12_14-197_7-defaultkgraft-patch-4_4_131-94_29-defaultkgraft-patch-4_4_132-94_33-defaultkernel-livepatch-4_12_14-25_13-defaultkernel-livepatch-4_12_14-25_6-defaultkgraft-patch-4_4_138-94_39-defaultkgraft-patch-4_4_140-94_42-defaultkgraft-patch-4_4_143-94_47-defaultkernel-livepatch-4_12_14-25_16-defaultkgraft-patch-4_4_155-94_50-defaultkgraft-patch-4_4_156-94_57-defaultkgraft-patch-4_4_156-94_61-defaultkgraft-patch-4_4_156-94_64-defaultkernel-livepatch-4_12_14-25_19-defaultkgraft-patch-4_12_14-94_41-defaultkgraft-patch-4_12_14-95_3-defaultkgraft-patch-4_12_14-95_6-defaultkernel-livepatch-4_12_14-25_28-defaultkgraft-patch-4_4_162-94_69-defaultkgraft-patch-4_4_162-94_72-defaultkernel-livepatch-4_12_14-25_22-defaultkernel-livepatch-4_12_14-25_25-defaultkgraft-patch-4_12_14-95_68-defaultkgraft-patch-4_12_14-95_71-defaultkgraft-patch-4_12_14-95_74-defaultkgraft-patch-4_12_14-95_77-defaultkgraft-patch-4_12_14-95_80-defaultkgraft-patch-4_12_14-95_83-defaultkernel-livepatch-4_12_14-150_66-defaultkernel-livepatch-4_12_14-150_69-defaultkernel-livepatch-4_12_14-150_72-defaultkernel-livepatch-4_12_14-150_75-defaultkernel-livepatch-4_12_14-150_78-defaultkgraft-patch-4_12_14-95_13-defaultkgraft-patch-4_12_14-95_16-defaultkernel-livepatch-4_12_14-150_14-defaultkernel-livepatch-4_12_14-150_17-defaultkgraft-patch-4_4_175-94_79-defaultkgraft-patch-4_4_176-94_88-defaultkgraft-patch-4_4_178-94_91-defaultkgraft-patch-4_4_180-94_97-defaultqemu-ovmf-x86_64qemu-uefi-aarch64kgraft-patch-4_12_14-95_54-defaultkernel-livepatch-4_12_14-150_52-defaultdb48-utilslibdb-4_8kgraft-patch-4_12_14-95_57-defaultkgraft-patch-4_12_14-95_60-defaultkernel-livepatch-4_12_14-150_55-defaultkernel-livepatch-4_12_14-150_58-defaultkernel-livepatch-4_12_14-150_63-defaultkgraft-patch-4_12_14-95_65-defaultkgraft-patch-4_12_14-122_23-defaultkgraft-patch-4_12_14-122_26-defaultkgraft-patch-4_12_14-122_29-defaultkgraft-patch-4_12_14-122_32-defaultkgraft-patch-4_12_14-122_37-defaultkgraft-patch-4_12_14-122_41-defaultkgraft-patch-4_12_14-122_46-defaultkgraft-patch-4_12_14-122_51-defaultkgraft-patch-4_12_14-122_54-defaultkernel-livepatch-4_12_14-197_45-defaultkernel-livepatch-4_12_14-197_48-defaultkernel-livepatch-4_12_14-197_51-defaultkernel-livepatch-4_12_14-197_56-defaultkernel-livepatch-4_12_14-197_61-defaultkernel-livepatch-4_12_14-197_64-defaultkernel-livepatch-4_12_14-197_67-defaultkernel-livepatch-4_12_14-197_72-defaultkernel-livepatch-4_12_14-197_75-defaultkernel-livepatch-5_3_18-22-defaultkernel-livepatch-5_3_18-24_12-defaultkernel-livepatch-5_3_18-24_15-defaultkernel-livepatch-5_3_18-24_9-defaultkernel-livepatch-5_3_18-24_24-defaultkernel-livepatch-5_3_18-24_29-defaultkernel-livepatch-5_3_18-24_34-defaultkernel-livepatch-5_3_18-24_37-defaultkernel-livepatch-5_3_18-24_43-defaultlibicu73_2libicu73_2-bedatalibicu73_2-ledataqemuqemu-accel-tcg-x86qemu-armqemu-audio-spiceqemu-chardev-spiceqemu-guest-agentqemu-hw-display-qxlqemu-hw-display-virtio-gpuqemu-hw-display-virtio-vgaqemu-hw-usb-redirectqemu-ipxeqemu-seabiosqemu-sgabiosqemu-toolsqemu-ui-openglqemu-ui-spice-coreqemu-vgabiosqemu-x86libssh2-1kgraft-patch-4_12_14-122_60-defaultkgraft-patch-4_12_14-122_63-defaultkernel-livepatch-4_12_14-197_83-defaultkernel-livepatch-4_12_14-197_86-defaultkernel-livepatch-5_3_18-24_49-defaultkernel-livepatch-5_3_18-24_52-defaultkernel-livepatch-5_3_18-57-defaultkgraft-patch-4_12_14-122_57-defaultkernel-livepatch-4_12_14-197_78-defaultslirp4netnskernel-livepatch-5_3_18-24_46-defaultkgraft-patch-4_12_14-122_66-defaultkernel-livepatch-5_3_18-24_53_4-defaultkgraft-patch-4_12_14-122_71-defaultkgraft-patch-4_12_14-122_74-defaultkgraft-patch-4_12_14-122_77-defaultkernel-livepatch-4_12_14-197_89-defaultkernel-livepatch-4_12_14-197_92-defaultkernel-livepatch-5_3_18-24_61-defaultkernel-livepatch-5_3_18-24_64-defaultkernel-livepatch-5_3_18-24_67-defaultkgraft-patch-4_12_14-95_102-defaultkgraft-patch-4_12_14-95_105-defaultkgraft-patch-4_12_14-95_88-defaultkgraft-patch-4_12_14-95_93-defaultkgraft-patch-4_12_14-95_96-defaultkgraft-patch-4_12_14-95_99-defaultkgraft-patch-4_12_14-122_103-defaultkgraft-patch-4_12_14-122_106-defaultkgraft-patch-4_12_14-122_110-defaultkgraft-patch-4_12_14-122_113-defaultkgraft-patch-4_12_14-122_116-defaultkgraft-patch-4_12_14-122_121-defaultkgraft-patch-4_12_14-122_124-defaultkgraft-patch-4_12_14-122_127-defaultkgraft-patch-4_12_14-122_130-defaultkgraft-patch-4_12_14-122_88-defaultkgraft-patch-4_12_14-122_91-defaultkgraft-patch-4_12_14-122_98-defaultkernel-livepatch-4_12_14-150000_150_89-defaultkernel-livepatch-4_12_14-150000_150_92-defaultkernel-livepatch-4_12_14-150000_150_95-defaultkernel-livepatch-4_12_14-150000_150_98-defaultkernel-livepatch-4_12_14-150_83-defaultkernel-livepatch-4_12_14-150_86-defaultkernel-livepatch-4_12_14-150100_197_111-defaultkernel-livepatch-4_12_14-150100_197_114-defaultkernel-livepatch-4_12_14-150100_197_117-defaultkernel-livepatch-4_12_14-150100_197_120-defaultkernel-livepatch-4_12_14-197_102-defaultkernel-livepatch-4_12_14-197_105-defaultkernel-livepatch-4_12_14-197_108-defaultkernel-livepatch-5_3_18-150200_24_112-defaultkernel-livepatch-5_3_18-150200_24_115-defaultkernel-livepatch-5_3_18-150200_24_126-defaultkernel-livepatch-5_3_18-24_102-defaultkernel-livepatch-5_3_18-24_107-defaultkernel-livepatch-5_3_18-24_83-defaultkernel-livepatch-5_3_18-24_86-defaultkernel-livepatch-5_3_18-24_93-defaultkernel-livepatch-5_3_18-24_96-defaultkernel-livepatch-5_3_18-24_99-defaultkernel-livepatch-5_3_18-150300_59_43-defaultkernel-livepatch-5_3_18-150300_59_46-defaultkernel-livepatch-5_3_18-150300_59_49-defaultkernel-livepatch-5_3_18-150300_59_54-defaultkernel-livepatch-5_3_18-150300_59_60-defaultkernel-livepatch-5_3_18-150300_59_63-defaultkernel-livepatch-5_3_18-150300_59_68-defaultkernel-livepatch-5_3_18-150300_59_71-defaultkernel-livepatch-5_3_18-150300_59_76-defaultkernel-livepatch-5_3_18-150300_59_87-defaultkernel-livepatch-5_3_18-59_24-defaultkernel-livepatch-5_3_18-59_27-defaultkernel-livepatch-5_3_18-59_34-defaultkernel-livepatch-5_3_18-59_37-defaultkernel-livepatch-5_3_18-59_40-defaultkernel-livepatch-5_14_21-150400_22-defaultkernel-livepatch-5_14_21-150400_24_11-defaultkernel-livepatch-5_14_21-150400_24_18-defaultkgraft-patch-4_12_14-122_80-defaultkgraft-patch-4_12_14-122_83-defaultkernel-livepatch-4_12_14-197_99-defaultkernel-livepatch-5_3_18-24_70-defaultkernel-livepatch-5_3_18-24_75-defaultkernel-livepatch-5_3_18-24_78-defaultkernel-livepatch-5_3_18-59_10-defaultkernel-livepatch-5_3_18-59_13-defaultkernel-livepatch-5_3_18-59_16-defaultkernel-livepatch-5_3_18-59_19-defaultkernel-livepatch-5_3_18-59_5-defaultpodmanpodman-cni-configsamba-client-libslibxslt1libtpms0libwayland-client0libwayland-cursor0libwayland-egl1libwayland-server0vim-data-commonvim-smallkernel-livepatch-5_3_18-150200_24_129-defaultkernel-livepatch-5_3_18-150200_24_134-defaultkernel-livepatch-5_3_18-150300_59_90-defaultkernel-livepatch-5_3_18-150300_59_93-defaultkernel-livepatch-5_3_18-150300_59_98-defaultkernel-livepatch-5_14_21-150400_24_21-defaultkernel-livepatch-5_14_21-150400_24_28-defaultkernel-livepatch-5_14_21-150400_24_33-defaultlibbluetooth3librados2librbd1conmonucode-intelsamba-libscontainerdlibfreebl3libfreebl3-hmaclibsoftokn3libsoftokn3-hmacmozilla-nssmozilla-nss-certsmozilla-nss-toolspython3-certifixen-libslibsnmp40snmp-mibsgrub2grub2-arm64-efigrub2-i386-pcgrub2-snapper-plugingrub2-x86_64-efigrub2-x86_64-xenkernel-livepatch-5_3_18-150300_59_101-defaultshimlibldb2kgraft-patch-4_12_14-95_108-defaultkgraft-patch-4_12_14-95_111-defaultkgraft-patch-4_12_14-122_133-defaultkgraft-patch-4_12_14-122_136-defaultkernel-livepatch-4_12_14-150100_197_123-defaultkernel-livepatch-4_12_14-150100_197_126-defaultkernel-livepatch-4_12_14-150000_150_101-defaultkernel-livepatch-4_12_14-150000_150_104-defaultlibX11-6libX11-datalibX11-xcb1kgraft-patch-4_12_14-95_114-defaultkgraft-patch-4_12_14-122_139-defaultkgraft-patch-4_12_14-122_144-defaultkernel-livepatch-4_12_14-150100_197_131-defaultkernel-livepatch-5_3_18-150200_24_139-defaultlibtiff5dockerlibarchive13python3-setuptoolspython3-futurelibpcre2-8-0krb5python3-pylibopenssl-1_1-devellibopenssl1_1libopenssl1_1-hmacopenssl-1_1curllibcurl4kernel-livepatch-5_14_21-150400_15_5-rtkernel-livepatch-5_14_21-150400_24_38-defaultlibsystemd0libudev1systemdsystemd-containersystemd-journal-remotesystemd-sysvinitudevlibpixman-1-0supportutilslesslibsqlite3-0sqlite3-tclkernel-livepatch-5_3_18-150200_24_142-defaultkernel-livepatch-5_3_18-150200_24_145-defaultkernel-livepatch-5_3_18-150300_59_106-defaultkernel-livepatch-5_3_18-150300_59_109-defaultkernel-livepatch-5_3_18-150300_59_112-defaultkernel-livepatch-5_3_18-150300_59_115-defaultlibksba8tarlibzstd1zstdlibcares2haproxykernel-livepatch-5_14_21-150400_15_8-rtkernel-livepatch-5_14_21-150400_24_41-defaultkgraft-patch-4_12_14-122_147-defaultkernel-livepatch-5_14_21-150400_15_11-rtkernel-livepatch-5_14_21-150400_15_18-rtkernel-livepatch-5_14_21-150400_15_23-rtkernel-livepatch-5_14_21-150400_24_46-defaultkernel-livepatch-5_14_21-150400_24_55-defaultkernel-livepatch-5_14_21-150400_24_60-defaultkgraft-patch-4_12_14-95_117-defaultkernel-livepatch-4_12_14-150100_197_134-defaultglibcglibc-develglibc-localeglibc-locale-baselibxmlsec1-1libxmlsec1-openssl1kgraft-patch-4_12_14-122_150-defaultkgraft-patch-4_12_14-122_153-defaultkgraft-patch-4_12_14-122_156-defaultkgraft-patch-4_12_14-122_159-defaultkgraft-patch-4_12_14-122_162-defaultkernel-livepatch-4_12_14-150100_197_137-defaultkernel-livepatch-4_12_14-150100_197_142-defaultkernel-livepatch-4_12_14-150100_197_145-defaultkernel-livepatch-5_3_18-150200_24_148-defaultkernel-livepatch-5_3_18-150200_24_151-defaultkernel-livepatch-5_3_18-150200_24_154-defaultkernel-livepatch-5_3_18-150300_59_118-defaultkernel-livepatch-5_3_18-150300_59_121-defaultkernel-livepatch-5_3_18-150300_59_124-defaultkernel-livepatch-5_14_21-150400_15_28-rtkernel-livepatch-5_14_21-150400_24_63-defaultkernel-livepatch-5_14_21-150400_24_66-defaultkernel-livepatch-5_14_21-150500_11-rtkernel-livepatch-5_14_21-150500_53-defaultkgraft-patch-4_12_14-95_120-defaultxxdkgraft-patch-4_12_14-122_165-defaultkgraft-patch-4_12_14-122_173-defaultkernel-livepatch-4_12_14-150100_197_148-defaultkernel-livepatch-4_12_14-150100_197_151-defaultkernel-livepatch-4_12_14-150100_197_154-defaultkernel-livepatch-5_3_18-150200_24_157-defaultkernel-livepatch-5_3_18-150200_24_160-defaultkernel-livepatch-5_3_18-150300_59_127-defaultkernel-livepatch-5_3_18-150300_59_130-defaultkernel-livepatch-5_14_21-150400_15_37-rtkernel-livepatch-5_14_21-150500_13_5-rtavahilibavahi-client3libavahi-common3libavahi-core7libfreetype6kernel-firmware-allkernel-firmware-amdgpukernel-firmware-ath10kkernel-firmware-ath11kkernel-firmware-atheroskernel-firmware-bluetoothkernel-firmware-bnx2kernel-firmware-brcmkernel-firmware-chelsiokernel-firmware-dpaa2kernel-firmware-i915kernel-firmware-intelkernel-firmware-iwlwifikernel-firmware-liquidiokernel-firmware-marvellkernel-firmware-mediakernel-firmware-mediatekkernel-firmware-mellanoxkernel-firmware-mwifiexkernel-firmware-networkkernel-firmware-nfpkernel-firmware-nvidiakernel-firmware-platformkernel-firmware-presterakernel-firmware-qcomkernel-firmware-qlogickernel-firmware-radeonkernel-firmware-realtekkernel-firmware-serialkernel-firmware-soundkernel-firmware-tikernel-firmware-ueaglekernel-firmware-usb-networkucode-amdlibvmtools0open-vm-toolspython3-saltsaltsalt-minionsalt-transactional-updatekernel-livepatch-5_14_21-150400_15_40-rtkernel-livepatch-5_14_21-150400_24_69-defaultkernel-livepatch-5_14_21-150400_24_74-defaultkernel-livepatch-5_14_21-150500_55_12-defaultkernel-livepatch-5_14_21-150500_55_7-defaultlibeconf0libtss2-esys0libtss2-fapi1libtss2-mu0libtss2-rc0libtss2-sys1libtss2-tcti-device0libtss2-tctildr0tpm2-0-tsssudopython3-cryptographyglib2-toolslibgio-2_0-0libglib-2_0-0libgmodule-2_0-0libgobject-2_0-0libharfbuzz-gobject0libharfbuzz0typelib-1_0-HarfBuzz-0_0runclibcap2kubevirt-manifestskubevirt-virtctllibvirt-clientlibvirt-daemonlibvirt-daemon-driver-interfacelibvirt-daemon-driver-networklibvirt-daemon-driver-nodedevlibvirt-daemon-driver-nwfilterlibvirt-daemon-driver-qemulibvirt-daemon-driver-secretlibvirt-daemon-driver-storagelibvirt-daemon-driver-storage-corelibvirt-daemon-driver-storage-disklibvirt-daemon-driver-storage-iscsilibvirt-daemon-driver-storage-iscsi-directlibvirt-daemon-driver-storage-logicallibvirt-daemon-driver-storage-mpathlibvirt-daemon-driver-storage-rbdlibvirt-daemon-driver-storage-scsilibvirt-daemon-qemulibvirt-libslibmicrohttpd12python3-tornadolibxml2-2libxml2-toolspython3-libxml2mdadmlogin_defsshadowlibncurses6ncurses-utilsterminfoterminfo-baselibldap-2_4-2libldap-dataopenscdmidecodekgraft-patch-4_12_14-95_125-defaultperlperl-basecups-configlibcups2python3-requestslibyajl2dbus-1dbus-1-x11libdbus-1-3libnghttp2-14gstreamer-plugins-baselibgstallocators-1_0-0libgstapp-1_0-0libgstaudio-1_0-0libgstgl-1_0-0libgstpbutils-1_0-0libgstriff-1_0-0libgsttag-1_0-0libgstvideo-1_0-0libopenssl3opensshopenssh-clientsopenssh-commonopenssh-fipsopenssh-servergdk-pixbuf-loader-rsvglibrsvg-2-2libprocps7procpslibgcc_s1libstdc++6gawkkernel-livepatch-5_14_21-150400_15_46-rtkernel-livepatch-5_14_21-150400_24_81-defaultkernel-livepatch-5_14_21-150500_13_11-rtkernel-livepatch-5_14_21-150500_55_19-defaultpython3-urllib3(aarch64|x86_64)0:3.6.15-150300.10.48.1b88b2fd43dbdc2845.30:3.12.38-44.10:5-2.1-00:3.12.39-47.10:3.12.43-52.6.10:3.12.44-52.10.10:4-2.1-00:3.12.44-52.18.10:3.12.48-52.27.10:3-2.1-00:3.12.49-11.10:5-14.2-00:3.12.51-52.31.10:3.12.51-52.34.10:3.12.51-52.39.10:2-2.1-00:3.12.51-60.20.20:3.12.51-60.25.10:3.12.53-60.30.10:3.12.57-60.35.10:2-2.2-00:3.12.59-60.41.20:3.12.59-60.45.20:3.12.59-60.45.20:3.12.32-33.10:3.12.32-33.10:3.12.36-38.10:3.12.36-38.10:2-7.1-00:2-10.1-00:3.12.39-47.10:2-3.1-00:2-6.1-00:3.12.43-52.6.10:2-5.1-00:3.12.49-11.10:4-2.3-00:2-4.1-00:3.12.44-52.18.10:3.12.51-60.25.10:3.12.51-60.20.20:3-8.2-00:6-2.1-00:4-11.2-00:3.12.53-60.30.10:4.4.21-69.10:4.4.21-81.30:4.4.21-84.10:4.4.21-90.10:4.4.38-93.10:4.4.38-93.10:3.12.57-60.35.10:6-17.2-00:3.12.59-60.41.20:7-20.2-00:7-2.1-00:3.12.62-60.62.10:3-5.1-00:3.12.62-60.62.10:2-9.1-00:3.12.62-60.64.8.20:3.12.62-60.64.8.20:8-23.2-00:8-2.1-00:3.12.67-60.64.18.10:4.4.21-81.30:3.12.67-60.64.21.10:4.4.21-84.10:4.4.103-6.33.10:5-2.2-00:4.4.103-6.38.10:4.4.82-6.3.10:8-2.2-00:4.4.82-6.6.10:7-2.2-00:4.4.82-6.9.10:4.4.92-6.18.10:6-2.2-00:4.4.92-6.30.10:4.4.92-6.30.10:9-18.10.1-00:9-2.1-00:4.4.49-92.11.10:4.4.49-92.14.10:4.4.59-92.17.30:4.4.59-92.20.20:4.4.59-92.24.20:4.4.74-92.29.10:4.4.74-92.32.10:4.4.74-92.35.10:4.4.74-92.38.10:4.4.74-92.38.10:10-18.13.1-00:10-4.1-00:9-4.1-00:7-4.1-00:6-4.1-00:5-4.1-00:4-4.1-00:3-4.1-00:4.4.74-92.35.10:4.4.82-6.3.10:7-21.1-00:7-3.1-00:6-3.1-00:4-3.1-00:3-3.1-00:4.4.59-92.20.20:4.4.90-92.45.10:4.4.90-92.45.10:4.4.92-6.18.10:4.12.14-95.40.10:4.12.14-95.40.10:4.12.14-120.10:8-21.2-00:4.12.14-122.7.10:4.12.14-122.7.10:4.12.14-150.41.10:4.12.14-150.41.10:4.12.14-197.26.10:4.12.14-197.26.10:11-2.1-00:4.4.59-92.24.20:10-2.1-00:4.4.82-6.9.10:4.4.114-94.11.30:4.4.114-94.14.10:4.4.21-69.10:4.4.103-92.53.10:4.4.103-92.56.10:4.4.90-92.50.10:4.4.90-92.50.10:4.12.14-23.10:4.12.14-25.3.10:4.12.14-25.3.10:8-18.7.1-00:4.4.49-92.11.1(aarch64|x86_64)0:5.14.21-150400.24.60.1(aarch64|x86_64)0:5.14.21-150400.24.60.1.150400.24.24.3(x86_64)0:5.14.21-150400.15.23.10:3.12.67-60.64.24.10:3.12.69-60.64.29.10:4-11.1-00:3.12.69-60.64.32.10:3.12.69-60.64.35.10:4.4.49-92.14.10:4.4.74-92.29.10:4.4.73-5.10:2-2.3.2-00:4.4.73-5.10:3-2.2-00:4.4.120-94.17.10:4.4.126-94.22.10:4.12.14-95.19.10:4.12.14-95.24.10:4.12.14-95.29.10:4.12.14-95.32.10:4.12.14-95.37.10:4.12.14-95.45.10:4.12.14-95.48.10:4.12.14-95.51.10:4.12.14-95.51.10:5-12.2-00:4.12.14-122.12.10:4.12.14-122.17.10:4.12.14-122.20.10:4.12.14-150.22.10:4.12.14-150.27.10:4.12.14-150.32.10:4.12.14-150.35.10:4.12.14-150.38.10:4.12.14-150.47.10:4.12.14-150.47.10:4.12.14-195.10:12-34.1-00:4.12.14-197.10.10:4.12.14-197.15.10:4.12.14-197.18.10:4.12.14-197.21.10:4.12.14-197.29.10:4.12.14-197.34.10:4.12.14-197.37.10:4.12.14-197.4.10:4.12.14-197.40.10:4.12.14-197.7.10:4.12.14-197.7.10:4.4.131-94.29.10:4.4.132-94.33.10:4.12.14-25.13.10:3-2.3-00:4.12.14-25.6.10:4.12.14-25.6.10:4.4.138-94.39.10:4.4.140-94.42.10:4.4.143-94.47.10:4-10.2-00:4.12.14-25.16.10:9-25.2-00:4.12.14-23.10:4.4.155-94.50.10:4.4.156-94.57.10:4.4.156-94.61.10:4.4.156-94.64.10:5-13.2-00:4.12.14-25.19.10:4.4.140-94.42.10:10-28.1-00:3-7.3-00:4.12.14-94.41.10:9-2.25.1-00:4.12.14-95.3.10:8-2.5-00:4.12.14-95.6.10:7-2.5-00:4.12.14-95.6.10:4.12.14-25.28.10:7-2.3-00:4.12.14-25.28.10:4.4.162-94.69.20:4.4.162-94.72.10:4.4.162-94.72.10:3-2.7.2-00:4.12.14-95.3.10:8-22.2-00:4.12.14-25.22.10:4.12.14-25.25.10:6-16.2-00:4.12.14-95.68.10:14-2.2-00:4.12.14-95.71.10:13-2.2-00:4.12.14-95.74.10:10-2.2-00:4.12.14-95.77.10:9-2.2-00:4.12.14-95.80.10:4.12.14-95.83.20:4.12.14-95.83.20:4.12.14-150.66.10:4.12.14-150.69.10:4.12.14-150.72.10:4.12.14-150.75.10:4.12.14-150.78.10:4.12.14-150.78.10:5-2.5-00:4-2.5-00:2-2.5-00:10-2.5-00:9-2.5-00:12-2.1-00:4.4.132-94.33.10:7-19.2-00:6-15.2-00:4.12.14-120.10:4.12.14-95.13.10:6-2.5-00:4.12.14-95.16.10:4.12.14-150.14.20:6-2.3-00:4.12.14-150.17.10:5-2.13.1-00:4.4.175-94.79.10:4.4.176-94.88.10:4.4.178-94.91.20:4.4.178-94.91.20:6-2.16.1-00:4-10.1-00:4.12.14-195.10:4.4.180-94.97.10:4.4.180-94.97.10:3-7.2-00:4.12.14-197.4.1(noarch)0:202202-150400.5.10.10:7-2.19.1-00:6-16.1-00:4.12.14-95.45.10:4.12.14-197.29.10:4.12.14-197.18.10:4.12.14-95.29.10:4.12.14-150.32.10:4-2.2-00:4.12.14-95.54.10:4.12.14-95.54.10:4.12.14-150.52.10:4.12.14-150.52.10:8-2.22.1-00:7-19.1-0(aarch64|x86_64)0:3.6.15-150300.10.37.2(aarch64|x86_64)0:4.8.30-150000.7.6.10:3-6.2-00:10-28.2-00:4-2.10.2-00:4.4.175-94.79.10:4.12.14-95.48.10:4.12.14-197.37.10:4.12.14-95.57.10:4.12.14-95.60.10:4.12.14-95.60.10:4.12.14-150.55.10:4.12.14-150.58.10:4.12.14-150.58.10:7-18.2-00:4.12.14-197.40.10:4.12.14-150.63.10:4.12.14-150.69.10:4.12.14-95.65.10:4.12.14-95.65.10:4.12.14-122.23.10:4.12.14-122.26.10:4.12.14-122.29.10:4.12.14-122.32.10:4.12.14-122.37.10:4.12.14-122.41.10:4.12.14-122.46.10:4.12.14-122.51.20:4.12.14-122.54.10:4.12.14-122.54.10:4.12.14-150.63.10:4.12.14-197.45.10:4.12.14-197.48.10:4.12.14-197.51.10:4.12.14-197.56.10:4.12.14-197.61.10:4.12.14-197.64.10:4.12.14-197.67.10:4.12.14-197.72.10:4.12.14-197.75.10:4.12.14-197.75.10:5.3.18-22.20:7-5.2-00:5.3.18-24.12.10:5.3.18-24.15.10:5.3.18-24.9.10:5.3.18-24.9.10:5.3.18-24.24.10:5.3.18-24.29.20:5.3.18-24.34.10:5.3.18-24.37.10:5.3.18-24.43.2(aarch64|ppc64le|s390x|x86_64)0:73.2-150000.1.3.1(noarch)0:73.2-150000.1.3.10:4.12.14-197.61.10:4-9.1-00:11-31.2-00:4.12.14-95.57.10:4.12.14-150.55.10:4.12.14-197.51.10:2-5.2-00:2-2.3-00:4.12.14-197.56.1(aarch64|x86_64)0:6.2.0-150400.37.14.2(x86_64)0:6.2.0-150400.37.14.2(aarch64)0:6.2.0-150400.37.14.2(noarch)0:1.0.0+-150400.37.14.2(noarch)0:1.15.0_0_g2dd4b9b-150400.37.14.2(noarch)0:8-150400.37.14.20:4.12.14-197.45.10:5.3.18-22.2(aarch64|x86_64)0:1.9.0-150000.4.16.1(aarch64|x86_64)0:5.14.21-150400.24.46.1(aarch64|x86_64)0:5.14.21-150400.24.46.1.150400.24.17.3(x86_64)0:5.14.21-150400.15.11.10:9-3.2-00:4.12.14-197.67.10:5-5.2-00:4.12.14-95.71.10:4.12.14-122.60.10:4.12.14-122.63.10:4.12.14-122.63.10:4.12.14-197.83.10:4.12.14-197.86.10:4.12.14-197.86.10:5.3.18-24.49.20:5.3.18-24.52.10:5.3.18-24.52.10:5.3.18-57.30:10-3.2-00:5.3.18-57.30:11-2.2-00:4.12.14-122.57.10:4.12.14-122.60.10:4.12.14-197.78.10:4.12.14-197.78.10:8-5.2-0(aarch64|x86_64)0:0.4.7-150100.3.18.10:4.12.14-95.68.10:4.12.14-150.66.10:4.12.14-197.83.10:5.3.18-24.46.10:6-5.2-00:4.12.14-122.57.10:12-2.2-00:4.12.14-122.66.20:4.12.14-122.66.20:11-5.2-00:5.3.18-24.53.4.10:4.12.14-95.77.10:15-2.2-00:4.12.14-122.71.10:4.12.14-122.74.10:4.12.14-122.77.10:4.12.14-122.77.10:4.12.14-150.72.10:4.12.14-197.89.20:4.12.14-197.92.10:4.12.14-197.92.10:14-5.2-00:5.3.18-24.61.10:5.3.18-24.64.10:5.3.18-24.67.30:4.12.14-95.102.10:4.12.14-95.105.10:13-2.3-00:4.12.14-95.88.10:9-2.3-00:4.12.14-95.93.10:8-2.3-00:4.12.14-95.96.10:4.12.14-95.99.30:4.12.14-95.99.30:4.12.14-122.103.10:14-2.3-00:4.12.14-122.106.10:12-2.3-00:4.12.14-122.110.10:10-2.3-00:4.12.14-122.113.10:4.12.14-122.116.10:4.12.14-122.121.20:5-2.3-00:4.12.14-122.124.30:4.12.14-122.127.10:4.12.14-122.130.10:4.12.14-122.88.10:16-2.3-00:4.12.14-122.91.20:4.12.14-122.98.10:4.12.14-122.98.10:4.12.14-150000.150.89.10:7-150000.2.2-00:4.12.14-150000.150.92.20:4-150000.2.1-00:4.12.14-150000.150.95.10:2-150000.2.1-00:4.12.14-150000.150.98.10:13-150000.2.2-00:4.12.14-150.83.10:9-150000.2.2-00:4.12.14-150.86.10:8-150000.2.2-00:4.12.14-150.86.10:4.12.14-150100.197.111.10:7-150100.2.2-00:4.12.14-150100.197.114.20:4-150100.2.1-00:4.12.14-150100.197.117.10:2-150100.2.1-00:4.12.14-150100.197.120.10:4.12.14-197.102.20:13-150100.2.2-00:4.12.14-197.105.10:9-150100.2.2-00:4.12.14-197.108.10:8-150100.2.2-00:4.12.14-197.108.10:5.3.18-150200.24.112.10:7-150200.2.2-00:5.3.18-150200.24.115.10:5-150200.2.1-00:5.3.18-150200.24.126.10:2-150200.2.1-00:5.3.18-24.102.10:12-150200.2.2-00:5.3.18-24.107.10:11-150200.2.2-00:5.3.18-24.83.20:16-150200.2.2-00:5.3.18-24.86.20:5.3.18-24.93.10:15-150200.2.2-00:5.3.18-24.96.10:14-150200.2.2-00:5.3.18-24.99.10:13-150200.2.2-00:5.3.18-24.99.10:5.3.18-150300.59.43.10:13-150300.2.2-00:5.3.18-150300.59.46.10:5.3.18-150300.59.49.10:12-150300.2.2-00:5.3.18-150300.59.54.10:11-150300.2.2-00:5.3.18-150300.59.60.40:10-150300.2.2-00:5.3.18-150300.59.63.10:7-150300.2.2-00:5.3.18-150300.59.68.10:6-150300.2.2-00:5.3.18-150300.59.71.20:5-150300.2.1-00:5.3.18-150300.59.76.10:4-150300.2.1-00:5.3.18-150300.59.87.10:3-150300.2.1-00:5.3.18-59.24.10:16-150300.2.2-00:5.3.18-59.27.10:5.3.18-59.34.10:15-150300.2.2-00:5.3.18-59.37.20:14-150300.2.2-00:5.3.18-59.40.10:5.3.18-59.40.10:5.14.21-150400.22.10:5-150400.4.12.3-00:5.14.21-150400.24.11.10:2-150400.2.1-00:5.14.21-150400.24.18.10:5.14.21-150400.24.18.10:6-150000.2.1-00:15-150000.2.2-00:11-150000.2.2-00:10-150000.2.2-00:4.12.14-95.80.10:4.12.14-122.80.10:4.12.14-122.83.10:4.12.14-122.88.10:4.12.14-150.75.10:4.12.14-197.99.10:4.12.14-197.99.10:5.3.18-24.70.10:5.3.18-24.75.30:5.3.18-24.78.10:5.3.18-24.78.10:5.3.18-59.10.10:8-150300.2.2-00:5.3.18-59.13.10:5.3.18-59.16.10:5.3.18-59.19.10:5.3.18-59.5.20:5.3.18-59.5.20:4.12.14-197.64.10:13-5.2-00:4.12.14-122.32.10:13-2.1-00:2-150300.2.1-00:12-3.1-00:10-150300.2.1-00:9-150300.2.1-00:8-150300.2.1-00:6-150300.2.1-00:5.3.18-24.53.4.10:9-3.1-0(aarch64|x86_64)0:4.3.1-150400.4.11.1(noarch)0:4.3.1-150400.4.11.1(aarch64|x86_64)0:4.15.13+git.591.ab36624310c-150400.3.19.10:5.3.18-24.93.10:16-2.2-00:4.12.14-122.80.10:5.3.18-24.75.30:5-3.1-00:4.12.14-95.74.10:4.12.14-122.71.10:4.12.14-197.89.20:5.3.18-24.64.10:10-5.2-00:9-5.2-0(aarch64|x86_64)0:1.1.34-150400.3.3.10:12-5.2-00:6-150100.2.1-00:15-150100.2.2-00:11-150100.2.2-00:10-150100.2.2-00:10-150200.2.2-00:8-150200.2.1-00:18-150200.2.2-00:17-150200.2.2-00:9-150300.2.2-00:7-150300.2.1-00:18-150300.2.2-00:17-150300.2.2-00:8-150400.4.21.1-00:5-150400.2.1-00:5.14.21-150400.24.11.10:8-3.2-00:4.12.14-122.83.10:5.3.18-24.70.1(aarch64|x86_64)0:0.8.2-150300.3.6.1(aarch64|x86_64)0:6.2.0-150400.37.23.1(x86_64)0:6.2.0-150400.37.23.1(aarch64)0:6.2.0-150400.37.23.1(noarch)0:1.0.0+-150400.37.23.1(noarch)0:1.15.0_0_g2dd4b9b-150400.37.23.1(noarch)0:8-150400.37.23.10:11-2.3-00:6-3.2-0(aarch64|x86_64)0:1.19.0-150400.3.3.1(aarch64|x86_64)0:99~1.19.0-150400.3.3.1(noarch)0:9.0.0814-150000.5.28.1(aarch64|x86_64)0:9.0.0814-150000.5.28.10:2-150200.2.2-00:3-150200.2.2-00:5.3.18-150200.24.129.10:5.3.18-150200.24.134.10:4-150200.2.1-00:3-150200.2.1-00:12-150200.2.1-00:14-150200.2.1-00:11-150200.2.1-00:10-150200.2.1-00:7-150200.2.1-00:6-150200.2.1-00:2-150300.2.2-00:3-150300.2.2-00:5.3.18-150300.59.90.10:5.3.18-150300.59.93.10:5.3.18-150300.59.98.10:14-150200.3.1-00:12-150300.2.1-00:11-150300.2.1-00:2-150400.4.3.3-00:5.14.21-150400.24.21.20:2-150400.2.2-00:5.14.21-150400.24.28.10:5.14.21-150400.24.33.20:5.14.21-150400.24.33.20:15-2.1-00:14-2.1-00:4.12.14-95.96.10:15-150000.2.1-00:12-150000.2.1-00:7-150000.2.1-00:3-150000.2.1-00:13-150200.3.1-00:4-150300.2.2-00:5.3.18-24.96.10:11-3.2-00:5-150300.2.2-0(aarch64|s390x|x86_64)0:5.62-150400.4.16.10:4.12.14-122.91.20:5.3.18-24.86.20:16-2.1-00:16-150000.2.1-00:13-150000.2.1-00:8-150000.2.1-00:8-150100.2.1-00:16-150100.2.1-00:15-150100.2.1-00:13-150100.2.1-00:16-150200.2.1-00:13-150200.2.1-00:9-150200.2.1-00:16-150200.3.1-00:14-150300.2.1-00:13-150300.2.1-00:10-150000.2.1-00:5-150000.2.1-00:5-150100.2.1-00:12-150100.2.1-00:10-150100.2.1-00:4.12.14-95.88.10:4.12.14-150.83.1(aarch64|x86_64)0:16.2.11.58+g38d6afd3b78-150400.3.6.10:7-150100.2.1-00:3-150100.2.1-00:14-150100.2.1-00:15-150200.2.1-00:15-150200.3.1-00:4.12.14-95.93.10:5.14.21-150400.22.10:14-150000.2.2-00:5-150000.2.2-00:4-150000.2.2-00:5-150100.2.2-00:4-150100.2.2-00:16-150100.2.2-00:14-150100.2.2-00:8-150200.2.2-00:9-150200.2.2-00:18-150200.3.2-0(aarch64|x86_64)0:6.2.0-150400.37.11.1(x86_64)0:6.2.0-150400.37.11.1(aarch64)0:6.2.0-150400.37.11.1(noarch)0:1.0.0+-150400.37.11.1(noarch)0:1.15.0_0_g2dd4b9b-150400.37.11.1(noarch)0:8-150400.37.11.10:4-150200.2.2-00:19-150200.3.2-00:17-150200.3.1-00:15-150300.2.1-00:17-2.2-00:6-150000.2.2-00:12-150000.2.2-00:6-150100.2.2-00:12-150100.2.2-00:6-150400.4.15.3-00:6-150200.2.2-00:4-150400.4.9.3-0(aarch64|x86_64)0:2.1.5-150400.3.3.10:18-2.3-00:17-2.3-00:5-150000.2.3-00:16-150000.2.3-00:11-150000.2.3-00:7-150000.2.3-00:6-150000.2.3-00:5-150100.2.3-00:11-150100.2.3-00:7-150100.2.3-00:6-150100.2.3-00:16-150100.2.3-00:5-150200.2.3-00:10-150200.2.3-00:9-150200.2.3-00:18-150200.2.3-00:17-150200.2.3-00:16-150200.2.3-00:14-150200.2.3-00:13-150200.2.3-00:12-150200.2.3-00:11-150200.2.3-00:11-150300.2.3-00:10-150300.2.3-00:9-150300.2.3-00:8-150300.3.2-00:5-150300.2.3-00:4-150300.2.3-00:18-150300.2.3-00:17-150300.2.3-00:16-150300.2.3-00:14-150300.2.3-00:13-150300.2.3-00:12-150300.2.3-00:3-150400.4.6.2-0(x86_64)0:20230214-150200.21.1(aarch64|x86_64)0:4.15.13+git.663.9c654e06cdb-150400.3.28.1(aarch64|x86_64)0:5.14.21-150400.24.63.1(aarch64|x86_64)0:5.14.21-150400.24.63.1.150400.24.27.1(x86_64)0:5.14.21-150400.15.28.20:11-150100.2.1-0(aarch64|x86_64)0:1.6.16-150000.82.2(aarch64|x86_64)0:3.79.3-150400.3.23.1(noarch)0:2018.1.18-150000.3.3.1(x86_64)0:4.16.3_02-150400.4.19.1(aarch64|x86_64)0:5.9.3-150300.15.3.1(aarch64|x86_64)0:2.06-150400.11.17.1(noarch)0:2.06-150400.11.17.10:5.3.18-150300.59.101.10:5.3.18-150300.59.98.10:10-150400.4.2-00:7-150400.2.1-00:6-150400.2.1-00:4-150400.2.1-00:3-150400.2.1-0(aarch64|x86_64)0:1.6.12-150000.79.10:14-150000.2.1-00:11-150000.2.1-0(x86_64)0:4.16.3_04-150400.4.22.1(aarch64|x86_64)0:15.7-150300.4.16.10:3-150100.2.2-00:3-150400.2.2-00:16-150000.2.2-00:19-150300.2.2-00:4.12.14-122.130.10:4.12.14-150100.197.120.10:5.3.18-150200.24.126.10:3-150000.2.2-0(aarch64|x86_64)0:5.14.21-150400.24.41.1(aarch64|x86_64)0:5.14.21-150400.24.41.1.150400.24.15.1(x86_64)0:5.14.21-150400.15.8.1(aarch64|x86_64)0:2.4.4-150400.4.11.1(aarch64|x86_64)0:4.15.13+git.636.53d93c5b9d6-150400.3.23.1(x86_64)0:20230512-150200.24.10:4.12.14-95.108.10:4.12.14-95.111.10:4.12.14-122.133.10:4.12.14-122.136.10:4.12.14-122.136.10:4.12.14-150100.197.123.10:4.12.14-150100.197.126.10:5.14.21-150400.24.28.1(noarch)0:9.0.1040-150000.5.31.1(aarch64|x86_64)0:9.0.1040-150000.5.31.1(aarch64|x86_64)0:5.14.21-150400.24.55.3(aarch64|x86_64)0:5.14.21-150400.24.55.3.150400.24.22.7(x86_64)0:5.14.21-150400.15.18.10:4.12.14-150000.150.101.10:4.12.14-150000.150.104.10:9-150400.4.24.1-0(aarch64|x86_64)0:1.6.5-150000.3.27.1(noarch)0:1.6.5-150000.3.27.10:4.12.14-95.114.10:4.12.14-122.139.10:4.12.14-122.144.10:4.12.14-122.144.10:9-150100.2.1-00:4.12.14-150100.197.131.10:5.3.18-150200.24.139.10:5.3.18-24.107.10:11-150400.7.2-00:8-150400.2.1-0(aarch64|x86_64)0:4.0.9-150000.45.22.1(aarch64|x86_64)0:4.0.9-150000.45.19.1(aarch64|x86_64)0:20.10.23_ce-150000.175.1(aarch64|x86_64)0:3.5.1-150400.3.12.10:7-150400.4.18.3-00:5.14.21-150400.24.21.2(noarch)0:44.1.1-150400.3.3.1(noarch)0:0.18.2-150300.3.3.1(aarch64|x86_64)0:5.14.21-150400.24.81.1(aarch64|x86_64)0:5.14.21-150400.24.81.1.150400.24.35.3(x86_64)0:5.14.21-150400.15.46.1(x86_64)0:20230808-150200.27.1(x86_64)0:4.16.5_02-150400.4.31.1(aarch64|x86_64)0:10.39-150400.4.9.1(x86_64)0:4.16.3_06-150400.4.25.1(aarch64|x86_64)0:5.14.21-150400.24.66.1(aarch64|x86_64)0:5.14.21-150400.24.66.1.150400.24.29.1(x86_64)0:5.14.21-150400.15.37.2(aarch64|x86_64)0:1.19.2-150400.3.3.1(noarch)0:1.10.0-150100.5.12.1(aarch64|x86_64)0:1.1.1l-150400.7.42.1(aarch64|x86_64)0:7.79.1-150400.5.12.10:5.14.21-150400.24.38.10:(aarch64|x86_64)0:249.14-150400.8.19.1(aarch64|x86_64)0:1.1.1l-150400.7.22.1(aarch64|x86_64)0:0.40.0-150400.3.3.1(aarch64|x86_64)0:5.9.3-150300.15.8.1(aarch64|x86_64)0:3.6.15-150300.10.40.1(noarch)0:3.1.26-150300.7.35.21.1(aarch64|x86_64)0:590-150400.3.3.1(aarch64|x86_64)0:3.39.3-150000.3.20.10:5.3.18-150200.24.142.10:5-150200.2.2-00:5.3.18-150200.24.145.10:5.3.18-150200.24.145.10:5.3.18-150300.59.106.10:5.3.18-150300.59.109.10:5.3.18-150300.59.112.10:5.3.18-150300.59.115.20:12-150400.2.3-0(aarch64|x86_64)0:1.3.5-150000.4.6.1(aarch64|x86_64)0:4.0.9-150000.45.25.1(aarch64|x86_64)0:1.34-150000.3.31.1(aarch64|x86_64)0:1.5.0-150400.3.3.1(aarch64|x86_64)0:1.19.0-150000.3.20.1(noarch)0:9.0.1234-150000.5.34.1(aarch64|x86_64)0:9.0.1234-150000.5.34.1(aarch64|x86_64)0:2.4.8+git0.d1f8d41e0-150400.3.6.10:5.14.21-150400.24.41.10:4.12.14-122.147.10:4.12.14-122.147.10:6-150200.2.3-00:3-150200.2.3-00:5.3.18-150200.24.139.10:3-150300.2.3-00:8-150300.2.3-00:6-150300.2.3-00:4-150400.2.3-00:12-150400.10.3-00:9-150400.2.3-00:8-150400.2.3-00:6-150400.2.3-00:5-150400.2.3-00:3-150400.2.3-00:4-150400.2.2-00:6-150400.2.2-00:5-150400.2.2-00:14-150400.16.1-00:11-150400.2.3-00:10-150400.2.3-00:7-150400.2.3-00:5.14.21-150400.24.46.10:5.14.21-150400.24.55.30:5.14.21-150400.24.60.10:2-150400.2.3-00:8-150200.2.3-00:4-150200.2.3-00:7-150300.2.3-0(aarch64|x86_64)0:1.1.1l-150400.7.31.2(aarch64|x86_64)0:1.1.1l-150400.7.34.1(noarch)0:9.0.1386-150000.5.37.1(aarch64|x86_64)0:9.0.1386-150000.5.37.10:4.12.14-95.117.10:4.12.14-150100.197.134.10:4.12.14-150100.197.134.10:5.3.18-150200.24.142.10:13-150400.13.2-00:10-150400.2.2-00:9-150400.2.2-00:7-150400.2.2-0(aarch64|x86_64)0:2.31-150300.46.1(aarch64|x86_64)0:3.79.4-150400.3.26.1(aarch64|x86_64)0:4.4.4-150400.4.16.1(noarch)0:4.4.4-150400.4.16.1(aarch64|x86_64)0:4.0.9-150000.45.28.1(x86_64)0:1.2.37-150400.14.3.4(aarch64|x86_64)0:0.8.2-150300.3.9.10:4.12.14-122.150.10:4.12.14-122.153.10:4.12.14-122.156.10:4.12.14-122.159.10:4.12.14-122.162.10:4.12.14-122.162.10:8-150100.2.3-00:4.12.14-150100.197.137.20:4.12.14-150100.197.142.10:4.12.14-150100.197.145.10:4.12.14-150100.197.145.10:5.3.18-150200.24.148.10:5.3.18-150200.24.151.10:5.3.18-150200.24.154.10:5.3.18-150200.24.154.10:5.3.18-150300.59.118.10:5.3.18-150300.59.121.20:5.3.18-150300.59.124.10:8-150400.2.2-00:14-150400.2.2-00:13-150400.2.2-00:11-150400.2.2-00:5.14.21-150400.24.63.10:5.14.21-150400.24.66.10:3-150500.6.2-00:5.14.21-150500.53.2(aarch64|x86_64)0:5.14.21-150400.24.69.1(aarch64|x86_64)0:5.14.21-150400.24.69.1.150400.24.31.10:2-150200.2.3-00:2-150300.2.3-00:4.12.14-95.120.40:4.12.14-122.150.1(noarch)0:9.0.1443-150000.5.40.1(aarch64|x86_64)0:9.0.1443-150000.5.40.1(aarch64|ppc64le|s390x|x86_64)0:9.0.1443-150000.5.40.1(aarch64|x86_64)0:5.14.21-150400.24.92.1(aarch64|x86_64)0:5.14.21-150400.24.92.1.150400.24.42.1(x86_64)0:5.14.21-150400.15.56.10:4.12.14-122.153.10:2-150100.2.2-00:4.12.14-150100.197.137.20:4.12.14-95.120.40:4.12.14-122.165.10:4.12.14-122.173.10:4.12.14-122.173.10:4.12.14-150100.197.148.10:4.12.14-150100.197.151.10:4.12.14-150100.197.154.10:4.12.14-150100.197.154.10:5.3.18-150200.24.157.10:5.3.18-150200.24.160.20:5.3.18-150200.24.160.20:5.3.18-150300.59.127.10:5.3.18-150300.59.130.10:12-150400.2.2-00:4-150500.9.2-00:3-150500.2.1-0(x86_64)0:5.14.21-150400.15.40.10:5.3.18-150200.24.148.1(aarch64|x86_64)0:0.8-150400.7.3.10:4.12.14-122.156.10:4.12.14-150100.197.142.10:4.12.14-150100.197.148.10:2-150500.3.1-0(aarch64|x86_64)0:2.10.4-150000.4.15.1(aarch64|x86_64)0:5.14.21-150400.24.88.1(aarch64|x86_64)0:5.14.21-150400.24.88.1.150400.24.40.1(x86_64)0:5.14.21-150400.15.53.1(noarch)0:20220509-150400.4.22.1(x86_64)0:4.16.5_04-150400.4.34.1(aarch64|x86_64)0:5.14.21-150400.24.74.1(aarch64|x86_64)0:5.14.21-150400.24.74.1.150400.24.33.3(noarch)0:20220509-150400.4.19.1(x86_64)0:12.2.0-150300.29.1(aarch64|x86_64)0:3006.0-150400.8.44.1(x86_64)0:12.3.0-150300.37.10:5.14.21-150400.24.69.10:5.14.21-150400.24.74.10:2-150500.2.1-00:5.14.21-150500.55.12.10:5.14.21-150500.55.7.10:4.12.14-122.159.1(aarch64|x86_64)0:0.5.2-150400.3.6.1(aarch64|x86_64)0:3.1.0-150400.3.3.1(aarch64|x86_64)0:1.9.9-150400.4.12.10:5.3.18-150200.24.151.10:4.12.14-95.114.10:4.12.14-150100.197.131.1(aarch64|x86_64)0:7.79.1-150400.5.15.1(aarch64|x86_64)0:3.3.2-150400.16.6.1(noarch)0:9.0.1572-150000.5.46.1(aarch64|x86_64)0:9.0.1572-150000.5.46.1(aarch64|x86_64)0:3.6.15-150300.10.45.1(aarch64|x86_64)0:2.70.5-150400.3.8.1(aarch64|x86_64)0:1.6.19-150000.87.1(aarch64|x86_64)0:3.4.0-150400.3.6.1(aarch64|x86_64)0:2.4.8+git0.d1f8d41e0-150400.3.10.1(aarch64|x86_64)0:1.1.5-150000.41.1(aarch64|x86_64)0:2.63-150400.3.3.1(x86_64)0:0.54.0-150400.3.13.1(aarch64|x86_64)0:1.1.1l-150400.7.37.10:13-150100.2.3-00:10-150100.2.3-00:3-150100.2.3-00:2-150100.2.3-0(aarch64|x86_64)0:8.0.0-150400.7.6.1(aarch64|x86_64)0:1.9.9-150400.4.26.1(aarch64|s390x|x86_64)0:5.62-150400.4.13.1(aarch64|x86_64)0:0.9.57-150000.3.3.1(aarch64|x86_64)0:7.79.1-150400.5.18.1(aarch64|x86_64)0:8.0.1-150400.5.23.1(aarch64|x86_64)0:3006.0-150400.8.37.2(aarch64|x86_64)0:4.5.3-150000.3.6.1(aarch64|x86_64)0:2.9.14-150400.5.16.1(aarch64|x86_64)0:6.2.0-150400.37.20.1(x86_64)0:6.2.0-150400.37.20.1(aarch64)0:6.2.0-150400.37.20.1(noarch)0:1.0.0+-150400.37.20.1(noarch)0:1.15.0_0_g2dd4b9b-150400.37.20.1(noarch)0:8-150400.37.20.1(aarch64|x86_64)0:4.1-150300.24.33.1(aarch64|x86_64)0:24.0.5_ce-150000.185.1(noarch)0:4.8.1-150400.10.6.1(aarch64|x86_64)0:4.8.1-150400.10.6.1(aarch64|x86_64)0:6.1-150000.5.15.1(aarch64|x86_64)0:2.4.46-150200.14.14.1(noarch)0:2.4.46-150200.14.14.1(aarch64|x86_64)0:0.22.0-150400.3.3.1(aarch64|x86_64)0:3.4-150400.16.8.1(aarch64|x86_64)0:1.19.1-150000.3.23.1(aarch64|x86_64)0:1.6.5-150000.3.30.1(noarch)0:1.6.5-150000.3.30.10:4.12.14-95.125.10:4.12.14-95.125.1(aarch64|x86_64)0:5.26.1-150300.17.14.1(aarch64|x86_64)0:8.0.1-150400.5.26.1(aarch64|x86_64)0:2.2.7-150000.3.43.1(aarch64|x86_64)0:2.2.7-150000.3.51.2(noarch)0:2.24.0-150300.3.3.1(aarch64|x86_64)0:2.1.0-150000.4.6.1(aarch64|x86_64)0:2.2.7-150000.3.46.1(x86_64)0:4.16.5_06-150400.4.37.1(aarch64|x86_64)0:1.1.1l-150400.7.48.1(aarch64|x86_64)0:1.12.2-150400.18.8.10:4.12.14-122.165.10:4.12.14-150100.197.151.10:5.3.18-150200.24.157.1(aarch64|x86_64)0:1.40.0-150200.9.1(aarch64|x86_64)0:1.19.2-150400.3.6.1(aarch64|x86_64)0:1.20.1-150400.3.3.1(aarch64|x86_64)0:8.0.1-150400.5.29.1(aarch64|x86_64)0:1.1.1l-150400.7.53.1(aarch64|ppc64le|s390x|x86_64)0:3.0.8-150400.4.34.1(aarch64|x86_64)0:8.4p1-150300.3.22.1(aarch64|x86_64)0:8.0.1-150400.5.32.1(aarch64|x86_64)0:2.52.10-150400.3.6.1(aarch64|x86_64)0:2.9.14-150400.5.22.1(aarch64|x86_64)0:3.3.15-150000.7.34.1(aarch64|x86_64)0:3.6.15-150300.10.51.1(aarch64|x86_64)0:2.4.22+git0.f8e3218e2-150400.3.16.1(aarch64|x86_64)0:12.3.0+git1204-150000.1.16.1(aarch64|x86_64)0:0.22.0-150400.3.6.1(aarch64|x86_64)0:4.15.13+git.691.3d3cea0641-150400.3.31.1(aarch64|x86_64)0:4.2.1-150000.3.3.10:5.14.21-150400.24.81.10:5.14.21-150500.55.19.1(aarch64|x86_64)0:1.6.5-150000.3.33.1(noarch)0:1.6.5-150000.3.33.1(noarch)0:1.25.10-150300.4.6.1(noarch)0:4.8.1-150400.10.12.1(aarch64|x86_64)0:4.8.1-150400.10.12.1(noarch)0:9.0.1894-150000.5.54.1(aarch64|x86_64)0:9.0.1894-150000.5.54.1(aarch64|x86_64)0:2.31-150300.63.1