CVE-2017-15638

Опубликовано: 10 нояб. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 6.4

EPSS Низкий

Описание

The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for rpc services.

Ссылки

http://lists.opensuse.org/opensuse-updates/2017-11/msg00014.html
Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2017-11/msg00014.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:suse:susefirewall2:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server_for_raspberry_pi:12:sp2:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00286

Низкий

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

openSUSE-SU-2017:2940-1

suse-cvrf

больше 8 лет назад

Security update for SuSEfirewall2

SUSE-SU-2017:2935-1

suse-cvrf

больше 8 лет назад

Security update for SuSEfirewall2

SUSE-SU-2017:2932-1

suse-cvrf

больше 8 лет назад

Security update for SuSEfirewall2

SUSE-SU-2017:2923-1

suse-cvrf

больше 8 лет назад

Security update for SuSEfirewall2

GHSA-v93v-g9vq-9v7p

CVSS3: 6.5

github

больше 3 лет назад

EPSS

Процентиль: 52%

0.00286

Низкий

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo