Описание
Security update for net-tools
This update for net-tools fixes the following issues:
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
Список пакетов
Container suse/sle-micro-rancher/5.3:latest
net-tools-2.0+git20170221.479bb4a-150000.5.18.1
Container suse/sle-micro-rancher/5.4:latest
net-tools-2.0+git20170221.479bb4a-150000.5.18.1
Container suse/sle-micro/5.5:latest
net-tools-2.0+git20170221.479bb4a-150000.5.18.1
SUSE Linux Enterprise Micro 5.3
net-tools-2.0+git20170221.479bb4a-150000.5.18.1
SUSE Linux Enterprise Micro 5.4
net-tools-2.0+git20170221.479bb4a-150000.5.18.1
SUSE Linux Enterprise Micro 5.5
net-tools-2.0+git20170221.479bb4a-150000.5.18.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
net-tools-2.0+git20170221.479bb4a-150000.5.18.1
net-tools-lang-2.0+git20170221.479bb4a-150000.5.18.1
SUSE Linux Enterprise Module for Legacy 15 SP7
net-tools-deprecated-2.0+git20170221.479bb4a-150000.5.18.1
Ссылки
- Link for SUSE-SU-2026:3223-1
- E-Mail link for SUSE-SU-2026:3223-1
- SUSE Security Ratings
- SUSE Bug 1254323
- SUSE CVE CVE-2024-58251 page
Описание
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
Затронутые продукты
Container suse/sle-micro-rancher/5.3:latest:net-tools-2.0+git20170221.479bb4a-150000.5.18.1
Container suse/sle-micro-rancher/5.4:latest:net-tools-2.0+git20170221.479bb4a-150000.5.18.1
Container suse/sle-micro/5.5:latest:net-tools-2.0+git20170221.479bb4a-150000.5.18.1
SUSE Linux Enterprise Micro 5.3:net-tools-2.0+git20170221.479bb4a-150000.5.18.1
Ссылки
- CVE-2024-58251
- SUSE Bug 1241700