opensuse-su-2024:10612-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
adns-1.6.0-1.8 on GA media
Notes
Title of the patch
adns-1.6.0-1.8 on GA media
Description of the patch
These are all security issues fixed in the adns-1.6.0-1.8 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10612
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "adns-1.6.0-1.8 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the adns-1.6.0-1.8 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10612",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10612-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1447 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-9103 page",
"url": "https://www.suse.com/security/cve/CVE-2017-9103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-9106 page",
"url": "https://www.suse.com/security/cve/CVE-2017-9106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-9107 page",
"url": "https://www.suse.com/security/cve/CVE-2017-9107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-9108 page",
"url": "https://www.suse.com/security/cve/CVE-2017-9108/"
}
],
"title": "adns-1.6.0-1.8 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10612-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "adns-1.6.0-1.8.aarch64",
"product": {
"name": "adns-1.6.0-1.8.aarch64",
"product_id": "adns-1.6.0-1.8.aarch64"
}
},
{
"category": "product_version",
"name": "libadns-devel-1.6.0-1.8.aarch64",
"product": {
"name": "libadns-devel-1.6.0-1.8.aarch64",
"product_id": "libadns-devel-1.6.0-1.8.aarch64"
}
},
{
"category": "product_version",
"name": "libadns-devel-32bit-1.6.0-1.8.aarch64",
"product": {
"name": "libadns-devel-32bit-1.6.0-1.8.aarch64",
"product_id": "libadns-devel-32bit-1.6.0-1.8.aarch64"
}
},
{
"category": "product_version",
"name": "libadns1-1.6.0-1.8.aarch64",
"product": {
"name": "libadns1-1.6.0-1.8.aarch64",
"product_id": "libadns1-1.6.0-1.8.aarch64"
}
},
{
"category": "product_version",
"name": "libadns1-32bit-1.6.0-1.8.aarch64",
"product": {
"name": "libadns1-32bit-1.6.0-1.8.aarch64",
"product_id": "libadns1-32bit-1.6.0-1.8.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "adns-1.6.0-1.8.ppc64le",
"product": {
"name": "adns-1.6.0-1.8.ppc64le",
"product_id": "adns-1.6.0-1.8.ppc64le"
}
},
{
"category": "product_version",
"name": "libadns-devel-1.6.0-1.8.ppc64le",
"product": {
"name": "libadns-devel-1.6.0-1.8.ppc64le",
"product_id": "libadns-devel-1.6.0-1.8.ppc64le"
}
},
{
"category": "product_version",
"name": "libadns-devel-32bit-1.6.0-1.8.ppc64le",
"product": {
"name": "libadns-devel-32bit-1.6.0-1.8.ppc64le",
"product_id": "libadns-devel-32bit-1.6.0-1.8.ppc64le"
}
},
{
"category": "product_version",
"name": "libadns1-1.6.0-1.8.ppc64le",
"product": {
"name": "libadns1-1.6.0-1.8.ppc64le",
"product_id": "libadns1-1.6.0-1.8.ppc64le"
}
},
{
"category": "product_version",
"name": "libadns1-32bit-1.6.0-1.8.ppc64le",
"product": {
"name": "libadns1-32bit-1.6.0-1.8.ppc64le",
"product_id": "libadns1-32bit-1.6.0-1.8.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "adns-1.6.0-1.8.s390x",
"product": {
"name": "adns-1.6.0-1.8.s390x",
"product_id": "adns-1.6.0-1.8.s390x"
}
},
{
"category": "product_version",
"name": "libadns-devel-1.6.0-1.8.s390x",
"product": {
"name": "libadns-devel-1.6.0-1.8.s390x",
"product_id": "libadns-devel-1.6.0-1.8.s390x"
}
},
{
"category": "product_version",
"name": "libadns-devel-32bit-1.6.0-1.8.s390x",
"product": {
"name": "libadns-devel-32bit-1.6.0-1.8.s390x",
"product_id": "libadns-devel-32bit-1.6.0-1.8.s390x"
}
},
{
"category": "product_version",
"name": "libadns1-1.6.0-1.8.s390x",
"product": {
"name": "libadns1-1.6.0-1.8.s390x",
"product_id": "libadns1-1.6.0-1.8.s390x"
}
},
{
"category": "product_version",
"name": "libadns1-32bit-1.6.0-1.8.s390x",
"product": {
"name": "libadns1-32bit-1.6.0-1.8.s390x",
"product_id": "libadns1-32bit-1.6.0-1.8.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "adns-1.6.0-1.8.x86_64",
"product": {
"name": "adns-1.6.0-1.8.x86_64",
"product_id": "adns-1.6.0-1.8.x86_64"
}
},
{
"category": "product_version",
"name": "libadns-devel-1.6.0-1.8.x86_64",
"product": {
"name": "libadns-devel-1.6.0-1.8.x86_64",
"product_id": "libadns-devel-1.6.0-1.8.x86_64"
}
},
{
"category": "product_version",
"name": "libadns-devel-32bit-1.6.0-1.8.x86_64",
"product": {
"name": "libadns-devel-32bit-1.6.0-1.8.x86_64",
"product_id": "libadns-devel-32bit-1.6.0-1.8.x86_64"
}
},
{
"category": "product_version",
"name": "libadns1-1.6.0-1.8.x86_64",
"product": {
"name": "libadns1-1.6.0-1.8.x86_64",
"product_id": "libadns1-1.6.0-1.8.x86_64"
}
},
{
"category": "product_version",
"name": "libadns1-32bit-1.6.0-1.8.x86_64",
"product": {
"name": "libadns1-32bit-1.6.0-1.8.x86_64",
"product_id": "libadns1-32bit-1.6.0-1.8.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "adns-1.6.0-1.8.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64"
},
"product_reference": "adns-1.6.0-1.8.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "adns-1.6.0-1.8.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le"
},
"product_reference": "adns-1.6.0-1.8.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "adns-1.6.0-1.8.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:adns-1.6.0-1.8.s390x"
},
"product_reference": "adns-1.6.0-1.8.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "adns-1.6.0-1.8.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64"
},
"product_reference": "adns-1.6.0-1.8.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns-devel-1.6.0-1.8.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64"
},
"product_reference": "libadns-devel-1.6.0-1.8.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns-devel-1.6.0-1.8.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le"
},
"product_reference": "libadns-devel-1.6.0-1.8.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns-devel-1.6.0-1.8.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x"
},
"product_reference": "libadns-devel-1.6.0-1.8.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns-devel-1.6.0-1.8.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64"
},
"product_reference": "libadns-devel-1.6.0-1.8.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns-devel-32bit-1.6.0-1.8.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64"
},
"product_reference": "libadns-devel-32bit-1.6.0-1.8.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns-devel-32bit-1.6.0-1.8.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le"
},
"product_reference": "libadns-devel-32bit-1.6.0-1.8.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns-devel-32bit-1.6.0-1.8.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x"
},
"product_reference": "libadns-devel-32bit-1.6.0-1.8.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns-devel-32bit-1.6.0-1.8.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64"
},
"product_reference": "libadns-devel-32bit-1.6.0-1.8.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns1-1.6.0-1.8.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64"
},
"product_reference": "libadns1-1.6.0-1.8.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns1-1.6.0-1.8.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le"
},
"product_reference": "libadns1-1.6.0-1.8.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns1-1.6.0-1.8.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x"
},
"product_reference": "libadns1-1.6.0-1.8.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns1-1.6.0-1.8.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64"
},
"product_reference": "libadns1-1.6.0-1.8.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns1-32bit-1.6.0-1.8.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64"
},
"product_reference": "libadns1-32bit-1.6.0-1.8.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns1-32bit-1.6.0-1.8.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le"
},
"product_reference": "libadns1-32bit-1.6.0-1.8.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns1-32bit-1.6.0-1.8.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x"
},
"product_reference": "libadns1-32bit-1.6.0-1.8.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libadns1-32bit-1.6.0-1.8.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
},
"product_reference": "libadns1-32bit-1.6.0-1.8.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-1447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1447"
}
],
"notes": [
{
"category": "general",
"text": "The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka \"DNS Insufficient Socket Entropy Vulnerability\" or \"the Kaminsky bug.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1447",
"url": "https://www.suse.com/security/cve/CVE-2008-1447"
},
{
"category": "external",
"summary": "SUSE Bug 396963 for CVE-2008-1447",
"url": "https://bugzilla.suse.com/396963"
},
{
"category": "external",
"summary": "SUSE Bug 411761 for CVE-2008-1447",
"url": "https://bugzilla.suse.com/411761"
},
{
"category": "external",
"summary": "SUSE Bug 415678 for CVE-2008-1447",
"url": "https://bugzilla.suse.com/415678"
},
{
"category": "external",
"summary": "SUSE Bug 423234 for CVE-2008-1447",
"url": "https://bugzilla.suse.com/423234"
},
{
"category": "external",
"summary": "SUSE Bug 426515 for CVE-2008-1447",
"url": "https://bugzilla.suse.com/426515"
},
{
"category": "external",
"summary": "SUSE Bug 465294 for CVE-2008-1447",
"url": "https://bugzilla.suse.com/465294"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-1447"
},
{
"cve": "CVE-2017-9103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-9103"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling program, leaking aspects of the contents of some of its memory, causing it to allocate lots of memory, or perhaps overrunning a buffer. This is only possible with applications which make non-raw queries for SOA or RP records.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-9103",
"url": "https://www.suse.com/security/cve/CVE-2017-9103"
},
{
"category": "external",
"summary": "SUSE Bug 1172265 for CVE-2017-9103",
"url": "https://bugzilla.suse.com/1172265"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-9103"
},
{
"cve": "CVE-2017-9106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-9106"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn\u0027t, the buffer may be overrun (depending on the sizes of the types on the current platform). Of course the inputs ought to be right. And there are pointers in there too, so perhaps one could say that the caller ought to check these things. It may be better to require the caller to make the pointer structure right, but to have the code here be defensive about (and tolerate with an error but without crashing) out-of-range integer values. So: it should defend each of these integer conversion sites with a check for the actual permitted range, and return adns_s_invaliddata if not. The lack of this check causes the SOA sign extension bug to be a serious security problem: the sign extended SOA value is out of range, and overruns the buffer when reconverted. This is related to sign extending SOA 32-bit integer fields, and use of a signed data type.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-9106",
"url": "https://www.suse.com/security/cve/CVE-2017-9106"
},
{
"category": "external",
"summary": "SUSE Bug 1172265 for CVE-2017-9106",
"url": "https://bugzilla.suse.com/1172265"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-9106"
},
{
"cve": "CVE-2017-9107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-9107"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with \\, and adns_qf_quoteok_query was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart the input buffer and start processing many bytes of arbitrary heap data as if it were the query domain. Eventually it would run out of input or find some other kind of error, and declare the query domain invalid. But before then it might outrun available memory and crash. In principle this could be a denial of service attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-9107",
"url": "https://www.suse.com/security/cve/CVE-2017-9107"
},
{
"category": "external",
"summary": "SUSE Bug 1172265 for CVE-2017-9107",
"url": "https://bugzilla.suse.com/1172265"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-9107"
},
{
"cve": "CVE-2017-9108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-9108"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r, since used is incremented according to r, later. Rather one should be doing what read() would have done. Without this fix, adnshost may read and process one byte beyond the buffer, perhaps crashing or perhaps somehow leaking the value of that byte.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-9108",
"url": "https://www.suse.com/security/cve/CVE-2017-9108"
},
{
"category": "external",
"summary": "SUSE Bug 1172265 for CVE-2017-9108",
"url": "https://bugzilla.suse.com/1172265"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:adns-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:adns-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:adns-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:adns-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns-devel-32bit-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-1.6.0-1.8.x86_64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.aarch64",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.ppc64le",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.s390x",
"openSUSE Tumbleweed:libadns1-32bit-1.6.0-1.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-9108"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…