Oval Definition:oval:org.opensuse.security:def:201718236
Revision Date:2022-09-02Version:1
Title:CVE-2017-18236
Description:

An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted .asf file.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-18236
SUSE-SU-2018:3389-1
openSUSE-SU-2018:2764-1
Mitre CVE-2017-18236
SUSE CVE-2017-18236
SUSE-SU-2018:3389-1
openSUSE-SU-2018:2764-1
Platform(s):openSUSE Leap 42.3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 11 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP4
SUSE Linux Enterprise Software Development Kit 12 SP5
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND exempi is affected
    • Definition Synopsis
  • openSUSE Leap 42.3 is installed
  • AND Package Information
  • exempi-2.2.2-6.8 is installed
  • AND exempi is signed with openSUSE key
  • OR
  • exempi-tools-2.2.2-6.8 is installed
  • AND exempi-tools is signed with openSUSE key
  • OR
  • libexempi-devel-2.2.2-6.8 is installed
  • AND libexempi-devel is signed with openSUSE key
  • OR
  • libexempi3-2.2.2-6.8 is installed
  • AND libexempi3 is signed with openSUSE key
  • OR
  • libexempi3-32bit-2.2.2-6.8 is installed
  • AND libexempi3-32bit is signed with openSUSE key
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi-devel-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND exempi is affected
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • AND libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND libexempi-devel-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi-devel-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • AND libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND libexempi-devel-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi-devel-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP5 is installed
  • AND libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND libexempi-devel-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi-devel-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP5 is installed
  • AND libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP5 is installed
  • AND libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed
  • AND libexempi-devel-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi3-2.2.1-5.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND
  • exempi-2.2.1-5.7 is installed
  • OR libexempi-devel-2.2.1-5.7 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • OR SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND exempi is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND exempi is affected
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP5 is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • OR SUSE Linux Enterprise Server 12 SP5 is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed
  • AND libexempi-devel-2.2.1-5.7.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • AND libexempi3-2.2.1-5.7.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND libexempi-devel-2.2.1-5.7.1 is installed
    • BACK