Vulnerability CVE-2016-3185 - CERT Civis.Net

Vulnerability Name:

CVE-2016-3185 (CCN-111539)

Assigned:

2016-03-10

Published:

2016-03-10

Updated:

2016-12-01

Summary:

The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.

CVSS v3 Severity:

7.1 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
6.2 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): High

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
6.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2016-3185

Source: SUSE
Type: UNKNOWN
SUSE-SU-2016:1145

Source: SUSE
Type: UNKNOWN
SUSE-SU-2016:1166

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2016:1167

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2016:1173

Source: CONFIRM
Type: UNKNOWN
http://php.net/ChangeLog-5.php

Source: CONFIRM
Type: UNKNOWN
http://php.net/ChangeLog-7.php

Source: CCN
Type: oss-sec Mailing List, Thu, 10 Mar 2016 10:42:28 +0100
CVE Request: PHP last release security issues

Source: CCN
Type: oss-sec Mailing List, Wed, 16 Mar 2016 16:42:30 -0400 (EDT)
Re: CVE Request: PHP last release security issues

Source: CCN
Type: IBM Security Bulletin T1024229 (Flex System Manager Node)
IBM Flex System Manager (FSM) is affected by multiple php vulnerabilities

Source: CCN
Type: IBM Security Bulletin 1981982 (Lotus Protector for Mail Security)
Vulnerabilities in OpenSource PHP Affect IBM Lotus Protector For Mail Security (CVE-2014-9767 CVE-2016-3185 CVE-2016-3141 )

Source: CCN
Type: PHP Web site
PHP

Source: BID
Type: UNKNOWN
84307

Source: CCN
Type: BID-84307
PHP 'soap/php_http.c' Type Confusion Remote Denial Of Service Vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-2952-1

Source: UBUNTU
Type: UNKNOWN
USN-2952-2

Source: CONFIRM
Type: Exploit
https://bugs.php.net/bug.php?id=70081

Source: CCN
Type: PHP Sec Bug #71610
Type Confusion Vulnerability - SOAP / make_http_soap_request()

Source: CONFIRM
Type: Exploit
https://bugs.php.net/bug.php?id=71610

Source: XF
Type: UNKNOWN
php-cve20163185-code-exec(111539)

Source: CONFIRM
Type: UNKNOWN
https://git.php.net/?p=php-src.git;a=commit;h=eaf4e77190d402ea014207e9a7d5da1a4f3727ba

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2016-3185

Vulnerable Configuration:

Configuration 1:

cpe:/a:php:php:5.6.0:alpha1:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:alpha2:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:alpha3:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:alpha4:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:alpha5:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:beta1:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:beta2:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:beta3:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.0:beta4:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.1:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.2:*:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.3:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.4:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.5:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.6:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.7:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.8:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.9:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.10:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.6.11:-:*:*:*:*:*:*

Configuration 2:

cpe:/a:php:php:*:*:*:*:*:*:*:* (Version <= 5.4.43)

Configuration 3:

cpe:/a:php:php:7.0.0:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.1:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.2:-:*:*:*:*:*:*

OR cpe:/a:php:php:7.0.3:-:*:*:*:*:*:*

Configuration 4:

cpe:/a:php:php:5.5.0:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha1:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha2:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha3:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha4:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha5:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:alpha6:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:beta1:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:beta2:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:beta3:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:beta4:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:rc1:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.0:rc2:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.1:*:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.2:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.3:*:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.4:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.5:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.6:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.7:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.8:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.9:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.10:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.11:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.12:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.13:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.14:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.15:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.16:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.17:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.18:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.19:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.20:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.21:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.22:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.23:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.24:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.25:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.26:-:*:*:*:*:*:*

OR cpe:/a:php:php:5.5.27:-:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:php:php:5.5.32:*:*:*:*:*:*:*

AND

cpe:/a:ibm:lotus_protector:2.8:*:*:*:mail_security:*:*:*

OR cpe:/a:ibm:lotus_protector:2.8.1:*:*:*:mail_security:*:*:*

OR cpe:/h:ibm:flex_system_manager_node:*:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20163185	V	CVE-2016-3185	2023-06-22
oval:org.opensuse.security:def:31372	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:30289	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:9680	P	Security update for libsndfile (Important)	2022-01-11
oval:org.opensuse.security:def:31375	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:30291	P	Security update for libsndfile (Important)	2022-01-05
oval:org.opensuse.security:def:31373	P	Security update for net-snmp (Important)	2022-01-05
oval:org.opensuse.security:def:34676	P	Security update for net-snmp (Important)	2022-01-05
oval:org.opensuse.security:def:34678	P	Security update for libsndfile (Important)	2022-01-05
oval:org.opensuse.security:def:31370	P	Security update for java-1_7_1-ibm (Moderate) (in QA)	2022-01-04
oval:org.opensuse.security:def:10438	P	Security update for java-1_8_0-ibm (Important) (in QA)	2022-01-04
oval:org.opensuse.security:def:9884	P	Security update for go1.17 (Moderate)	2021-12-23
oval:org.opensuse.security:def:33758	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:9634	P	Security update for log4j (Important)	2021-12-17
oval:org.opensuse.security:def:30160	P	Security update for openssh (Important)	2021-12-06
oval:org.opensuse.security:def:34609	P	Security update for mozilla-nss (Important)	2021-12-06
oval:org.opensuse.security:def:10371	P	Security update for the Linux Kernel (Important)	2021-12-02
oval:org.opensuse.security:def:10175	P	Security update for webkit2gtk3 (Important)	2021-11-23
oval:org.opensuse.security:def:32217	P	Security update for samba (Important)	2021-11-19
oval:org.opensuse.security:def:32219	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)	2021-11-19
oval:org.opensuse.security:def:30145	P	Security update for pcre (Moderate)	2021-11-10
oval:org.opensuse.security:def:9612	P	Security update for MozillaFirefox (Important)	2021-11-10
oval:org.opensuse.security:def:30143	P	Security update for binutils (Moderate)	2021-11-02
oval:org.opensuse.security:def:29441	P	Security update for binutils (Moderate)	2021-11-02
oval:org.opensuse.security:def:10169	P	Security update for Salt (Moderate)	2021-10-27
oval:org.opensuse.security:def:9604	P	Security update for dnsmasq (Moderate)	2021-10-27
oval:org.opensuse.security:def:39421	P	Security update for python (Moderate)	2021-10-25
oval:org.opensuse.security:def:34571	P	Security update for git (Low)	2021-10-20
oval:org.opensuse.security:def:10162	P	Security update for glibc (Moderate)	2021-10-12
oval:org.opensuse.security:def:29424	P	Security update for ghostscript (Critical)	2021-09-21
oval:org.opensuse.security:def:29423	P	Security update for openssl (Low)	2021-09-20
oval:org.opensuse.security:def:33971	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:10153	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:30123	P	Security update for file (Important)	2021-09-02
oval:org.opensuse.security:def:10147	P	Security update for xerces-c (Important)	2021-09-02
oval:org.opensuse.security:def:11120	P	Security update for libspf2 (Critical)	2021-08-25
oval:org.opensuse.security:def:10139	P	Security update for djvulibre (Important)	2021-08-20
oval:org.opensuse.security:def:30234	P	Security update for java-1_8_0-openjdk (Important)	2021-08-20
oval:org.opensuse.security:def:30232	P	Security update for MozillaFirefox (Important)	2021-08-17
oval:org.opensuse.security:def:14283	P	libquicktime0-1.2.4-10.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14215	P	libcairo-gobject2-1.15.2-24.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14270	P	libpcre1-32bit-8.39-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14190	P	libX11-6-1.6.2-11.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14259	P	libmusicbrainz4-2.1.5-27.79 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14097	P	busybox-1.21.1-3.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14078	P	alsa-1.0.27.2-15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14060	P	xdg-utils-20140630-5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14012	P	ppp-2.4.7-1.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14943	P	libFLAC++6-1.3.0-11.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13914	P	libjasper1-1.900.1-170.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13944	P	libpoppler-glib8-0.43.0-15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14921	P	hardlink-1.0-6.38 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13922	P	libldap-2_4-2-2.4.41-18.25.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:9761	P	Security update for nodejs8 (Important)	2021-08-05
oval:org.opensuse.security:def:33949	P	Security update for qemu (Important)	2021-07-28
oval:org.opensuse.security:def:33947	P	Security update for curl (Moderate)	2021-07-21
oval:org.opensuse.security:def:11098	P	Security update for claws-mail (Moderate)	2021-07-16
oval:org.opensuse.security:def:10296	P	Security update for go1.15 (Important)	2021-06-30
oval:org.opensuse.security:def:33936	P	Security update for ovmf (Important)	2021-06-24
oval:org.opensuse.security:def:33937	P	Security update for libgcrypt (Important)	2021-06-24
oval:org.opensuse.security:def:33938	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:9742	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:10111	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:31214	P	Security update for libgcrypt (Important)	2021-06-24
oval:org.opensuse.security:def:33935	P	Security update for libnettle (Important)	2021-06-23
oval:org.opensuse.security:def:29385	P	Security update for webkit2gtk3 (Important)	2021-06-17
oval:org.opensuse.security:def:10277	P	Security update for spice-gtk (Moderate)	2021-06-10
oval:org.opensuse.security:def:33927	P	Security update for caribou (Important)	2021-06-10
oval:org.opensuse.security:def:9727	P	Security update for ucode-intel (Important)	2021-06-10
oval:org.opensuse.security:def:16584	P	libssh2-devel-1.4.3-19.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:124640	P	php5-devel-5.5.14-109.41.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17060	P	lcms-1.19-17.31 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16098	P	php5-devel-5.5.14-73.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17038	P	telepathy-idle-0.2.0-1.62 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17026	P	libssh4-0.6.3-1.4 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36308	P	tar-1.26-1.2.6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17261	P	libmikmod3-3.2.0-4.59 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36266	P	perl-HTML-Parser-3.56-1.18.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17170	P	gstreamer-0_10-plugins-bad-0.10.23-25.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16348	P	php5-devel-5.5.14-108.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17239	P	gstreamer-0_10-plugins-bad-0.10.23-25.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17138	P	libvirt-client-32bit-2.0.0-26.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17227	P	colord-1.3.3-12.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36310	P	tftp-0.48-101.31.27 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17028	P	libuuid-devel-2.25-6.69 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16576	P	libserf-1-1-1.3.7-1.37 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36268	P	perl-libwww-perl-5.816-2.23.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16618	P	mpfr-devel-3.1.2-7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16992	P	ImageMagick-6.8.8.1-5.21 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16634	P	php5-devel-5.5.14-109.41.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:35252	P	Security update for polkit (Important)	2021-06-03
oval:org.opensuse.security:def:10086	P	Security update for dhcp (Important)	2021-06-02
oval:org.opensuse.security:def:10262	P	Security update for curl (Moderate)	2021-05-31
oval:org.opensuse.security:def:32927	P	Security update for postgresql96 (Moderate)	2021-05-26
oval:org.opensuse.security:def:35250	P	Security update for the Linux Kernel (Important)	2021-05-13
oval:org.opensuse.security:def:33903	P	Security update for samba (Important)	2021-05-04
oval:org.opensuse.security:def:34411	P	Security update for sudo (Important)	2021-04-20
oval:org.opensuse.security:def:9862	P	Security update for openssl-1_1 (Moderate)	2021-03-09
oval:org.opensuse.security:def:9861	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:34649	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:29480	P	Security update for openldap2 (Important)	2021-03-03
oval:org.opensuse.security:def:10215	P	Security update for python-cryptography (Important)	2021-03-03
oval:org.opensuse.security:def:9854	P	Security update for grub2 (Important)	2021-03-02
oval:org.opensuse.security:def:34033	P	Security update for python-cryptography (Important)	2021-03-02
oval:org.opensuse.security:def:34031	P	Security update for perl-XML-Twig (Moderate)	2021-03-01
oval:org.opensuse.security:def:10396	P	Security update for php7 (Important)	2021-02-24
oval:org.opensuse.security:def:33079	P	Security update for ImageMagick (Moderate)	2021-02-19
oval:org.opensuse.security:def:34629	P	Security update for bind (Important)	2021-02-18
oval:org.opensuse.security:def:32258	P	Security update for screen (Important)	2021-02-17
oval:org.opensuse.security:def:34627	P	Security update for jasper (Important)	2021-02-16
oval:org.opensuse.security:def:32256	P	Security update for wpa_supplicant (Important)	2021-02-15
oval:org.opensuse.security:def:9836	P	Security update for subversion (Important)	2021-02-10
oval:org.opensuse.security:def:34569	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:33022	P	Security update for python3 (Important)	2021-02-08
oval:org.opensuse.security:def:30011	P	Security update for MozillaFirefox (Important)	2021-01-29
oval:org.opensuse.security:def:31216	P	Security update for postgresql, postgresql12, postgresql13 (Important)	2021-01-26
oval:org.opensuse.security:def:34413	P	Security update for openldap2 (Moderate)	2021-01-14
oval:org.opensuse.security:def:29485	P	Security update for MozillaFirefox (Important)	2021-01-12
oval:org.opensuse.security:def:30013	P	Security update for java-1_8_0-ibm (Moderate)	2021-01-05
oval:org.opensuse.security:def:10585	P	Security update for the Linux Kernel (Important)	2020-12-09
oval:org.opensuse.security:def:34324	P	Security update for python-cryptography (Moderate)	2020-12-04
oval:org.opensuse.security:def:16961	P	rhythmbox-3.4-6.14 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35584	P	libdrm-2.4.17-0.3.12 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16904	P	libudev-devel-228-155.21 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16777	P	libXinerama-devel-1.1.3-3.54 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35557	P	gnome-screensaver-2.28.3-0.4.30 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16819	P	libgnutls-devel-3.3.27-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35518	P	OpenEXR-1.6.1-83.17.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16785	P	libXv-devel-1.0.10-7.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16969	P	shibboleth-sp-devel-2.5.5-6.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35586	P	libexiv2-4-0.17.1-31.20 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16937	P	obs-service-appimage-0.10.6.1551887937.e42c270-1.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35559	P	gpg2-2.0.9-25.25.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16827	P	libidn-devel-1.28-5.6.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35520	P	PolicyKit-0.9-14.34.9 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16791	P	libapr1-1.5.1-4.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35628	P	perl-HTML-Parser-3.56-1.18.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16760	P	java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:34322	P	Security update for xen (Important)	2020-12-03
oval:org.opensuse.security:def:16703	P	cifs-utils-devel-6.9-9.6.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35630	P	perl-spamassassin-3.2.5-26.22.18 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:28903	P	Security update for flash-player (Critical)	2020-12-01
oval:org.opensuse.security:def:29565	P	Security update for OpenEXR (Moderate)	2020-12-01
oval:org.opensuse.security:def:33322	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:30633	P	Security update for Xen	2020-12-01
oval:org.opensuse.security:def:27615	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:29939	P	Security update for libksba (Moderate)	2020-12-01
oval:org.opensuse.security:def:31070	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:35469	P	Security update for php53 (Moderate)	2020-12-01
oval:org.opensuse.security:def:33467	P	Security update for kdelibs4	2020-12-01
oval:org.opensuse.security:def:30735	P	Security update for OpenEXR (Moderate)	2020-12-01
oval:org.opensuse.security:def:35422	P	Security update for openssl-certs	2020-12-01
oval:org.opensuse.security:def:28691	P	Security update for freetype2	2020-12-01
oval:org.opensuse.security:def:34773	P	Security update for MozillaFirefox (Moderate)	2020-12-01
oval:org.opensuse.security:def:38154	P	cracklib on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27460	P	libmpfr1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31516	P	Security update for quagga (Moderate)	2020-12-01
oval:org.opensuse.security:def:10813	P	libxml2-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39463	P	Security update for php5 (Important)	2020-12-01
oval:org.opensuse.security:def:30761	P	Security update for php53	2020-12-01
oval:org.opensuse.security:def:28772	P	Security update for libtiff	2020-12-01
oval:org.opensuse.security:def:33166	P	libnetpbm10 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30584	P	Security update for ntp (Moderate)	2020-12-01
oval:org.opensuse.security:def:27601	P	Security update for automake	2020-12-01
oval:org.opensuse.security:def:17925	P	Security update for php5 (Important)	2020-12-01
oval:org.opensuse.security:def:37921	P	libmusicbrainz4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30978	P	Security update for hplip	2020-12-01
oval:org.opensuse.security:def:34267	P	Security update for procmail	2020-12-01
oval:org.opensuse.security:def:35410	P	Security update for openssl (Important)	2020-12-01
oval:org.opensuse.security:def:33428	P	Security update for clamav, clamav-db, clamav-debuginfo, clamav-debugsource	2020-12-01
oval:org.opensuse.security:def:30691	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:38017	P	pam-modules on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27309	P	tgt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27564	P	rubygem-sprockets-2_2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9925	P	libtasn1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30760	P	Security update for apache2-mod_perl (Moderate)	2020-12-01
oval:org.opensuse.security:def:28703	P	Security update for gpg2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:30529	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:33815	P	Security update for glib2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:27661	P	Security update for ruby	2020-12-01
oval:org.opensuse.security:def:17899	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:30846	P	Security update for dbus-1 (Important)	2020-12-01
oval:org.opensuse.security:def:34169	P	Security update for openssl (Important)	2020-12-01
oval:org.opensuse.security:def:31129	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:30672	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:35465	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:29126	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:37933	P	libopus0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27225	P	libvirt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27515	P	mercurial on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9912	P	libqt4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38783	P	python-libxml2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29337	P	Security update for spacewalk	2020-12-01
oval:org.opensuse.security:def:30375	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:30635	P	Security update for xen (Moderate)	2020-12-01
oval:org.opensuse.security:def:27617	P	Security update for freetype2	2020-12-01
oval:org.opensuse.security:def:30597	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:30772	P	Security update for augeas (Moderate)	2020-12-01
oval:org.opensuse.security:def:31072	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:35160	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:35471	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:30737	P	Security update for SDL (Moderate)	2020-12-01
oval:org.opensuse.security:def:35424	P	Security update for openssl1 (Important)	2020-12-01
oval:org.opensuse.security:def:29125	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:37922	P	libmysqlclient18 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27168	P	ldapsmb on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27462	P	libmusicbrainz-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9903	P	libpng15-15 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30763	P	Security update for apport (Moderate)	2020-12-01
oval:org.opensuse.security:def:29206	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:33601	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:30586	P	Security update for openssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:27603	P	Security update for Mono	2020-12-01
oval:org.opensuse.security:def:30560	P	Security update for OpenSSL	2020-12-01
oval:org.opensuse.security:def:34212	P	Security update for php5 (Important)	2020-12-01
oval:org.opensuse.security:def:26884	P	dhcpcd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30980	P	Security update for icu	2020-12-01
oval:org.opensuse.security:def:35103	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:35412	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:33864	P	Security update for jasper	2020-12-01
oval:org.opensuse.security:def:30693	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:34786	P	Security update for OpenEXR (Moderate)	2020-12-01
oval:org.opensuse.security:def:32701	P	libQtWebKit4-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27087	P	augeas on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27311	P	unixODBC_23 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28332	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:30762	P	Security update for apache2-mod_security2	2020-12-01
oval:org.opensuse.security:def:29137	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:32792	P	sysstat on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33513	P	Security update for perl-HTML-Parser	2020-12-01
oval:org.opensuse.security:def:30531	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:34172	P	Security update for openssl1 (Important)	2020-12-01
oval:org.opensuse.security:def:26883	P	dhcp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30848	P	Security update for dhcp (Moderate)	2020-12-01
oval:org.opensuse.security:def:35002	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:30674	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:34740	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:29926	P	Security update for libgcrypt (Moderate)	2020-12-01
oval:org.opensuse.security:def:26959	P	libnewt0_52 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27227	P	libwsman1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29336	P	Security update for cobbler	2020-12-01
oval:org.opensuse.security:def:28297	P	Security update for ncurses (Moderate)	2020-12-01
oval:org.opensuse.security:def:34770	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:32713	P	libgnomesu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33456	P	Security update for icu	2020-12-01
oval:org.opensuse.security:def:30377	P	Security update for xalan-j2	2020-12-01
oval:org.opensuse.security:def:31475	P	Security update for procps (Moderate)	2020-12-01
oval:org.opensuse.security:def:31411	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:30774	P	Security update for avahi (Moderate)	2020-12-01
oval:org.opensuse.security:def:34866	P	Security update for cloud-init (Moderate)	2020-12-01
oval:org.opensuse.security:def:35162	P	Security update for krb5	2020-12-01
oval:org.opensuse.security:def:38623	P	iputils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34715	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:31579	P	Security update for supportutils (Moderate)	2020-12-01
oval:org.opensuse.security:def:29925	P	Security update for libgcrypt	2020-12-01
oval:org.opensuse.security:def:26895	P	findutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27170	P	libMagickCore1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29282	P	Security update for xorg-x11-libX11 (Important)	2020-12-01
oval:org.opensuse.security:def:38739	P	libusbmuxd4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32702	P	libadns1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33361	P	Security update for openssl1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31426	P	Security update for php53 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26886	P	ecryptfs-utils-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34782	P	Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:35105	P	Security update for the Linux Kernel (Moderate)	2020-12-01
oval:org.opensuse.security:def:10011	P	vsftpd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38564	P	cpio on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31535	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:33135	P	libMagickCore1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27089	P	avahi on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29130	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:29821	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:38711	P	libpng15-15 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10460	P	lhasa-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28334	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:29937	P	Security update for libjasper	2020-12-01
oval:org.opensuse.security:def:33226	P	pcsc-ccid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29922	P	Security update for libexif (Moderate)	2020-12-01
oval:org.opensuse.security:def:26885	P	e2fsprogs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34771	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:35004	P	Security update for gnuplot (Moderate)	2020-12-01
oval:org.opensuse.security:def:9992	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38404	P	libxmltooling6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31514	P	Security update for quagga (Moderate)	2020-12-01
oval:org.opensuse.security:def:34742	P	Security update for Mesa (Moderate)	2020-12-01
oval:org.opensuse.security:def:10563	P	libxcb-composite0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29928	P	Security update for libgcrypt (Low)	2020-12-01
oval:org.opensuse.security:def:26961	P	libopenssl0_9_8 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29046	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:29772	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:38672	P	libgnomesu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10447	P	gnome-settings-daemon-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28299	P	Security update for netatalk (Important)	2020-12-01
oval:org.opensuse.security:def:17724	P	Security update for php5 (Important)	2020-12-01
oval:org.opensuse.security:def:34772	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:33147	P	libexif on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34265	P	Security update for ppp (Moderate)	2020-12-01
oval:org.opensuse.security:def:31477	P	Security update for puppet (Moderate)	2020-12-01
oval:org.opensuse.security:def:29878	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:33534	P	Security update for ConsoleKit	2020-12-01
oval:org.opensuse.security:def:31413	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:34868	P	Security update for coreutils (Moderate)	2020-12-01
oval:org.opensuse.security:def:9977	P	python-pywbem on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38314	P	libkpathsea6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27562	P	rubygem-rack-ssl on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34717	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:31581	P	Security update for tar (Moderate)	2020-12-01
oval:org.opensuse.security:def:29927	P	Security update for libgcrypt (Moderate)	2020-12-01
oval:org.opensuse.security:def:26897	P	freeradius-server on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28989	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:29718	P	Security update for MozillaFirefox	2020-12-01
oval:org.opensuse.security:def:33379	P	Security update for compat-openssl097g (Important)	2020-12-01
oval:org.opensuse.security:def:27659	P	Security update for rubygem-rack	2020-12-01
oval:org.opensuse.security:def:17698	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:33136	P	libQtWebKit4-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34167	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:31127	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:31428	P	Security update for php53 (Moderate)	2020-12-01
oval:org.opensuse.security:def:29860	P	Security update for the Linux Kernel	2020-12-01
oval:org.opensuse.security:def:33490	P	Security update for libtheora	2020-12-01
oval:org.opensuse.security:def:35463	P	Security update for php53 (Important)	2020-12-01
oval:org.opensuse.security:def:28692	P	Security update for FUSE	2020-12-01
oval:org.opensuse.security:def:34784	P	Security update for OpenEXR (Moderate)	2020-12-01
oval:org.opensuse.security:def:9930	P	libupsclient1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38256	P	libXinerama1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27513	P	lzo-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31537	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:10835	P	php5-devel on GA media (Moderate)	2020-12-01
oval:com.ubuntu.precise:def:20163185000	V	CVE-2016-3185 on Ubuntu 12.04 LTS (precise) - medium.	2016-05-16
oval:com.ubuntu.xenial:def:201631850000000	V	CVE-2016-3185 on Ubuntu 16.04 LTS (xenial) - medium.	2016-05-16
oval:com.ubuntu.trusty:def:20163185000	V	CVE-2016-3185 on Ubuntu 14.04 LTS (trusty) - medium.	2016-05-16
oval:com.ubuntu.xenial:def:20163185000	V	CVE-2016-3185 on Ubuntu 16.04 LTS (xenial) - medium.	2016-05-16