Vulnerability CVE-2017-2669

Vulnerability Name:

CVE-2017-2669 (CCN-145190)

Assigned:

2016-12-01

Published:

2017-04-11

Updated:

2019-10-09

Summary:

Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang.

CVSS v3 Severity:

7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
4.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.9 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:S/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-20

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2017-2669

Source: CCN
Type: oss-sec Mailing List, Tue, 11 Apr 2017 10:57:03 +0300
CVE-2017-2669: Dovecot DoS when passdb dict was used for authentication

Source: MLIST
Type: Mailing List, Third Party Advisory
[oss-security] 20170411 CVE-2017-2669: Dovecot DoS when passdb dict was used for authentication

Source: BID
Type: Third Party Advisory, VDB Entry
97536

Source: CCN
Type: BID-97536
Dovecot CVE-2017-2669 Denial of Service Vulnerability

Source: CONFIRM
Type: Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2669

Source: MLIST
Type: Vendor Advisory
[dovecot-news] 20170410 v2.2.29 released

Source: XF
Type: UNKNOWN
dovecot-cve20172669-dos(145190)

Source: CCN
Type: dovecot GIT Repository
[PATCH] auth: Do not double-expand key in passdb dict when authenticating

Source: CONFIRM
Type: Third Party Advisory
https://github.com/dovecot/core/commit/000030feb7a30f193197f1aab8a7b04a26b42735.patch

Source: DEBIAN
Type: Third Party Advisory
DSA-3828

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2017-2669

Vulnerable Configuration:

Configuration 1:

cpe:/a:dovecot:dovecot:*:*:*:*:*:*:*:* (Version >= 2.2.26 and <= 2.2.28)

Configuration 2:

cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:dovecot:dovecot:2.2.28:-:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8121	P	Security update for distribution (Important)	2023-06-21
oval:org.opensuse.security:def:7991	P	binutils-devel-32bit-2.39-150100.7.40.1 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:8013	P	go1.19-1.19.9-150000.1.31.1 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:8059	P	perl-solv-0.7.23-150400.3.3.1 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:8140	P	Security update for go1.19 (Moderate)	2023-06-16
oval:org.opensuse.security:def:8106	P	Security update for python3 (Moderate)	2023-06-15
oval:org.opensuse.security:def:7983	P	wireshark-devel-3.6.13-150000.3.89.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7887	P	ftdump-2.10.4-150000.4.12.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7706	P	libyaml-cpp0_6-0.6.3-150400.4.3.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7929	P	libexif-devel-0.6.22-150000.5.9.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7920	P	libass-devel-0.14.0-150000.3.11.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7753	P	postgresql-15-150500.8.19 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7938	P	libid3tag0-0.15.1b-3.14 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7768	P	python3-Werkzeug-1.0.1-150300.3.3.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7951	P	libnetpbm-devel-10.80.1-3.11.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7787	P	python3-targetcli-fb-2.1.54-150500.6.2 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7630	P	libopenssl-1_1-devel-1.1.1l-150500.15.4 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7638	P	libpango-1_0-0-1.50.4-150400.1.5 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7862	P	podman-4.4.4-150500.1.4 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7660	P	libruby2_5-2_5-2.5.9-150000.4.26.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:20172669	V	CVE-2017-2669	2022-09-02
oval:org.opensuse.security:def:124047	P	dovecot22-2.2.31-19.11.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3055	P	dovecot22-2.2.31-19.17.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3475	P	dovecot22-2.2.31-19.17.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:42370	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:42192	P	Security update for containerd, docker (Moderate)	2022-02-04
oval:org.opensuse.security:def:10231	P	Security update for libsndfile (Important)	2022-01-11
oval:org.opensuse.security:def:9675	P	Security update for java-1_8_0-ibm (Important) (in QA)	2022-01-04
oval:org.opensuse.security:def:42301	P	Security update for libvirt (Important)	2022-01-04
oval:org.opensuse.security:def:8689	P	Security update for python3 (Moderate)	2021-12-23
oval:org.opensuse.security:def:59834	P	Security update for MozillaFirefox (Important)	2021-12-12
oval:org.opensuse.security:def:10375	P	Security update for mariadb (Moderate)	2021-12-06
oval:org.opensuse.security:def:9824	P	Security update for mariadb (Moderate)	2021-12-06
oval:org.opensuse.security:def:8680	P	Security update for openssh (Important)	2021-12-03
oval:org.opensuse.security:def:10180	P	Security update for poppler (Important)	2021-12-01
oval:org.opensuse.security:def:57129	P	Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)	2021-11-19
oval:org.opensuse.security:def:8671	P	Security update for tomcat (Important)	2021-11-16
oval:org.opensuse.security:def:9805	P	Security update for libvirt (Important)	2021-10-27
oval:org.opensuse.security:def:10356	P	Security update for libvirt (Important)	2021-10-27
oval:org.opensuse.security:def:57512	P	Security update for glibc (Moderate)	2021-10-06
oval:org.opensuse.security:def:57106	P	Security update for apache2 (Important)	2021-10-06
oval:org.opensuse.security:def:10155	P	Security update for ffmpeg (Important)	2021-09-23
oval:org.opensuse.security:def:61440	P	firewall-macros-0.5.5-4.24.9 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:6455	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:57085	P	Security update for openexr (Important)	2021-09-02
oval:org.opensuse.security:def:20716	P	Security update for compat-openssl098 (Important)	2021-08-27
oval:org.opensuse.security:def:42111	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:8638	P	Security update for libass (Important)	2021-08-20
oval:org.opensuse.security:def:58802	P	Security update for libmspack (Moderate)	2021-08-17
oval:org.opensuse.security:def:6700	P	Security update for the Linux Kernel (Live Patch 21 for SLE 15) (Important)	2021-08-17
oval:org.opensuse.security:def:20501	P	Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP5) (Important)	2021-08-17
oval:org.opensuse.security:def:14763	P	rzsz-0.12.21~rc-1001.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14986	P	libecpg6-10.10-1.15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47994	P	dovecot22-2.2.31-19.17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14476	P	dovecot22-2.2.31-19.11.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14783	P	tcpdump-4.9.2-14.5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15002	P	libhivex0-1.3.10-4.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14807	P	xorg-x11-libs-7.6-45.14 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14874	P	dovecot22-2.2.31-19.17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14608	P	libjpeg-turbo-1.5.3-31.7.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14616	P	liblouis-data-2.6.4-6.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47243	P	dovecot22-2.2.30.2-14.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14901	P	glibc-2.22-100.15.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14642	P	libpcsclite1-1.8.10-7.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:83549	P	dovecot22-2.2.30.2-14.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14928	P	jakarta-commons-fileupload-1.1.1-122.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14712	P	ntp-4.2.8p12-64.8.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47596	P	dovecot22-2.2.31-19.11.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14123	P	dovecot22-2.2.30.2-14.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14975	P	libasan2-32bit-5.3.1+r233831-12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:87637	P	dovecot22-2.2.31-19.11.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:8389	P	Security update for the Linux Kernel (Important)	2021-08-14
oval:org.opensuse.security:def:62037	P	btrfsmaintenance-0.4.2-1.11 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:63031	P	perl-Archive-Extract-0.80-1.24 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62247	P	libxkbcommon-devel-0.8.2-3.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62798	P	libmms-devel-0.6.4-1.24 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:20285	P	Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP4) (Important)	2021-08-02
oval:org.opensuse.security:def:57047	P	Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)	2021-07-21
oval:org.opensuse.security:def:57966	P	Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)	2021-07-21
oval:org.opensuse.security:def:6687	P	Security update for the Linux Kernel (Live Patch 23 for SLE 15) (Important)	2021-07-15
oval:org.opensuse.security:def:20463	P	Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP5) (Important)	2021-07-14
oval:org.opensuse.security:def:10648	P	Security update for the Linux Kernel (Important)	2021-07-14
oval:org.opensuse.security:def:9743	P	Security update for ovmf (Important)	2021-06-25
oval:org.opensuse.security:def:10294	P	Security update for ovmf (Important)	2021-06-25
oval:org.opensuse.security:def:8613	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:56043	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:8611	P	Security update for libnettle (Important)	2021-06-23
oval:org.opensuse.security:def:6678	P	Security update for the Linux Kernel (Live Patch 22 for SLE 15) (Important)	2021-06-18
oval:org.opensuse.security:def:38360	P	Security update for xorg-x11-libX11 (Important)	2021-06-15
oval:org.opensuse.security:def:19515	P	Security update for csync2 (Moderate)	2021-06-10
oval:org.opensuse.security:def:60283	P	Security update for the Linux Kernel (Important)	2021-06-09
oval:org.opensuse.security:def:36520	P	mozilla-xulrunner192-devel-1.9.2.27-0.2.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16417	P	dovecot22-devel-2.2.31-19.11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17127	P	libpcsclite1-32bit-1.8.10-3.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17135	P	libtag1-32bit-1.9.1-1.265 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17261	P	libmikmod3-3.2.0-4.59 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16995	P	bogofilter-1.2.4-3.56 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36233	P	libzip1-0.9-1.24.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36245	P	mozilla-xulrunner192-1.9.2.27-0.2.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36579	P	vte-devel-0.22.5-0.2.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61248	P	libldb-devel-1.2.3-1.19 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17169	P	gnome-shell-calendar-3.20.4-76.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36112	P	dhcpcd-3.2.3-44.30.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17052	P	gd-32bit-2.1.0-5.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:20651	P	Security update for runc (Important)	2021-06-08
oval:org.opensuse.security:def:63064	P	ntp-4.2.8p11-2.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36329	P	xorg-x11-7.4-9.65.46 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:9340	P	Security update for libX11 (Important)	2021-06-08
oval:org.opensuse.security:def:124423	P	dovecot22-devel-2.2.31-19.11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61247	P	libldap-2_4-2-2.4.46-7.10 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61271	P	libpoppler-cpp0-0.62.0-2.33 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17254	P	libfbembed2_5-2.5.2.26539-15.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42648	P	man-2.5.2-17.16 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36213	P	libpython2_6-1_0-2.6.9-0.35.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15640	P	libmusicbrainz-devel-2.1.5-27.86 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17083	P	libzmq3-4.0.4-13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36465	P	libmysql55client_r18-32bit-5.5.43-0.7.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42712	P	systemtap-1.5-0.9.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36270	P	popt-1.7-37.63.64.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15663	P	libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17119	P	libgadu3-1.11.4-1.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36566	P	rubygem-sprockets-2_2-2.2.1-0.7.11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16161	P	dovecot22-devel-2.2.30.2-14.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36360	P	LibVNCServer-devel-0.9.1-154.24 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17229	P	dia-0.97.3-15.63 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36234	P	log4net-1.2.10-1.36 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:8964	P	Security update for slurm (Important)	2021-06-04
oval:org.opensuse.security:def:42082	P	Security update for python-py (Moderate)	2021-06-04
oval:org.opensuse.security:def:8589	P	Security update for avahi (Important)	2021-06-03
oval:org.opensuse.security:def:10080	P	Security update for lz4 (Important)	2021-05-19
oval:org.opensuse.security:def:60255	P	Security update for python3 (Important)	2021-05-17
oval:org.opensuse.security:def:6669	P	Security update for the Linux Kernel (Important)	2021-05-12
oval:org.opensuse.security:def:8942	P	Security update for bind (Important)	2021-05-04
oval:org.opensuse.security:def:10248	P	Security update for bind (Important)	2021-05-04
oval:org.opensuse.security:def:9697	P	Security update for bind (Important)	2021-05-04
oval:org.opensuse.security:def:10244	P	Security update for MozillaFirefox (Important)	2021-04-29
oval:org.opensuse.security:def:20429	P	Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP5) (Important)	2021-04-28
oval:org.opensuse.security:def:38658	P	Security update for MozillaFirefox (Important)	2021-04-28
oval:org.opensuse.security:def:20250	P	Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP4) (Important)	2021-04-28
oval:org.opensuse.security:def:11199	P	Security update for chromium (Critical)	2021-04-19
oval:org.opensuse.security:def:10061	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:56973	P	Security update for xorg-x11-server (Important)	2021-04-14
oval:org.opensuse.security:def:10226	P	Security update for ruby2.5 (Important)	2021-03-24
oval:org.opensuse.security:def:8381	P	Security update for hawk2 (Important)	2021-03-24
oval:org.opensuse.security:def:42162	P	Security update for python3 (Moderate)	2021-03-24
oval:org.opensuse.security:def:9667	P	Security update for glib2 (Important)	2021-03-19
oval:org.opensuse.security:def:10222	P	Security update for openssl-1_0_0 (Moderate)	2021-03-11
oval:org.opensuse.security:def:10218	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:19523	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:8702	P	Security update for bind (Important)	2021-02-18
oval:org.opensuse.security:def:57166	P	Security update for bind (Important)	2021-02-18
oval:org.opensuse.security:def:11177	P	Security update for chromium (Important)	2021-02-11
oval:org.opensuse.security:def:57107	P	Security update for python3 (Important)	2021-02-08
oval:org.opensuse.security:def:21404	P	Security update for python3 (Important)	2021-02-08
oval:org.opensuse.security:def:59535	P	Security update for openvswitch (Important)	2021-02-03
oval:org.opensuse.security:def:9790	P	Security update for openvswitch (Important)	2021-02-03
oval:org.opensuse.security:def:10341	P	Security update for openvswitch (Important)	2021-02-03
oval:org.opensuse.security:def:9362	P	Security update for sudo (Important)	2021-01-26
oval:org.opensuse.security:def:60166	P	Security update for cyrus-sasl (Important)	2020-12-28
oval:org.opensuse.security:def:20646	P	Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Important)	2020-12-28
oval:org.opensuse.security:def:8538	P	Security update for python3 (Important)	2020-12-23
oval:org.opensuse.security:def:58652	P	Security update for openssl (Important)	2020-12-11
oval:org.opensuse.security:def:58646	P	Security update for postgresql12 (Important)	2020-12-04
oval:org.opensuse.security:def:62930	P	FastCGI-2.4.0-2.23 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35976	P	libtiff3-3.8.2-141.152.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:41937	P	clamav-0.96-0.12.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:41921	P	LibVNCServer-0.9.1-154.24 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17318	P	gd-32bit-2.1.0-24.12.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42472	P	xterm-238-1.16 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42037	P	perl-spamassassin-3.2.5-26.22.18 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:41936	P	cifs-mount-3.4.3-1.17.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:41948	P	evince-2.28.2-0.2.68 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16713	P	dovecot22-devel-2.2.31-19.17.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:41985	P	lcms-1.17-77.14.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17330	P	java-1_7_0-openjdk-plugin-1.6.2-2.8.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62981	P	policycoreutils-devel-3.0-1.20 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42040	P	python-2.6.0-8.9.28 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62566	P	libmp3lame-devel-3.100-1.33 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42764	P	wget-openssl1-1.11.4-1.22.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17352	P	libnewt0_52-0.52.16-1.83 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17311	P	dia-0.97.3-15.63 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12868	P	dovecot22-2.2.31-19.17.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35881	P	cyrus-imapd-2.3.11-60.65.64.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62696	P	librsvg-devel-2.46.4-1.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16868	P	libpng12-compat-devel-1.2.50-19.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16876	P	libqb-devel-1.0.3+20171226.6d62b64-4.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61713	P	ceph-common-15.2.2.18+g1dbcddb5d8-1.10 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17342	P	libgio-fam-2.48.2-12.15.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3877	P	dovecot22-devel-2.2.31-19.17.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62892	P	cargo-1.33.0-1.13 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35880	P	cvs-1.12.12-144.23.5.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35892	P	evolution-data-server-2.28.2-0.29.24 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16910	P	libvorbis-devel-1.3.3-10.14.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61907	P	libwireshark13-3.2.2-3.35.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17378	P	openconnect-7.08-1.27 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:41209	P	Security update for python3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:41221	P	Security update for compat-openssl098 (Moderate)	2020-12-01
oval:org.opensuse.security:def:36964	P	libxml2-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10539	P	librsvg-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:42800	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:57273	P	Security update for Xen	2020-12-01
oval:org.opensuse.security:def:38967	P	libjavascriptcoregtk-1_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20704	P	Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:18249	P	Security update for php7 (Moderate)	2020-12-01
oval:org.opensuse.security:def:6502	P	rsync on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:19736	P	Security update for postgresql93 (Important)	2020-12-01
oval:org.opensuse.security:def:9966	P	perl-Tk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37446	P	gnome-shell on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37419	P	dovecot22 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9953	P	openvswitch on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38497	P	tar on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8519	P	sblim-sfcb on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36713	P	mozilla-nspr-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:58455	P	Security update for wget (Moderate)	2020-12-01
oval:org.opensuse.security:def:42889	P	Security update for gpg2 (Important)	2020-12-01
oval:org.opensuse.security:def:10904	P	dovecot22-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:58623	P	Security update for jasper (Important)	2020-12-01
oval:org.opensuse.security:def:56216	P	Security update for kernel-firmware (Important)	2020-12-01
oval:org.opensuse.security:def:36628	P	libIlmImf-Imf_2_1-21 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20013	P	Security update for the Linux Kernel (Live Patch 30 for SLE 12) (Important)	2020-12-01
oval:org.opensuse.security:def:60205	P	Security update for python3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:17488	P	Security update for openldap2 (Important)	2020-12-01
oval:org.opensuse.security:def:58362	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:39055	P	libzzip-0-13 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37730	P	apache2-mod_apparmor on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41313	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:37021	P	socat on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8215	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:42845	P	Security update for dovecot22 (Moderate)	2020-12-01
oval:org.opensuse.security:def:18275	P	Security update for dovecot22 (Moderate)	2020-12-01
oval:org.opensuse.security:def:36632	P	libXcursor1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6517	P	tcpdump on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:19774	P	Security update for systemd (Moderate)	2020-12-01
oval:org.opensuse.security:def:9975	P	python-libxml2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37490	P	libXfixes3-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9999	P	syslog-service on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38600	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36873	P	libQt5Core5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:58531	P	Security update for postgresql94 (Important)	2020-12-01
oval:org.opensuse.security:def:43527	P	Recommended update for dbus-1 (Low)	2020-12-01
oval:org.opensuse.security:def:56322	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:10450	P	gstreamer-0_10-plugins-bad-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36667	P	libjson-c2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17520	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:39083	P	gnome-shell-calendar on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37772	P	dovecot22 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55643	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:41465	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:37111	P	eog on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8240	P	xen on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:60046	P	Security update for sqlite3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:57687	P	cpp48 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36981	P	opie on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20740	P	Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:36631	P	libXRes1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36643	P	libXv1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6536	P	xinetd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:19886	P	Security update for the Linux Kernel (Live Patch 26 for SLE 12) (Important)	2020-12-01
oval:org.opensuse.security:def:59950	P	Security update for dovecot22 (Important)	2020-12-01
oval:org.opensuse.security:def:9988	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38128	P	apache2-mod_nss on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10046	P	cups-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36932	P	libpcsclite1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17577	P	Security update for fuse (Moderate)	2020-12-01
oval:org.opensuse.security:def:58569	P	Security update for SuSEfirewall2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:43572	P	Security update for dovecot22 (Moderate)	2020-12-01
oval:org.opensuse.security:def:6379	P	libgif6-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6387	P	libipa_hbac0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:19558	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:59054	P	Security update for glib2 (Important)	2020-12-01
oval:org.opensuse.security:def:56488	P	Security update for file (Moderate)	2020-12-01
oval:org.opensuse.security:def:10475	P	libXres-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8282	P	cron on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36695	P	libsoup-2_4-1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:7338	P	clamav on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20677	P	Security update for dovecot22 (Moderate)	2020-12-01
oval:org.opensuse.security:def:38265	P	libXvnc1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8411	P	libldb1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39128	P	libvpx1-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55642	P	Security update for libmspack (Moderate)	2020-12-01
oval:org.opensuse.security:def:55665	P	Security update for libpng16 (Moderate)	2020-12-01
oval:org.opensuse.security:def:41574	P	Security update for libsolv (Moderate)	2020-12-01
oval:org.opensuse.security:def:37271	P	libvte9 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8273	P	chrony on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:60128	P	Security update for dovecot22 (Important)	2020-12-01
oval:org.opensuse.security:def:57664	P	apache-commons-daemon on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20242	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12) (Important)	2020-12-01
oval:org.opensuse.security:def:57796	P	libgcrypt20 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37020	P	smt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:21378	P	Security update for libpng15 (Moderate)	2020-12-01
oval:org.opensuse.security:def:36727	P	perl-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6611	P	ghostscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:19919	P	Security update for bind (Moderate)	2020-12-01
oval:org.opensuse.security:def:10517	P	libmikmod-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10626	P	apache2-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38170	P	dovecot22 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38748	P	libyaml-0-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17589	P	Security update for libpng16 (Important)	2020-12-01
oval:org.opensuse.security:def:6409	P	libnewt0_52 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:19644	P	Security update for strongswan (Important)	2020-12-01
oval:org.opensuse.security:def:59235	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:56773	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:37379	P	apache2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8291	P	dbus-1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36739	P	python-imaging on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:7360	P	dovecot22 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38264	P	libXvMC1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38276	P	libcares2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8457	P	libupsclient1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:20613	P	Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:42809	P	Security update for java-1_7_1-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:39766	P	Security update for libquicktime (Moderate)	2020-12-01
oval:org.opensuse.security:def:55805	P	Security update for openldap2 (Important)	2020-12-01
oval:org.opensuse.security:def:41643	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:9899	P	libotr5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37330	P	squashfs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:19977	P	Security update for the Linux Kernel (Live Patch 29 for SLE 12) (Important)	2020-12-01
oval:org.opensuse.security:def:17990	P	Security update for java-1_8_0-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:58677	P	Security update for dovecot22 (Moderate)	2020-12-01
oval:org.opensuse.security:def:37048	P	xen on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41210	P	Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:36863	P	java-1_8_0-ibm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6636	P	hplip on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10526	P	libotr-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38908	P	libfbembed2_5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17611	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:58602	P	Security update for libapr-util1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:19702	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:59350	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:56881	P	Security update for sssd (Moderate)	2020-12-01
oval:org.opensuse.security:def:37418	P	dosfstools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8304	P	evince on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37377	P	apache-commons-daemon on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9923	P	libsystemd0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9931	P	libusbmuxd4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8504	P	python-imaging on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36623	P	kbd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:42838	P	Security update for tcpdump, libpcap (Moderate)	2020-12-01
oval:org.opensuse.security:def:10882	P	audiofile-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39808	P	Security update for dovecot22 (Moderate)	2020-12-01
oval:org.opensuse.security:def:58624	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:41745	P	Recommended update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:9924	P	libtag1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:19989	P	Security update for perl (Important)	2020-12-01
oval:org.opensuse.security:def:18016	P	Security update for dovecot22 (Moderate)	2020-12-01
oval:org.opensuse.security:def:20371	P	Security update for libarchive (Moderate)	2020-12-01
oval:org.opensuse.security:def:58252	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:39016	P	gstreamer-0_10-plugins-base on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37092	P	cups on GA media (Moderate)	2020-12-01
oval:com.ubuntu.xenial:def:201726690000000	V	CVE-2017-2669 on Ubuntu 16.04 LTS (xenial) - medium.	2018-06-21
oval:com.ubuntu.trusty:def:20172669000	V	CVE-2017-2669 on Ubuntu 14.04 LTS (trusty) - medium.	2018-06-21
oval:com.ubuntu.xenial:def:20172669000	V	CVE-2017-2669 on Ubuntu 16.04 LTS (xenial) - medium.	2018-06-21
oval:org.opensuse.security:def:81387	P	Security update for dovecot22 (Moderate)	2017-05-11
oval:com.ubuntu.precise:def:20172669000	V	CVE-2017-2669 on Ubuntu 12.04 LTS (precise) - medium.	2017-04-10

BACK