Vulnerability CVE-2018-3613

Vulnerability Name:

CVE-2018-3613 (CCN-161609)

Assigned:

2017-12-28

Published:

2018-10-16

Updated:

2019-10-03

Summary:

Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

CVSS v3 Severity:

7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

6.7 Medium (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
5.8 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.8 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

CWE-noinfo
CWE-287

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2018-3613

Source: REDHAT
Type: UNKNOWN
RHSA-2019:2125

Source: CCN
Type: EDK II Web site
40. AUTHVARIABLE TIMESTAMP ZEROING ON APPEND_WRITE

Source: CONFIRM
Type: Patch, Third Party Advisory
https://edk2-docs.gitbooks.io/security-advisory/content/authvariable-timestamp-zeroing-on-append_write.html

Source: XF
Type: UNKNOWN
edk2-cve20183613-priv-esc(161609)

Source: FEDORA
Type: UNKNOWN
FEDORA-2019-bff1cbaba3

Source: CONFIRM
Type: UNKNOWN
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2018-3613

Vulnerable Configuration:

Configuration 1:

cpe:/a:tianocore:edk_ii:udk2015:*:*:*:*:*:*:*

OR cpe:/a:tianocore:edk_ii:udk2017:*:*:*:*:*:*:*

OR cpe:/a:tianocore:edk_ii:udk2018:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:7596	P	libicu-devel-65.1-150200.4.5.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7618	P	libmp3lame0-3.100-150000.3.2.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:20183613	V	CVE-2018-3613	2022-09-02
oval:org.opensuse.security:def:612	P	Security update for rubygem-tzinfo (Important)	2022-07-29
oval:org.opensuse.security:def:3313	P	ovmf-2017+git1510945757.b2662641d5-3.16.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3733	P	ovmf-2017+git1510945757.b2662641d5-3.16.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3511	P	grub2-2.02-12.15.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:95141	P	ovmf-202202-150400.3.3 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:1584	P	Security update for libxml2 (Important)	2022-05-19
oval:org.opensuse.security:def:94234	P	(Important)	2022-05-10
oval:org.opensuse.security:def:1062	P	Security update for openjpeg (Important)	2022-04-21
oval:org.opensuse.security:def:45595	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-17
oval:org.opensuse.security:def:113078	P	ovmf-202105-3.4 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:106515	P	Security update for busybox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:8871	P	Security update for aaa_base (Moderate)	2021-12-03
oval:org.opensuse.security:def:9620	P	Security update for poppler (Important)	2021-12-01
oval:org.opensuse.security:def:1647	P	Security update for mariadb (Moderate)	2021-12-01
oval:org.opensuse.security:def:23710	P	Security update for postgresql96 (Important)	2021-11-22
oval:org.opensuse.security:def:6713	P	Security update for the Linux Kernel (Live Patch 21 for SLE 15) (Important)	2021-11-17
oval:org.opensuse.security:def:8669	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:43701	P	Security update for opensc (Important)	2021-10-29
oval:org.opensuse.security:def:23695	P	Security update for postgresql10 (Important)	2021-10-20
oval:org.opensuse.security:def:9598	P	Security update for apache2 (Important)	2021-10-12
oval:org.opensuse.security:def:23683	P	Security update for glibc (Moderate)	2021-10-06
oval:org.opensuse.security:def:44653	P	Security update for glibc (Moderate)	2021-10-04
oval:org.opensuse.security:def:51669	P	Security update for sqlite3 (Important)	2021-09-23
oval:org.opensuse.security:def:71324	P	libtiff-devel-4.0.9-5.27.5 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:90064	P	ovmf-2017+git1510945757.b2662641d5-5.22.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61538	P	libminizip1-1.2.11-3.6.4 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:63229	P	ovmf-2017+git1510945757.b2662641d5-5.22.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61411	P	bzip2-1.0.6-3.22 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:97029	P	ovmf-2017+git1510945757.b2662641d5-5.22.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:103719	P	ovmf-2017+git1510945757.b2662641d5-5.22.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61408	P	bind-devel-9.11.2-12.8.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:2140	P	ovmf-2017+git1510945757.b2662641d5-5.22.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:8647	P	Security update for xerces-c (Important)	2021-09-02
oval:org.opensuse.security:def:8639	P	Security update for openexr (Important)	2021-08-20
oval:org.opensuse.security:def:66903	P	Security update for libmspack (Moderate)	2021-08-20
oval:org.opensuse.security:def:6958	P	Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)	2021-08-17
oval:org.opensuse.security:def:47061	P	libpng15-15-1.5.22-4.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:60328	P	Security update for libcares2 (Important)	2021-08-16
oval:org.opensuse.security:def:48284	P	python-libxml2-2.9.4-46.20.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47598	P	dracut-044.1-9.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47010	P	libblkid1-2.28-40.28 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48136	P	libjson-c2-0.11-2.15 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47584	P	cups-1.7.5-20.17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48044	P	ibus-1.5.13-15.11.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15132	P	ovmf-2017+git1510945757.b2662641d5-3.16.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47583	P	ctags-5.8-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47912	P	update-alternatives-1.18.4-14.216 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48252	P	ovmf-2017+git1510945757.b2662641d5-3.16.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47719	P	libicu-doc-52.1-8.7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:101388	P	ovmf-202008-8.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63473	P	gimp-2.10.12-7.25 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2273	P	ovmf-202008-8.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63375	P	sca-patterns-sle15-1.0.1-12.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63362	P	ovmf-202008-8.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63513	P	python2-keystoneclient-3.17.0-4.3.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:62290	P	policycoreutils-3.0-1.20 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62816	P	libtag-devel-1.11.1-4.9.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62189	P	libopenssl-devel-1.1.1d-1.46 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62061	P	dhcp-4.3.5-6.6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100947	P	libopenssl-devel-1.1.1d-1.46 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62266	P	nmap-7.70-3.12.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62382	P	cni-plugins-0.8.6-3.8.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:6945	P	Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)	2021-08-02
oval:org.opensuse.security:def:6936	P	Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)	2021-07-27
oval:org.opensuse.security:def:64737	P	Security update for bluez (Moderate)	2021-07-22
oval:org.opensuse.security:def:70259	P	Security update for the Linux Kernel (Important)	2021-07-21
oval:org.opensuse.security:def:6927	P	Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)	2021-07-15
oval:org.opensuse.security:def:8796	P	Security update for ovmf (Important)	2021-06-25
oval:org.opensuse.security:def:23607	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-06-18
oval:org.opensuse.security:def:51584	P	Security update for ucode-intel (Important)	2021-06-10
oval:org.opensuse.security:def:8777	P	Security update for the Linux Kernel (Important)	2021-06-09
oval:org.opensuse.security:def:48709	P	ImageMagick-6.8.8.1-8.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12641	P	libvirglrenderer0-0.5.0-11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:13570	P	krb5-1.12.1-19.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61378	P	w3m-0.5.3+git20180125-1.17 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12768	P	cluster-md-kmp-default-4.4.21-69.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48644	P	w3m-0.5.3-157.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12619	P	libruby2_1-2_1-2.1.9-18.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46372	P	MozillaFirefox-31.1.0esr-1.20 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61285	P	libsoup-2_4-1-2.62.2-1.9 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12611	P	libpython2_7-1_0-2.7.13-28.11.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12749	P	wpa_supplicant-2.2-15.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:13592	P	libXxf86dga1-1.1.4-3.59 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61220	P	libXxf86dga-devel-1.1.4-1.24 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48582	P	openslp-2.0.0-11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61247	P	libldap-2_4-2-2.4.46-7.10 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48811	P	libzmq3-4.0.4-6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12734	P	tcpdump-4.9.2-14.5.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46569	P	rsync-3.1.0-2.6 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48498	P	libgraphite2-3-1.3.1-6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61161	P	firewall-macros-0.5.3-2.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48740	P	libpolkit0-32bit-0.113-4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12687	P	perl-Config-IniFiles-2.82-3.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61328	P	pcsc-ccid-1.4.28-1.31 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:23592	P	Security update for libX11 (Important)	2021-06-08
oval:org.opensuse.security:def:46518	P	libsoup-2_4-1-2.44.2-1.43 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:66811	P	Security update for libwebp (Critical)	2021-06-04
oval:org.opensuse.security:def:55183	P	Security update for avahi (Important)	2021-06-03
oval:org.opensuse.security:def:8960	P	Security update for ceph (Important)	2021-06-02
oval:org.opensuse.security:def:8762	P	Security update for slurm_20_11 (Important)	2021-05-27
oval:org.opensuse.security:def:6894	P	Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)	2021-05-25
oval:org.opensuse.security:def:67984	P	Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)	2021-05-25
oval:org.opensuse.security:def:23902	P	Security update for xen (Important)	2021-05-19
oval:org.opensuse.security:def:59729	P	Security update for python3 (Important)	2021-05-17
oval:org.opensuse.security:def:8947	P	Security update for webkit2gtk3 (Important)	2021-05-04
oval:org.opensuse.security:def:8938	P	Security update for MozillaFirefox (Important)	2021-04-29
oval:org.opensuse.security:def:6667	P	Security update for the Linux Kernel (Live Patch 23 for SLE 15) (Important)	2021-04-28
oval:org.opensuse.security:def:23560	P	Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP3) (Important)	2021-04-28
oval:org.opensuse.security:def:73594	P	Security update for clamav (Important)	2021-04-14
oval:org.opensuse.security:def:8929	P	Security update for fwupdate (Important)	2021-04-08
oval:org.opensuse.security:def:6869	P	Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)	2021-04-07
oval:org.opensuse.security:def:43700	P	Security update for opensc (Moderate)	2021-04-06
oval:org.opensuse.security:def:24045	P	Security update for MozillaFirefox (Important)	2021-03-31
oval:org.opensuse.security:def:8715	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:51741	P	Security update for grub2 (Important)	2021-03-02
oval:org.opensuse.security:def:8896	P	Security update for salt (Critical)	2021-02-26
oval:org.opensuse.security:def:64650	P	Security update for python3 (Moderate)	2021-02-19
oval:org.opensuse.security:def:55291	P	Security update for wpa_supplicant (Important)	2021-02-15
oval:org.opensuse.security:def:60449	P	Security update for wpa_supplicant (Important)	2021-02-15
oval:org.opensuse.security:def:23731	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)	2021-02-10
oval:org.opensuse.security:def:68084	P	Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)	2021-02-10
oval:org.opensuse.security:def:4068	P	Security update for ImageMagick (Moderate)	2021-01-18
oval:org.opensuse.security:def:59707	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:59706	P	Security update for MozillaFirefox (Critical)	2020-12-21
oval:org.opensuse.security:def:51483	P	Security update for MozillaFirefox (Critical)	2020-12-21
oval:org.opensuse.security:def:4051	P	Security update for openssh (Moderate)	2020-12-17
oval:org.opensuse.security:def:6645	P	Security update for the Linux Kernel (Live Patch 19 for SLE 15) (Important)	2020-12-07
oval:org.opensuse.security:def:3936	P	libXdmcp-devel-1.1.1-12.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12843	P	ceph-common-12.2.12+git.1568024032.02236657ca-2.39.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12919	P	ibus-chewing-1.4.14-4.11 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61991	P	tboot-20170711_1.9.8-13.34 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2203	P	ovmf-201911-5.33 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4101	P	obs-service-appimage-0.10.6.1551887937.e42c270-1.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62469	P	libsmi-devel-0.4.8-1.29 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13126	P	ovmf-2017+git1510945757.b2662641d5-3.16.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3896	P	gd-devel-2.1.0-24.12.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12910	P	guestfs-data-1.32.4-21.3.10 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61818	P	libgstphotography-1_0-0-1.16.2-2.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:71437	P	apr-util-devel-1.6.1-10.21 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3995	P	libjasper-devel-1.900.14-195.15.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4098	P	ncurses-devel-5.9-64.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62598	P	pulseaudio-11.1-4.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3884	P	file-devel-5.22-10.12.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62519	P	gd-2.2.5-4.6.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63292	P	ovmf-201911-5.33 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61795	P	libXinerama-devel-1.1.3-1.22 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63568	P	bluez-cups-5.48-5.13.10 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3979	P	libgcrypt-devel-1.6.1-16.68.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4091	P	mercurial-2.8.2-15.13.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62464	P	libplist++-devel-2.0.0-1.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61794	P	libXi-devel-1.7.9-3.2.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62420	P	ibus-chewing-1.4.14-1.47 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:117171	P	ovmf-201911-5.33 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63271	P	libct4-1.1.36-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63618	P	gnome-photos-3.34.1-1.62 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3967	P	libcorosync-devel-2.3.6-9.13.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12868	P	dovecot22-2.2.31-19.17.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12932	P	kernel-firmware-20190618-5.11.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3876	P	dia-0.97.3-15.63 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61743	P	fuse-2.9.7-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4105	P	openexr-devel-2.1.0-6.13.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107613	P	ovmf-201911-5.33 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63139	P	apache2-2.4.33-1.28 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62552	P	libgme-devel-0.6.2-1.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:60143	P	Security update for python3 (Important)	2020-12-02
oval:org.opensuse.security:def:4764	P	Security update for ovmf (Moderate)	2020-12-02
oval:org.opensuse.security:def:4743	P	Security update for openslp (Important)	2020-12-02
oval:org.opensuse.security:def:44754	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:60783	P	Security update for libvirt (Important)	2020-12-01
oval:org.opensuse.security:def:50782	P	Security update for ldb (Moderate)	2020-12-01
oval:org.opensuse.security:def:45739	P	Security update for dovecot22 (Important)	2020-12-01
oval:org.opensuse.security:def:44477	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:46219	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:44682	P	Security update for java-1_8_0-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:24861	P	Security update for python, python-base (Moderate)	2020-12-01
oval:org.opensuse.security:def:23060	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:36901	P	libfreebl3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23353	P	Security update for bash (Moderate)	2020-12-01
oval:org.opensuse.security:def:24401	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:45673	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:45880	P	Security update for apache-commons-httpclient (Important)	2020-12-01
oval:org.opensuse.security:def:70154	P	build on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45222	P	Security update for postgresql96 (Moderate)	2020-12-01
oval:org.opensuse.security:def:43816	P	Security update for shadow (Moderate)	2020-12-01
oval:org.opensuse.security:def:54626	P	libxml2-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22481	P	Security update for kernel-firmware (Moderate)	2020-12-01
oval:org.opensuse.security:def:24173	P	Security update for squid (Critical)	2020-12-01
oval:org.opensuse.security:def:22590	P	Security update for atftp (Important)	2020-12-01
oval:org.opensuse.security:def:53126	P	Security update for mercurial (Low)	2020-12-01
oval:org.opensuse.security:def:6760	P	libspice-server1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51775	P	Security update for dnsmasq (Moderate)	2020-12-01
oval:org.opensuse.security:def:56852	P	Security update for python3 (Important)	2020-12-01
oval:org.opensuse.security:def:54052	P	libpoppler-glib8 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45058	P	Security update for sane-backends (Important)	2020-12-01
oval:org.opensuse.security:def:37279	P	mailman on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37637	P	patch on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38428	P	ovmf on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23536	P	Security update for procps (Important)	2020-12-01
oval:org.opensuse.security:def:22160	P	Security update for qpdf (Moderate)	2020-12-01
oval:org.opensuse.security:def:61063	P	Security update for postgresql, postgresql96, postgresql10 and postgresql12 (Moderate)	2020-12-01
oval:org.opensuse.security:def:60761	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:50549	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:45655	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:44288	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:55576	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:36890	P	libXxf86vm1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23307	P	Security update for tiff (Important)	2020-12-01
oval:org.opensuse.security:def:63653	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:45221	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:45817	P	Security update for SUSE Manager Client Tools (Moderate)	2020-12-01
oval:org.opensuse.security:def:50025	P	ovmf on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23527	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:43712	P	Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:54453	P	dnsmasq on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23832	P	Security update for cups (Important)	2020-12-01
oval:org.opensuse.security:def:22442	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:22560	P	Security update for rpm (Important)	2020-12-01
oval:org.opensuse.security:def:73476	P	vino on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24893	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:51213	P	Security update for ffmpeg (Low)	2020-12-01
oval:org.opensuse.security:def:46160	P	Security update for spamassassin (Important)	2020-12-01
oval:org.opensuse.security:def:44876	P	Security update for ucode-intel (Important)	2020-12-01
oval:org.opensuse.security:def:37222	P	liblzo2-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:60760	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:22061	P	Security update for postgresql, postgresql96, postgresql10 and postgresql12 (Moderate)	2020-12-01
oval:org.opensuse.security:def:60943	P	Security update for pam_radius (Important)	2020-12-01
oval:org.opensuse.security:def:38386	P	libudisks2-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36889	P	libXxf86dga1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50416	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:45531	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:44171	P	Security update for libX11 (Important)	2020-12-01
oval:org.opensuse.security:def:44602	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:55495	P	Security update for xen (Moderate)	2020-12-01
oval:org.opensuse.security:def:23228	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:45425	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:23237	P	Security update for openssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:59889	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:45389	P	Security update for libjpeg-turbo (Moderate)	2020-12-01
oval:org.opensuse.security:def:37588	P	libsqlite3-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45788	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:37748	P	chrony on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54215	P	gstreamer-0_10-plugins-bad on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23783	P	Security update for libxslt (Moderate)	2020-12-01
oval:org.opensuse.security:def:22317	P	Security update for libssh2_org (Moderate)	2020-12-01
oval:org.opensuse.security:def:22548	P	Security update for systemd (Important)	2020-12-01
oval:org.opensuse.security:def:49971	P	postgresql-contrib on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51049	P	Security update for helm-mirror (Moderate)	2020-12-01
oval:org.opensuse.security:def:46080	P	Security update for grub2 (Important)	2020-12-01
oval:org.opensuse.security:def:46307	P	Security update for openldap2 (Important)	2020-12-01
oval:org.opensuse.security:def:50088	P	ovmf on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44766	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:37121	P	gdk-pixbuf-lang on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22014	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:60642	P	Security update for binutils (Moderate)	2020-12-01
oval:org.opensuse.security:def:50394	P	Security update for systemd (Important)	2020-12-01
oval:org.opensuse.security:def:45347	P	Security update for soundtouch (Moderate)	2020-12-01
oval:org.opensuse.security:def:44096	P	Security update for wget (Important)	2020-12-01
oval:org.opensuse.security:def:54898	P	libnewt0_52 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24094	P	Security update for python-PyYAML (Important)	2020-12-01
oval:org.opensuse.security:def:55457	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:24223	P	Security update for raptor (Important)	2020-12-01
oval:org.opensuse.security:def:23121	P	Security update for libvorbis (Moderate)	2020-12-01
oval:org.opensuse.security:def:6794	P	mipv6d on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45377	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:45260	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:37529	P	libhivex0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45731	P	Recommended update for adcli, sssd (Moderate)	2020-12-01
oval:org.opensuse.security:def:37704	P	xalan-j2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24369	P	Security update for wireshark (Important)	2020-12-01
oval:org.opensuse.security:def:22006	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:54075	P	libvte9 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22264	P	Security update for ibus (Important)	2020-12-01
oval:org.opensuse.security:def:23257	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:60949	P	Security update for openldap2 (Important)	2020-12-01
oval:org.opensuse.security:def:50945	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:45873	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:44547	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:46278	P	Security update for ruby2.1 (Important)	2020-12-01
oval:org.opensuse.security:def:44739	P	Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:44755	P	Security update for freeradius-server (Important)	2020-12-01
oval:org.opensuse.security:def:36985	P	pam_krb5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23418	P	Security update for sqlite3 (Important)	2020-12-01
oval:org.opensuse.security:def:50034	P	skopeo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50393	P	Security update for NetworkManager (Moderate)	2020-12-01
oval:org.opensuse.security:def:53195	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:45234	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:43981	P	Security update for perl (Important)	2020-12-01
oval:org.opensuse.security:def:54732	P	binutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55383	P	shadow on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24185	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:56926	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:6637	P	hyper-v on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:23068	P	Security update for libvorbis (Moderate)	2020-12-01
oval:org.opensuse.security:def:6775	P	libvirt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51850	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:45179	P	Security update for openjpeg2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:37369	P	zoo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37676	P	shim on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54053	P	libproxy1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22224	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:com.redhat.rhsa:def:20192125	P	RHSA-2019:2125: ovmf security and enhancement update (Moderate)	2019-08-06
oval:com.ubuntu.xenial:def:201836130000000	V	CVE-2018-3613 on Ubuntu 16.04 LTS (xenial) - low.	2019-03-27
oval:com.ubuntu.bionic:def:20183613000	V	CVE-2018-3613 on Ubuntu 18.04 LTS (bionic) - untriaged.	2019-03-27
oval:com.ubuntu.disco:def:201836130000000	V	CVE-2018-3613 on Ubuntu 19.04 (disco) - low.	2019-03-27
oval:com.ubuntu.cosmic:def:20183613000	V	CVE-2018-3613 on Ubuntu 18.10 (cosmic) - untriaged.	2019-03-27
oval:com.ubuntu.cosmic:def:201836130000000	V	CVE-2018-3613 on Ubuntu 18.10 (cosmic) - untriaged.	2019-03-27
oval:com.ubuntu.trusty:def:20183613000	V	CVE-2018-3613 on Ubuntu 14.04 LTS (trusty) - untriaged.	2019-03-27
oval:com.ubuntu.bionic:def:201836130000000	V	CVE-2018-3613 on Ubuntu 18.04 LTS (bionic) - low.	2019-03-27
oval:com.ubuntu.xenial:def:20183613000	V	CVE-2018-3613 on Ubuntu 16.04 LTS (xenial) - untriaged.	2019-03-27
oval:org.opensuse.security:def:85053	P	Security update for ovmf (Moderate)	2018-12-20
oval:org.opensuse.security:def:86876	P	Security update for ovmf (Moderate)	2018-12-20
oval:org.opensuse.security:def:88631	P	Security update for ovmf (Moderate)	2018-12-19
oval:org.opensuse.security:def:126207	P	Security update for ovmf (Moderate)	2018-12-19
oval:org.opensuse.security:def:79560	P	Security update for ovmf (Moderate)	2018-12-19
oval:org.opensuse.security:def:124795	P	Security update for ovmf (Moderate)	2018-12-19

BACK