CVE-2017-5410

Upstream information

CVE-2017-5410 at MITRE

Description

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

SUSE information

CVSS v2 Scores
	SUSE
Base Score	4.30
Vector	AV:N/AC:M/Au:N/C:N/I:N/A:P
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entries: 1028391 [NEW], 1028393 [RESOLVED / DUPLICATE]

SUSE Security Advisories:

SUSE-SU-2017:0714-1, published Fri, 17 Mar 2017 12:08:28 +0100 (CET)
SUSE-SU-2017:0732-1, published Fri, 17 Mar 2017 21:07:58 +0100 (CET)
openSUSE-SU-2017:0687-1, published Tue, 14 Mar 2017 18:08:56 +0100 (CET)
openSUSE-SU-2017:0688-1, published Tue, 14 Mar 2017 18:09:15 +0100 (CET)
openSUSE-SU-2017:0690-1, published Tue, 14 Mar 2017 18:09:36 +0100 (CET)
openSUSE-SU-2017:1196-1, published Sun, 7 May 2017 00:11:24 +0200 (CEST)
openSUSE-SU-2017:1268-1, published Mon, 15 May 2017 18:20:49 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 12 SP1	`MozillaFirefox >= 45.8.0esr-102.1` `MozillaFirefox-translations >= 45.8.0esr-102.1`	Patchnames: SUSE-SLE-DESKTOP-12-SP1-2017-392
SUSE Linux Enterprise Desktop 12 SP2	`MozillaFirefox >= 45.8.0esr-102.1` `MozillaFirefox-translations >= 45.8.0esr-102.1`	Patchnames: SUSE-SLE-DESKTOP-12-SP2-2017-392
SUSE Linux Enterprise Point of Sale 11 SP3	`MozillaFirefox >= 45.8.0esr-68.1` `MozillaFirefox-translations >= 45.8.0esr-68.1`	Patchnames: sleposp3-MozillaFirefox-13034
SUSE Linux Enterprise Server 11 SP3-LTSS	`MozillaFirefox >= 45.8.0esr-68.1` `MozillaFirefox-translations >= 45.8.0esr-68.1`	Patchnames: slessp3-MozillaFirefox-13034
SUSE Linux Enterprise Server 11 SP4	`MozillaFirefox >= 45.8.0esr-68.1` `MozillaFirefox-translations >= 45.8.0esr-68.1`	Patchnames: slessp4-MozillaFirefox-13034
SUSE Linux Enterprise Server 12 SP1	`MozillaFirefox >= 45.8.0esr-102.1` `MozillaFirefox-translations >= 45.8.0esr-102.1`	Patchnames: SUSE-SLE-SERVER-12-SP1-2017-392
SUSE Linux Enterprise Server 12 SP2	`MozillaFirefox >= 45.8.0esr-102.1` `MozillaFirefox-translations >= 45.8.0esr-102.1`	Patchnames: SUSE-SLE-SERVER-12-SP2-2017-392
SUSE Linux Enterprise Server 12-LTSS	`MozillaFirefox >= 45.8.0esr-102.1` `MozillaFirefox-translations >= 45.8.0esr-102.1`	Patchnames: SUSE-SLE-SERVER-12-2017-392
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	`MozillaFirefox >= 45.8.0esr-102.1` `MozillaFirefox-translations >= 45.8.0esr-102.1`	Patchnames: SUSE-SLE-RPI-12-SP2-2017-392
SUSE Linux Enterprise Software Development Kit 11 SP4	`MozillaFirefox >= 45.8.0esr-68.1` `MozillaFirefox-devel >= 45.8.0esr-68.1`	Patchnames: sdksp4-MozillaFirefox-13034
SUSE Linux Enterprise Software Development Kit 12 SP1	`MozillaFirefox >= 45.8.0esr-102.1` `MozillaFirefox-devel >= 45.8.0esr-102.1`	Patchnames: SUSE-SLE-SDK-12-SP1-2017-392
SUSE Linux Enterprise Software Development Kit 12 SP2	`MozillaFirefox >= 45.8.0esr-102.1` `MozillaFirefox-devel >= 45.8.0esr-102.1`	Patchnames: SUSE-SLE-SDK-12-SP2-2017-392
SUSE Linux Enterprise for SAP 12	`MozillaFirefox >= 45.8.0esr-102.1` `MozillaFirefox-translations >= 45.8.0esr-102.1`	Patchnames: SUSE-SLE-SAP-12-2017-392
SUSE Manager 2.1	`MozillaFirefox >= 45.8.0esr-68.1` `MozillaFirefox-translations >= 45.8.0esr-68.1`	Patchnames: sleman21-MozillaFirefox-13034
SUSE Manager Proxy 2.1	`MozillaFirefox >= 45.8.0esr-68.1` `MozillaFirefox-translations >= 45.8.0esr-68.1`	Patchnames: slemap21-MozillaFirefox-13034
SUSE OpenStack Cloud 5	`MozillaFirefox >= 45.8.0esr-68.1` `MozillaFirefox-translations >= 45.8.0esr-68.1`	Patchnames: sleclo50sp3-MozillaFirefox-13034
openSUSE Leap 42.1	`MozillaFirefox >= 52.0-55.2` `MozillaFirefox-branding-upstream >= 52.0-55.2` `MozillaFirefox-buildsymbols >= 52.0-55.2` `MozillaFirefox-debuginfo >= 52.0-55.2` `MozillaFirefox-debugsource >= 52.0-55.2` `MozillaFirefox-devel >= 52.0-55.2` `MozillaFirefox-translations-common >= 52.0-55.2` `MozillaFirefox-translations-other >= 52.0-55.2` `MozillaThunderbird >= 52.1.0-42.1` `MozillaThunderbird-buildsymbols >= 52.1.0-42.1` `MozillaThunderbird-debuginfo >= 52.1.0-42.1` `MozillaThunderbird-debugsource >= 52.1.0-42.1` `MozillaThunderbird-devel >= 52.1.0-42.1` `MozillaThunderbird-translations-common >= 52.1.0-42.1` `MozillaThunderbird-translations-other >= 52.1.0-42.1` `java-1_8_0-openjdk >= 1.8.0.121-23.1` `java-1_8_0-openjdk-accessibility >= 1.8.0.121-23.1` `java-1_8_0-openjdk-debuginfo >= 1.8.0.121-23.1` `java-1_8_0-openjdk-debugsource >= 1.8.0.121-23.1` `java-1_8_0-openjdk-demo >= 1.8.0.121-23.1` `java-1_8_0-openjdk-demo-debuginfo >= 1.8.0.121-23.1` `java-1_8_0-openjdk-devel >= 1.8.0.121-23.1` `java-1_8_0-openjdk-devel-debuginfo >= 1.8.0.121-23.1` `java-1_8_0-openjdk-headless >= 1.8.0.121-23.1` `java-1_8_0-openjdk-headless-debuginfo >= 1.8.0.121-23.1` `java-1_8_0-openjdk-javadoc >= 1.8.0.121-23.1` `java-1_8_0-openjdk-src >= 1.8.0.121-23.1` `libfreebl3 >= 3.28.3-38.1` `libfreebl3-32bit >= 3.28.3-38.1` `libfreebl3-debuginfo >= 3.28.3-38.1` `libfreebl3-debuginfo-32bit >= 3.28.3-38.1` `libsoftokn3 >= 3.28.3-38.1` `libsoftokn3-32bit >= 3.28.3-38.1` `libsoftokn3-debuginfo >= 3.28.3-38.1` `libsoftokn3-debuginfo-32bit >= 3.28.3-38.1` `mozilla-nss >= 3.28.3-38.1` `mozilla-nss-32bit >= 3.28.3-38.1` `mozilla-nss-certs >= 3.28.3-38.1` `mozilla-nss-certs-32bit >= 3.28.3-38.1` `mozilla-nss-certs-debuginfo >= 3.28.3-38.1` `mozilla-nss-certs-debuginfo-32bit >= 3.28.3-38.1` `mozilla-nss-debuginfo >= 3.28.3-38.1` `mozilla-nss-debuginfo-32bit >= 3.28.3-38.1` `mozilla-nss-debugsource >= 3.28.3-38.1` `mozilla-nss-devel >= 3.28.3-38.1` `mozilla-nss-sysinit >= 3.28.3-38.1` `mozilla-nss-sysinit-32bit >= 3.28.3-38.1` `mozilla-nss-sysinit-debuginfo >= 3.28.3-38.1` `mozilla-nss-sysinit-debuginfo-32bit >= 3.28.3-38.1` `mozilla-nss-tools >= 3.28.3-38.1` `mozilla-nss-tools-debuginfo >= 3.28.3-38.1`	Patchnames: openSUSE-2017-344 openSUSE-2017-345 openSUSE-2017-545
openSUSE Leap 42.2	`MozillaFirefox >= 52.0-55.2` `MozillaFirefox-branding-upstream >= 52.0-55.2` `MozillaFirefox-buildsymbols >= 52.0-55.2` `MozillaFirefox-debuginfo >= 52.0-55.2` `MozillaFirefox-debugsource >= 52.0-55.2` `MozillaFirefox-devel >= 52.0-55.2` `MozillaFirefox-translations-common >= 52.0-55.2` `MozillaFirefox-translations-other >= 52.0-55.2` `MozillaThunderbird >= 52.1.0-41.3.1` `MozillaThunderbird-buildsymbols >= 52.1.0-41.3.1` `MozillaThunderbird-debuginfo >= 52.1.0-41.3.1` `MozillaThunderbird-debugsource >= 52.1.0-41.3.1` `MozillaThunderbird-devel >= 52.1.0-41.3.1` `MozillaThunderbird-translations-common >= 52.1.0-41.3.1` `MozillaThunderbird-translations-other >= 52.1.0-41.3.1` `java-1_8_0-openjdk >= 1.8.0.121-8.1` `java-1_8_0-openjdk-accessibility >= 1.8.0.121-8.1` `java-1_8_0-openjdk-debuginfo >= 1.8.0.121-8.1` `java-1_8_0-openjdk-debugsource >= 1.8.0.121-8.1` `java-1_8_0-openjdk-demo >= 1.8.0.121-8.1` `java-1_8_0-openjdk-demo-debuginfo >= 1.8.0.121-8.1` `java-1_8_0-openjdk-devel >= 1.8.0.121-8.1` `java-1_8_0-openjdk-devel-debuginfo >= 1.8.0.121-8.1` `java-1_8_0-openjdk-headless >= 1.8.0.121-8.1` `java-1_8_0-openjdk-headless-debuginfo >= 1.8.0.121-8.1` `java-1_8_0-openjdk-javadoc >= 1.8.0.121-8.1` `java-1_8_0-openjdk-src >= 1.8.0.121-8.1` `libfreebl3 >= 3.28.3-38.1` `libfreebl3-32bit >= 3.28.3-38.1` `libfreebl3-debuginfo >= 3.28.3-38.1` `libfreebl3-debuginfo-32bit >= 3.28.3-38.1` `libsoftokn3 >= 3.28.3-38.1` `libsoftokn3-32bit >= 3.28.3-38.1` `libsoftokn3-debuginfo >= 3.28.3-38.1` `libsoftokn3-debuginfo-32bit >= 3.28.3-38.1` `mozilla-nss >= 3.28.3-38.1` `mozilla-nss-32bit >= 3.28.3-38.1` `mozilla-nss-certs >= 3.28.3-38.1` `mozilla-nss-certs-32bit >= 3.28.3-38.1` `mozilla-nss-certs-debuginfo >= 3.28.3-38.1` `mozilla-nss-certs-debuginfo-32bit >= 3.28.3-38.1` `mozilla-nss-debuginfo >= 3.28.3-38.1` `mozilla-nss-debuginfo-32bit >= 3.28.3-38.1` `mozilla-nss-debugsource >= 3.28.3-38.1` `mozilla-nss-devel >= 3.28.3-38.1` `mozilla-nss-sysinit >= 3.28.3-38.1` `mozilla-nss-sysinit-32bit >= 3.28.3-38.1` `mozilla-nss-sysinit-debuginfo >= 3.28.3-38.1` `mozilla-nss-sysinit-debuginfo-32bit >= 3.28.3-38.1` `mozilla-nss-tools >= 3.28.3-38.1` `mozilla-nss-tools-debuginfo >= 3.28.3-38.1`	Patchnames: openSUSE-2017-344 openSUSE-2017-345 openSUSE-2017-545