Upstream information
Description
Upstream Security Advisories:
SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
| CVSS detail | CNA (Oracle) | National Vulnerability Database | 
|---|---|---|
| Base Score | 8.1 | 8.1 | 
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | 
| Attack Vector | Network | Network | 
| Attack Complexity | High | High | 
| Privileges Required | None | None | 
| User Interaction | None | None | 
| Scope | Unchanged | Unchanged | 
| Confidentiality Impact | High | High | 
| Integrity Impact | High | High | 
| Availability Impact | High | High | 
| CVSSv3 Version | 3.1 | 3.1 | 
SUSE Security Advisories:
- openSUSE-SU-2023:0033-1, published Sun Jan 29 10:43:02 2023
 
List of released packages
| Product(s) | Fixed package version(s) | References | 
|---|---|---|
| openSUSE Leap 15.4 | 
  |  Patchnames:  openSUSE-2023-33  | 
| openSUSE Tumbleweed | 
  |  Patchnames:  openSUSE-Tumbleweed-2024-12640  | 
SUSE Timeline for this CVE
CVE page created: Thu Jan 19 13:00:17 2023CVE page last modified: Sat Nov 1 23:45:04 2025