Upstream information
Description
SUSE information
Overall state of this security issue: Resolved
This issue is currently not rated by SUSE as it is not affecting the SUSE Enterprise products.
| CVSS detail | CNA (CISA-ADP) | CNA (Oracle) | 
|---|---|---|
| Base Score | 3.8 | 3.8 | 
| Vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N | 
| Attack Vector | Network | Network | 
| Attack Complexity | Low | Low | 
| Privileges Required | High | High | 
| User Interaction | None | None | 
| Scope | Unchanged | Unchanged | 
| Confidentiality Impact | Low | Low | 
| Integrity Impact | Low | Low | 
| Availability Impact | None | None | 
| CVSSv3 Version | 3.1 | 3.1 | 
SUSE Security Advisories:
- RHSA-2025:1671, published Fri Feb 21 16:07:06 UTC 2025
 - RHSA-2025:1673, published Thu Feb 27 16:06:02 UTC 2025
 
List of released packages
| Product(s) | Fixed package version(s) | References | 
|---|---|---|
| SUSE Liberty Linux 8 | 
  |  Patchnames:  RHSA-2025:1673  | 
| SUSE Liberty Linux 9 | 
  |  Patchnames:  RHSA-2025:1671  | 
SUSE Timeline for this CVE
CVE page created: Wed Jan 22 00:00:52 2025CVE page last modified: Mon Oct 6 20:05:10 2025