Upstream information

CVE-2024-51744 at MITRE

Description

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by `ParseWithClaims` return both error codes. If users only check for the `jwt.ErrTokenExpired ` using `error.Is`, they will ignore the embedded `jwt.ErrTokenSignatureInvalid` and thus potentially accept invalid tokens. A fix has been back-ported with the error handling logic from the `v5` branch to the `v4` branch. In this logic, the `ParseWithClaims` function will immediately return in "dangerous" situations (e.g., an invalid signature), limiting the combined errors only to situations where the signature is valid, but further validation failed (e.g., if the signature is valid, but is expired AND has the wrong audience). This fix is part of the 4.5.1 release. We are aware that this changes the behaviour of an established function and is not 100 % backwards compatible, so updating to 4.5.1 might break your code. In case you cannot update to 4.5.0, please make sure that you are properly checking for all errors ("dangerous" ones first), so that you are not running in the case detailed above.

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having low severity.

CVSS v3 Scores
  CNA (GitHub) SUSE
Base Score 3.1 3.1
Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack Vector Network Network
Attack Complexity High High
Privileges Required None None
User Interaction Required Required
Scope Unchanged Unchanged
Confidentiality Impact Low Low
Integrity Impact None None
Availability Impact None None
CVSSv3 Version 3.1 3.1
CVSS v4 Scores
  SUSE
Base Score 2.1
Vector CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Attack Vector Network
Attack Complexity High
Attack Requirements Present
Privileges Required None
User Interaction Active
Vulnerable System Confidentiality Impact Low
Vulnerable System Integrity Impact None
Vulnerable System Availability Impact None
Subsequent System Confidentiality Impact None
Subsequent System Integrity Impact None
Subsequent System Availability Impact None
CVSSv4 Version 4.0
SUSE Bugzilla entry: 1232936 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE Tumbleweed
  • coredns >= 1.11.3+git129.387f34d-1.1
  • coredns-extras >= 1.11.3+git129.387f34d-1.1
Patchnames:
openSUSE-Tumbleweed-2024-14481


Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s) Source package State
Products under general support and receiving all security fixes.
SLES15-SP5-CHOST-BYOS-Aliyun docker Affected
SLES15-SP5-CHOST-BYOS-Azure docker Affected
SLES15-SP5-CHOST-BYOS-EC2 docker Affected
SLES15-SP5-CHOST-BYOS-GCE docker Affected
SLES15-SP5-CHOST-BYOS-SAP-CCloud docker Affected
SLES15-SP6-CHOST-BYOS docker Affected
SLES15-SP6-CHOST-BYOS-Aliyun docker Affected
SLES15-SP6-CHOST-BYOS-Azure docker Affected
SLES15-SP6-CHOST-BYOS-EC2 docker Affected
SLES15-SP6-CHOST-BYOS-GCE docker Affected
SLES15-SP6-CHOST-BYOS-GDC docker Affected
SLES15-SP6-CHOST-BYOS-SAP-CCloud docker Affected
SUSE Linux Enterprise Desktop 15 SP5 cosign Affected
SUSE Linux Enterprise Desktop 15 SP6 cosign Affected
SUSE Linux Enterprise High Performance Computing 12 docker Affected
SUSE Linux Enterprise High Performance Computing 12 kubernetes Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5 cosign Affected
SUSE Linux Enterprise High Performance Computing 15 SP5 docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP5 kubernetes1.23 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP5 kubernetes1.24 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5 kubernetes1.25 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5 kubernetes1.26 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5 kubernetes1.27 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5 kubernetes1.28 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP6 amber-cli Affected
SUSE Linux Enterprise High Performance Computing 15 SP6 cosign Affected
SUSE Linux Enterprise High Performance Computing 15 SP6 docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP6 kubernetes1.25 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP6 kubernetes1.26 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP6 kubernetes1.27 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP6 kubernetes1.28 Not affected
SUSE Linux Enterprise Micro 5.1 docker Affected
SUSE Linux Enterprise Micro 5.2 docker Affected
SUSE Linux Enterprise Micro 5.3 docker Affected
SUSE Linux Enterprise Micro 5.4 docker Affected
SUSE Linux Enterprise Micro 5.5 docker Affected
SUSE Linux Enterprise Micro 6.0 buildkit Affected
SUSE Linux Enterprise Micro 6.0 docker Affected
SUSE Linux Enterprise Module for Basesystem 15 SP5 cosign Affected
SUSE Linux Enterprise Module for Basesystem 15 SP6 cosign Affected
SUSE Linux Enterprise Module for Containers 15 SP5 docker Affected
SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.23 Unsupported
SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.24 Not affected
SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.25 Not affected
SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.26 Not affected
SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.27 Not affected
SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.28 Not affected
SUSE Linux Enterprise Module for Containers 15 SP6 docker Affected
SUSE Linux Enterprise Module for Containers 15 SP6 kubernetes1.25 Not affected
SUSE Linux Enterprise Module for Containers 15 SP6 kubernetes1.26 Not affected
SUSE Linux Enterprise Module for Containers 15 SP6 kubernetes1.27 Not affected
SUSE Linux Enterprise Module for Containers 15 SP6 kubernetes1.28 Not affected
SUSE Linux Enterprise Module for Package Hub 15 SP5 golang-github-prometheus-prometheus Affected
SUSE Linux Enterprise Module for Package Hub 15 SP5 grafana Affected
SUSE Linux Enterprise Module for Package Hub 15 SP6 golang-github-prometheus-prometheus Affected
SUSE Linux Enterprise Module for Package Hub 15 SP6 grafana Affected
SUSE Linux Enterprise Module for Server Applications 15 SP6 amber-cli Affected
SUSE Linux Enterprise Server 15 SP5 cosign Affected
SUSE Linux Enterprise Server 15 SP5 docker Affected
SUSE Linux Enterprise Server 15 SP5 kubernetes1.23 Unsupported
SUSE Linux Enterprise Server 15 SP5 kubernetes1.24 Not affected
SUSE Linux Enterprise Server 15 SP5 kubernetes1.25 Not affected
SUSE Linux Enterprise Server 15 SP5 kubernetes1.26 Not affected
SUSE Linux Enterprise Server 15 SP5 kubernetes1.27 Not affected
SUSE Linux Enterprise Server 15 SP5 kubernetes1.28 Not affected
SUSE Linux Enterprise Server 15 SP6 amber-cli Affected
SUSE Linux Enterprise Server 15 SP6 cosign Affected
SUSE Linux Enterprise Server 15 SP6 docker Affected
SUSE Linux Enterprise Server 15 SP6 kubernetes1.25 Not affected
SUSE Linux Enterprise Server 15 SP6 kubernetes1.26 Not affected
SUSE Linux Enterprise Server 15 SP6 kubernetes1.27 Not affected
SUSE Linux Enterprise Server 15 SP6 kubernetes1.28 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5 cosign Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5 docker Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5 kubernetes1.23 Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP5 kubernetes1.24 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5 kubernetes1.25 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5 kubernetes1.26 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5 kubernetes1.27 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5 kubernetes1.28 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6 amber-cli Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6 cosign Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6 docker Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6 kubernetes1.25 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6 kubernetes1.26 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6 kubernetes1.27 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6 kubernetes1.28 Not affected
SUSE Manager Proxy 4.3 cosign Affected
SUSE Manager Proxy 4.3 docker Affected
SUSE Manager Proxy 4.3 kubernetes1.18 Unsupported
SUSE Manager Proxy 4.3 kubernetes1.23 Unsupported
SUSE Manager Proxy 4.3 kubernetes1.24 Not affected
SUSE Manager Proxy 4.3 kubernetes1.25 Not affected
SUSE Manager Proxy 4.3 kubernetes1.26 Not affected
SUSE Manager Proxy 4.3 kubernetes1.27 Not affected
SUSE Manager Proxy 4.3 kubernetes1.28 Not affected
SUSE Manager Proxy Module 4.3 golang-github-prometheus-prometheus Affected
SUSE Manager Retail Branch Server 4.3 cosign Affected
SUSE Manager Retail Branch Server 4.3 docker Affected
SUSE Manager Retail Branch Server 4.3 kubernetes1.18 Unsupported
SUSE Manager Retail Branch Server 4.3 kubernetes1.23 Unsupported
SUSE Manager Retail Branch Server 4.3 kubernetes1.24 Not affected
SUSE Manager Retail Branch Server 4.3 kubernetes1.25 Not affected
SUSE Manager Retail Branch Server 4.3 kubernetes1.26 Not affected
SUSE Manager Retail Branch Server 4.3 kubernetes1.27 Not affected
SUSE Manager Retail Branch Server 4.3 kubernetes1.28 Not affected
SUSE Manager Server 4.3 cosign Affected
SUSE Manager Server 4.3 docker Affected
SUSE Manager Server 4.3 kubernetes1.18 Unsupported
SUSE Manager Server 4.3 kubernetes1.23 Unsupported
SUSE Manager Server 4.3 kubernetes1.24 Not affected
SUSE Manager Server 4.3 kubernetes1.25 Not affected
SUSE Manager Server 4.3 kubernetes1.26 Not affected
SUSE Manager Server 4.3 kubernetes1.27 Not affected
SUSE Manager Server 4.3 kubernetes1.28 Not affected
SUSE Manager Tools 12 golang-github-prometheus-prometheus Affected
SUSE Manager Tools 12 grafana Affected
SUSE Manager Tools 12-BETA golang-github-prometheus-prometheus Affected
SUSE Manager Tools 12-BETA grafana Affected
SUSE Manager Tools 15 golang-github-prometheus-prometheus Affected
SUSE Manager Tools 15 grafana Affected
SUSE Manager Tools 15-BETA golang-github-prometheus-prometheus Affected
SUSE Manager Tools 15-BETA grafana Affected
openSUSE Leap 15.5 cosign Affected
openSUSE Leap 15.5 docker Affected
openSUSE Leap 15.5 etcd Affected
openSUSE Leap 15.5 golang-github-prometheus-prometheus Affected
openSUSE Leap 15.5 grafana Affected
openSUSE Leap 15.5 kubernetes1.18 Unsupported
openSUSE Leap 15.5 kubernetes1.23 Unsupported
openSUSE Leap 15.5 kubernetes1.24 Not affected
openSUSE Leap 15.5 kubernetes1.25 Not affected
openSUSE Leap 15.5 kubernetes1.26 Not affected
openSUSE Leap 15.5 kubernetes1.27 Not affected
openSUSE Leap 15.5 kubernetes1.28 Not affected
openSUSE Leap 15.6 amber-cli Affected
openSUSE Leap 15.6 cosign Affected
openSUSE Leap 15.6 docker Affected
openSUSE Leap 15.6 etcd Affected
openSUSE Leap 15.6 golang-github-prometheus-prometheus Affected
openSUSE Leap 15.6 grafana Affected
openSUSE Leap 15.6 kubernetes1.18 Unsupported
openSUSE Leap 15.6 kubernetes1.23 Unsupported
openSUSE Leap 15.6 kubernetes1.24 Not affected
openSUSE Leap 15.6 kubernetes1.25 Not affected
openSUSE Leap 15.6 kubernetes1.26 Not affected
openSUSE Leap 15.6 kubernetes1.27 Not affected
openSUSE Leap 15.6 kubernetes1.28 Not affected
openSUSE Leap Micro 5.5 docker Affected
Products under Long Term Service Pack support and receiving important and critical security fixes.
SLES15-EC2-CHOST-HVM-BYOS docker Affected
SLES15-SP1-CHOST-BYOS-Azure docker Affected
SLES15-SP1-CHOST-BYOS-EC2 docker Affected
SLES15-SP1-CHOST-BYOS-GCE docker Affected
SLES15-SP2-CHOST-BYOS-Aliyun docker Affected
SLES15-SP2-CHOST-BYOS-Azure docker Affected
SLES15-SP2-CHOST-BYOS-EC2 docker Affected
SLES15-SP2-CHOST-BYOS-GCE docker Affected
SLES15-SP3-CHOST-BYOS-Aliyun docker Affected
SLES15-SP3-CHOST-BYOS-Azure docker Affected
SLES15-SP3-CHOST-BYOS-EC2 docker Affected
SLES15-SP3-CHOST-BYOS-GCE docker Affected
SLES15-SP3-CHOST-BYOS-SAP-CCloud docker Affected
SLES15-SP4-CHOST-BYOS docker Affected
SLES15-SP4-CHOST-BYOS-Aliyun docker Affected
SLES15-SP4-CHOST-BYOS-Azure docker Affected
SLES15-SP4-CHOST-BYOS-EC2 docker Affected
SLES15-SP4-CHOST-BYOS-GCE docker Affected
SLES15-SP4-CHOST-BYOS-SAP-CCloud docker Affected
SUSE Linux Enterprise Desktop 15 SP4 cosign Affected
SUSE Linux Enterprise High Performance Computing 15 SP2 docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP2 kubernetes1.18 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kubernetes1.18 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kubernetes1.18 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3 docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP3 kubernetes1.18 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3 kubernetes1.23 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.18 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.23 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.24 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.18 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.23 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.24 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4 cosign Affected
SUSE Linux Enterprise High Performance Computing 15 SP4 docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP4 kubernetes1.18 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4 kubernetes1.23 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4 kubernetes1.24 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4 kubernetes1.25 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4 kubernetes1.26 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4 kubernetes1.27 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4 kubernetes1.28 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS cosign Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kubernetes1.18 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kubernetes1.23 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kubernetes1.24 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kubernetes1.25 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kubernetes1.26 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kubernetes1.27 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kubernetes1.28 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS cosign Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubernetes1.18 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubernetes1.23 Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubernetes1.24 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubernetes1.25 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubernetes1.26 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubernetes1.27 Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubernetes1.28 Not affected
SUSE Linux Enterprise Module for Basesystem 15 SP4 cosign Affected
SUSE Linux Enterprise Module for Containers 15 SP2 docker Affected
SUSE Linux Enterprise Module for Containers 15 SP2 kubernetes1.18 Unsupported
SUSE Linux Enterprise Module for Containers 15 SP3 docker Affected
SUSE Linux Enterprise Module for Containers 15 SP3 kubernetes1.18 Unsupported
SUSE Linux Enterprise Module for Containers 15 SP3 kubernetes1.23 Unsupported
SUSE Linux Enterprise Module for Containers 15 SP4 docker Affected
SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.18 Unsupported
SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.23 Unsupported
SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.24 Not affected
SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.25 Not affected
SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.26 Not affected
SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.27 Not affected
SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.28 Not affected
SUSE Linux Enterprise Server 12 SP5 docker Affected
SUSE Linux Enterprise Server 12 SP5 kubernetes Not affected
SUSE Linux Enterprise Server 15 SP2 docker Affected
SUSE Linux Enterprise Server 15 SP2 kubernetes1.18 Unsupported
SUSE Linux Enterprise Server 15 SP2-LTSS docker Affected
SUSE Linux Enterprise Server 15 SP2-LTSS kubernetes1.18 Unsupported
SUSE Linux Enterprise Server 15 SP3 docker Affected
SUSE Linux Enterprise Server 15 SP3 kubernetes1.18 Unsupported
SUSE Linux Enterprise Server 15 SP3 kubernetes1.23 Unsupported
SUSE Linux Enterprise Server 15 SP3-LTSS docker Affected
SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.18 Unsupported
SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.23 Unsupported
SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.24 Not affected
SUSE Linux Enterprise Server 15 SP4 cosign Affected
SUSE Linux Enterprise Server 15 SP4 docker Affected
SUSE Linux Enterprise Server 15 SP4 kubernetes1.18 Unsupported
SUSE Linux Enterprise Server 15 SP4 kubernetes1.23 Unsupported
SUSE Linux Enterprise Server 15 SP4 kubernetes1.24 Not affected
SUSE Linux Enterprise Server 15 SP4 kubernetes1.25 Not affected
SUSE Linux Enterprise Server 15 SP4 kubernetes1.26 Not affected
SUSE Linux Enterprise Server 15 SP4 kubernetes1.27 Not affected
SUSE Linux Enterprise Server 15 SP4 kubernetes1.28 Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS cosign Affected
SUSE Linux Enterprise Server 15 SP4-LTSS docker Affected
SUSE Linux Enterprise Server 15 SP4-LTSS kubernetes1.18 Unsupported
SUSE Linux Enterprise Server 15 SP4-LTSS kubernetes1.23 Unsupported
SUSE Linux Enterprise Server 15 SP4-LTSS kubernetes1.24 Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS kubernetes1.25 Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS kubernetes1.26 Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS kubernetes1.27 Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS kubernetes1.28 Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP5 docker Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP5 kubernetes Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2 docker Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2 kubernetes1.18 Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP3 docker Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.18 Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.23 Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.24 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4 cosign Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4 docker Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubernetes1.18 Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubernetes1.23 Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubernetes1.24 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubernetes1.25 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubernetes1.26 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubernetes1.27 Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubernetes1.28 Not affected
Products past their end of life and not receiving proactive updates anymore.
SUSE CaaS Platform 3.0 docker Affected
SUSE CaaS Platform 4.0 docker Affected
SUSE CaaS Platform 4.0 kubernetes Not affected
SUSE Enterprise Storage 6 docker Affected
SUSE Enterprise Storage 6 golang-github-prometheus-prometheus Affected
SUSE Enterprise Storage 6 kubernetes Not affected
SUSE Enterprise Storage 7 docker Affected
SUSE Enterprise Storage 7 kubernetes1.18 Unsupported
SUSE Enterprise Storage 7.1 docker Affected
SUSE Enterprise Storage 7.1 kubernetes1.18 Unsupported
SUSE Enterprise Storage 7.1 kubernetes1.23 Unsupported
SUSE Enterprise Storage 7.1 kubernetes1.24 Not affected
SUSE Enterprise Storage 7.1 rook Affected
SUSE Linux Enterprise High Performance Computing 15 docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP1 docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP1 kubernetes Not affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS kubernetes Not affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS docker Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kubernetes Not affected
SUSE Linux Enterprise High Performance Computing 15-ESPOS docker Affected
SUSE Linux Enterprise High Performance Computing 15-LTSS docker Affected
SUSE Linux Enterprise Micro 5.0 docker Affected
SUSE Linux Enterprise Module for Containers 12 docker Affected
SUSE Linux Enterprise Module for Containers 15 docker Affected
SUSE Linux Enterprise Module for Containers 15 SP1 docker Affected
SUSE Linux Enterprise Module for Containers 15 SP1 kubernetes Not affected
SUSE Linux Enterprise Module for Package Hub 15 SP4 grafana Affected
SUSE Linux Enterprise Module for Public Cloud 12 kubernetes Not affected
SUSE Linux Enterprise Real Time 15 SP4 cosign Affected
SUSE Linux Enterprise Server 12 docker Affected
SUSE Linux Enterprise Server 12 kubernetes Not affected
SUSE Linux Enterprise Server 12 SP3 docker Affected
SUSE Linux Enterprise Server 12 SP3 kubernetes Not affected
SUSE Linux Enterprise Server 12 SP4 docker Affected
SUSE Linux Enterprise Server 12 SP4 kubernetes Not affected
SUSE Linux Enterprise Server 15 docker Affected
SUSE Linux Enterprise Server 15 SP1 docker Affected
SUSE Linux Enterprise Server 15 SP1 kubernetes Not affected
SUSE Linux Enterprise Server 15 SP1-BCL docker Affected
SUSE Linux Enterprise Server 15 SP1-BCL kubernetes Not affected
SUSE Linux Enterprise Server 15 SP1-LTSS docker Affected
SUSE Linux Enterprise Server 15 SP1-LTSS kubernetes Not affected
SUSE Linux Enterprise Server 15 SP2-BCL docker Affected
SUSE Linux Enterprise Server 15 SP2-BCL kubernetes1.18 Unsupported
SUSE Linux Enterprise Server 15 SP3-BCL docker Affected
SUSE Linux Enterprise Server 15 SP3-BCL kubernetes1.18 Unsupported
SUSE Linux Enterprise Server 15 SP3-BCL kubernetes1.23 Unsupported
SUSE Linux Enterprise Server 15-LTSS docker Affected
SUSE Linux Enterprise Server for SAP Applications 12 docker Affected
SUSE Linux Enterprise Server for SAP Applications 12 kubernetes Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP3 docker Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP3 kubernetes Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4 docker Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4 kubernetes Not affected
SUSE Linux Enterprise Server for SAP Applications 15 docker Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1 docker Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1 kubernetes Not affected
SUSE Manager Proxy 4.0 docker Affected
SUSE Manager Proxy 4.0 kubernetes Not affected
SUSE Manager Proxy 4.1 docker Affected
SUSE Manager Proxy 4.1 kubernetes1.18 Unsupported
SUSE Manager Proxy 4.2 docker Affected
SUSE Manager Proxy 4.2 kubernetes1.18 Unsupported
SUSE Manager Proxy 4.2 kubernetes1.23 Unsupported
SUSE Manager Proxy Module 4.1 golang-github-prometheus-prometheus Affected
SUSE Manager Proxy Module 4.2 golang-github-prometheus-prometheus Affected
SUSE Manager Retail Branch Server 4.0 docker Affected
SUSE Manager Retail Branch Server 4.0 kubernetes Not affected
SUSE Manager Retail Branch Server 4.1 docker Affected
SUSE Manager Retail Branch Server 4.1 kubernetes1.18 Unsupported
SUSE Manager Retail Branch Server 4.2 docker Affected
SUSE Manager Retail Branch Server 4.2 kubernetes1.18 Unsupported
SUSE Manager Retail Branch Server 4.2 kubernetes1.23 Unsupported
SUSE Manager Server 4.0 docker Affected
SUSE Manager Server 4.0 kubernetes Not affected
SUSE Manager Server 4.1 docker Affected
SUSE Manager Server 4.1 kubernetes1.18 Unsupported
SUSE Manager Server 4.2 docker Affected
SUSE Manager Server 4.2 kubernetes1.18 Unsupported
SUSE Manager Server 4.2 kubernetes1.23 Unsupported
SUSE OpenStack Cloud 6 docker Affected
SUSE OpenStack Cloud 6-LTSS docker Affected
openSUSE Leap 15.3 docker Affected
openSUSE Leap 15.3 etcd Affected
openSUSE Leap 15.3 golang-github-prometheus-prometheus Affected
openSUSE Leap 15.3 grafana Affected
openSUSE Leap 15.3 kubernetes1.18 Unsupported
openSUSE Leap 15.4 cosign Affected
openSUSE Leap 15.4 docker Affected
openSUSE Leap 15.4 etcd Affected
openSUSE Leap 15.4 golang-github-prometheus-prometheus Affected
openSUSE Leap 15.4 grafana Affected
openSUSE Leap 15.4 kubernetes1.18 Unsupported
openSUSE Leap 15.4 kubernetes1.24 Not affected
openSUSE Leap 15.4 kubernetes1.25 Not affected
openSUSE Leap 15.4 kubernetes1.26 Not affected
openSUSE Leap 15.4 kubernetes1.27 Not affected
openSUSE Leap 15.4 kubernetes1.28 Not affected
openSUSE Leap Micro 5.2 docker Affected
openSUSE Leap Micro 5.3 docker Affected
openSUSE Leap Micro 5.4 docker Affected
Products at an unknown state of their lifecycle.
SLES15-SP5-CHOST-BYOS-GDC docker Affected
Container Status
ses/7.1/ceph/prometheus-server
ses/7/ceph/prometheus-server
golang-github-prometheus-prometheusAffected
ses/7.1/ceph/grafana
ses/7/ceph/grafana
grafanaAffected
ses/7.1/rook/ceph rookAffected


SUSE Timeline for this CVE

CVE page created: Tue Nov 5 00:01:12 2024
CVE page last modified: Tue Nov 12 15:17:01 2024