CVE-2024-41110

Upstream information

CVE-2024-41110 at MITRE

Description

Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.

Using a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.

A security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.

Docker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.

docker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.

---

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having critical severity.

CVSS v3 Scores

	SUSE
Base Score	9.9
Vector	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Changed
Confidentiality Impact	High
Integrity Impact	High
Availability Impact	High
CVSSv3 Version	3.1

Note from the SUSE Security Team

This issue is only exploitable if an AuthZ provider is enabled. SUSE does not ship AuthZ providers, so it is unlikely affected in a default installation.

SUSE Bugzilla entry: 1228324 [IN_PROGRESS]

SUSE Security Advisories:

• SUSE-SU-2024:2709-1, published Fri Aug 2 12:30:05 UTC 2024
• SUSE-SU-2024:2801-1, published Wed Aug 7 08:32:26 UTC 2024
• SUSE-SU-2024:2801-2, published Wed Aug 7 12:30:19 UTC 2024
• SUSE-SU-2024:3120-1, published Tue Sep 3 16:30:49 UTC 2024
• TID000021573, published Tue Oct 1 20:53:25 CEST 2024
• openSUSE-SU-2024:14446-1, published Sat Nov 2 18:49:02 2024

List of released packages

Product(s)	Fixed package version(s)	References
Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-GCE-On-Demand	docker >= 25.0.6_ce-98.115.1
Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP4-CHOST-BYOS Image SLES15-SP4-CHOST-BYOS-Aliyun Image SLES15-SP4-CHOST-BYOS-Azure Image SLES15-SP4-CHOST-BYOS-EC2 Image SLES15-SP4-CHOST-BYOS-GCE Image SLES15-SP4-Micro-5-3 Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-3-BYOS-EC2 Image SLES15-SP4-Micro-5-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-EC2 Image SLES15-SP4-Micro-5-4 Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-EC2 Image SLES15-SP4-Micro-5-4-BYOS-GCE Image SLES15-SP4-Micro-5-4-EC2 Image SLES15-SP4-Micro-5-4-GCE Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Manager-Proxy-5-0-BYOS Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0-BYOS Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud	docker >= 25.0.6_ce-150000.207.1
SUSE Enterprise Storage 7.1	buildah >= 1.35.4-150300.8.25.1 docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-fish-completion >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-Storage-7.1-2024-3120
SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5	docker >= 25.0.6_ce-98.115.1	Patchnames: SUSE-SLE-Module-Containers-12-2024-2709
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3120
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	buildah >= 1.35.4-150300.8.25.1 docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-fish-completion >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3120
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-rootless-extras >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3120
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-rootless-extras >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3120
SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-rootless-extras >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Module-Containers-15-SP5-2024-3120
SUSE Linux Enterprise High Performance Computing 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-rootless-extras >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Module-Containers-15-SP6-2024-3120
SUSE Linux Enterprise Micro 5.1	docker >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SUSE-MicroOS-5.1-2024-3120
SUSE Linux Enterprise Micro 5.2	docker >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SUSE-MicroOS-5.2-2024-3120
SUSE Linux Enterprise Micro 5.3	docker >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Micro-5.3-2024-3120
SUSE Linux Enterprise Micro 5.4	docker >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Micro-5.4-2024-3120
SUSE Linux Enterprise Micro 5.5	docker >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Micro-5.5-2024-3120
SUSE Linux Enterprise Micro 6.0	docker >= 25.0.6_ce-1.1	Patchnames: SUSE-SLE-Micro-6.0-64
SUSE Linux Enterprise Server 15 SP2-LTSS	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3120
SUSE Linux Enterprise Server 15 SP3-LTSS	buildah >= 1.35.4-150300.8.25.1 docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-fish-completion >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3120
SUSE Linux Enterprise Server 15 SP4-LTSS	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-rootless-extras >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3120
SUSE Linux Enterprise Server for SAP Applications 15 SP2	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3120
SUSE Linux Enterprise Server for SAP Applications 15 SP3	buildah >= 1.35.4-150300.8.25.1 docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-fish-completion >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3120
SUSE Linux Enterprise Server for SAP Applications 15 SP4	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-rootless-extras >= 25.0.6_ce-150000.207.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3120
openSUSE Leap 15.5	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-fish-completion >= 25.0.6_ce-150000.207.1 docker-rootless-extras >= 25.0.6_ce-150000.207.1 docker-zsh-completion >= 25.0.6_ce-150000.207.1	Patchnames: openSUSE-SLE-15.5-2024-3120
openSUSE Leap 15.6	docker >= 25.0.6_ce-150000.207.1 docker-bash-completion >= 25.0.6_ce-150000.207.1 docker-fish-completion >= 25.0.6_ce-150000.207.1 docker-rootless-extras >= 25.0.6_ce-150000.207.1 docker-zsh-completion >= 25.0.6_ce-150000.207.1	Patchnames: openSUSE-SLE-15.6-2024-3120
openSUSE Leap Micro 5.5	docker >= 25.0.6_ce-150000.207.1	Patchnames: openSUSE-Leap-Micro-5.5-2024-3120
openSUSE Tumbleweed	docker >= 26.1.5_ce-1.1 docker-bash-completion >= 26.1.5_ce-1.1 docker-fish-completion >= 26.1.5_ce-1.1 docker-rootless-extras >= 26.1.5_ce-1.1 docker-stable >= 24.0.9_ce-1.1 docker-stable-bash-completion >= 24.0.9_ce-1.1 docker-stable-buildx >= 0.17.1-1.1 docker-stable-fish-completion >= 24.0.9_ce-1.1 docker-stable-rootless-extras >= 24.0.9_ce-1.1 docker-stable-zsh-completion >= 24.0.9_ce-1.1 docker-zsh-completion >= 26.1.5_ce-1.1 nova >= 3.10.0-1.1 nova-bash-completion >= 3.10.0-1.1 nova-fish-completion >= 3.10.0-1.1 nova-zsh-completion >= 3.10.0-1.1	Patchnames: openSUSE-Tumbleweed-2024-14229 openSUSE-Tumbleweed-2024-14235 openSUSE-Tumbleweed-2024-14446

---

First public cloud image revisions this CVE is fixed in:

• alibaba/sles-15-sp3-chost-byos-v20240912
• alibaba/sles-15-sp4-chost-byos-v20240912
• alibaba/sles-15-sp5-chost-byos-v20240826
• alibaba/sles-15-sp6-chost-byos-v20240807
• amazon/suse-manager-proxy-4-3-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-manager-server-4-3-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-manager-server-4-3-v20240808-hvm-ssd-x86_64-llc
• amazon/suse-manager-server-4-3-v20240808-hvm-ssd-x86_64-ltd
• amazon/suse-sle-hpc-15-sp3-byos-v20240809-hvm-ssd-x86_64
• amazon/suse-sle-hpc-15-sp3-byos-v20240819-hvm-ssd-x86_64
• amazon/suse-sle-hpc-15-sp4-byos-v20240809-hvm-ssd-x86_64
• amazon/suse-sle-hpc-15-sp5-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-sle-micro-5-1-byos-v20240807-hvm-ssd-arm64
• amazon/suse-sle-micro-5-1-byos-v20240807-hvm-ssd-x86_64
• amazon/suse-sle-micro-5-2-byos-v20240807-hvm-ssd-arm64
• amazon/suse-sle-micro-5-2-byos-v20240807-hvm-ssd-x86_64
• amazon/suse-sle-micro-5-3-byos-v20240807-hvm-ssd-arm64
• amazon/suse-sle-micro-5-3-byos-v20240807-hvm-ssd-x86_64
• amazon/suse-sle-micro-5-3-v20240807-hvm-ssd-arm64-llc
• amazon/suse-sle-micro-5-3-v20240807-hvm-ssd-arm64-ltd
• amazon/suse-sle-micro-5-3-v20240807-hvm-ssd-x86_64-llc
• amazon/suse-sle-micro-5-3-v20240807-hvm-ssd-x86_64-ltd
• amazon/suse-sle-micro-5-4-byos-v20240808-hvm-ssd-arm64
• amazon/suse-sle-micro-5-4-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-sle-micro-5-4-v20240808-hvm-ssd-arm64-llc
• amazon/suse-sle-micro-5-4-v20240808-hvm-ssd-arm64-ltd
• amazon/suse-sle-micro-5-4-v20240808-hvm-ssd-x86_64-llc
• amazon/suse-sle-micro-5-4-v20240808-hvm-ssd-x86_64-ltd
• amazon/suse-sle-micro-5-5-byos-v20240808-hvm-ssd-arm64
• amazon/suse-sle-micro-5-5-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-sle-micro-5-5-v20240808-hvm-ssd-arm64-llc
• amazon/suse-sle-micro-5-5-v20240808-hvm-ssd-arm64-ltd
• amazon/suse-sle-micro-5-5-v20240808-hvm-ssd-x86_64-llc
• amazon/suse-sle-micro-5-5-v20240808-hvm-ssd-x86_64-ltd
• amazon/suse-sles-12-sp5-v20240805-ecs-hvm-ssd-x86_64
• amazon/suse-sles-12-sp5-v20240805-hvm-ssd-x86_64
• amazon/suse-sles-15-sp3-byos-v20240809-hvm-ssd-x86_64
• amazon/suse-sles-15-sp3-byos-v20240819-hvm-ssd-arm64
• amazon/suse-sles-15-sp3-chost-byos-v20240807-hvm-ssd-arm64
• amazon/suse-sles-15-sp3-chost-byos-v20240807-hvm-ssd-x86_64
• amazon/suse-sles-15-sp3-chost-byos-v20240912-hvm-ssd-x86_64
• amazon/suse-sles-15-sp3-sapcal-v20240819-hvm-ssd-x86_64
• amazon/suse-sles-15-sp4-byos-v20240809-hvm-ssd-arm64
• amazon/suse-sles-15-sp4-byos-v20240809-hvm-ssd-x86_64
• amazon/suse-sles-15-sp4-chost-byos-v20240809-hvm-ssd-arm64
• amazon/suse-sles-15-sp4-chost-byos-v20240809-hvm-ssd-x86_64
• amazon/suse-sles-15-sp4-hardened-byos-v20240809-hvm-ssd-x86_64
• amazon/suse-sles-15-sp4-sapcal-v20240809-hvm-ssd-x86_64
• amazon/suse-sles-15-sp5-byos-v20240808-hvm-ssd-arm64
• amazon/suse-sles-15-sp5-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-sles-15-sp5-chost-byos-v20240809-hvm-ssd-arm64
• amazon/suse-sles-15-sp5-chost-byos-v20240809-hvm-ssd-x86_64
• amazon/suse-sles-15-sp5-sapcal-v20240808-hvm-ssd-x86_64
• amazon/suse-sles-15-sp5-v20240808-ecs-hvm-ssd-x86_64
• amazon/suse-sles-15-sp5-v20240808-hvm-ssd-arm64
• amazon/suse-sles-15-sp5-v20240808-hvm-ssd-x86_64
• amazon/suse-sles-15-sp6-chost-byos-v20240807-hvm-ssd-arm64
• amazon/suse-sles-15-sp6-chost-byos-v20240807-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp3-byos-v20240809-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp3-v20240809-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp4-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp4-hardened-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp4-v20240809-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp5-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp5-hardened-byos-v20240808-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp5-v20240807-hvm-ssd-x86_64
• google/sle-hpc-15-sp3-byos-v20240809-x86-64
• google/sle-hpc-15-sp4-byos-v20240809-x86-64
• google/sle-hpc-15-sp5-byos-v20240808-x86-64
• google/sle-micro-5-1-byos-v20240807-x86-64
• google/sle-micro-5-2-byos-v20240807-x86-64
• google/sle-micro-5-3-byos-v20240807-arm64
• google/sle-micro-5-3-byos-v20240807-x86-64
• google/sle-micro-5-4-byos-v20240807-arm64
• google/sle-micro-5-4-byos-v20240807-x86-64
• google/sle-micro-5-5-byos-v20240807-arm64
• google/sle-micro-5-5-byos-v20240807-x86-64
• google/sles-12-sp5-v20240805-x86-64
• google/sles-15-sp3-byos-v20240809-x86-64
• google/sles-15-sp3-chost-byos-v20240807-x86-64
• google/sles-15-sp3-sap-byos-v20240809-x86-64
• google/sles-15-sp3-sap-v20240808-x86-64
• google/sles-15-sp3-sapcal-v20240809-x86-64
• google/sles-15-sp4-byos-v20240808-arm64
• google/sles-15-sp4-byos-v20240808-x86-64
• google/sles-15-sp4-chost-byos-v20240809-arm64
• google/sles-15-sp4-chost-byos-v20240809-x86-64
• google/sles-15-sp4-hardened-byos-v20240808-x86-64
• google/sles-15-sp4-sap-byos-v20240808-x86-64
• google/sles-15-sp4-sap-v20240808-x86-64
• google/sles-15-sp4-sapcal-v20240808-x86-64
• google/sles-15-sp5-byos-v20240808-arm64
• google/sles-15-sp5-byos-v20240808-x86-64
• google/sles-15-sp5-chost-byos-v20240809-arm64
• google/sles-15-sp5-chost-byos-v20240809-x86-64
• google/sles-15-sp5-hardened-byos-v20240808-x86-64
• google/sles-15-sp5-sap-byos-v20240808-x86-64
• google/sles-15-sp5-sap-v20240808-x86-64
• google/sles-15-sp5-sapcal-v20240808-x86-64
• google/sles-15-sp5-v20240808-arm64
• google/sles-15-sp5-v20240808-x86-64
• google/sles-15-sp6-chost-byos-v20240807-arm64
• google/sles-15-sp6-chost-byos-v20240807-x86-64
• google/sles-sap-15-sp4-hardened-byos-v20240808-x86-64
• google/sles-sap-15-sp4-hardened-v20240808-x86-64
• google/sles-sap-15-sp5-hardened-byos-v20240808-x86-64
• google/sles-sap-15-sp5-hardened-v20240808-x86-64
• google/suse-manager-proxy-4-3-byos-v20240807-x86-64
• google/suse-manager-server-4-3-byos-v20240807-x86-64
• microsoft/suse-manager-proxy-4-3-byos-v20240807-x86_64
• microsoft/suse-manager-server-4-3-byos-v20240826-x86_64
• microsoft/suse-manager-server-4-3-v20240826-x86_64-llc
• microsoft/suse-manager-server-4-3-v20240826-x86_64-ltd
• microsoft/suse-sle-hpc-15-sp3-byos-v20240809-x86_64
• microsoft/suse-sle-hpc-15-sp4-byos-v20240809-x86_64
• microsoft/suse-sle-hpc-15-sp5-byos-v20240809-x86_64
• microsoft/suse-sle-hpc-15-sp5-v20240809-x86_64
• microsoft/suse-sle-hpc-15-sp6-v20240808-x86_64
• microsoft/suse-sle-micro-5-1-byos-v20240807-x86_64
• microsoft/suse-sle-micro-5-2-byos-v20240807-x86_64
• microsoft/suse-sle-micro-5-3-byos-v20240807-arm64
• microsoft/suse-sle-micro-5-3-byos-v20240807-x86_64
• microsoft/suse-sle-micro-5-4-byos-v20240808-arm64
• microsoft/suse-sle-micro-5-4-byos-v20240808-x86_64
• microsoft/suse-sle-micro-5-5-v20240809-arm64-ltd
• microsoft/suse-sles-12-sp5-basic-v20240805-x86_64
• microsoft/suse-sles-12-sp5-v20240805-x86_64
• microsoft/suse-sles-15-sp3-byos-v20240809-x86_64
• microsoft/suse-sles-15-sp3-chost-byos-v20240807-x86_64
• microsoft/suse-sles-15-sp3-sapcal-v20240809-x86_64
• microsoft/suse-sles-15-sp4-byos-v20240809-arm64
• microsoft/suse-sles-15-sp4-byos-v20240809-x86_64
• microsoft/suse-sles-15-sp4-chost-byos-v20240809-arm64
• microsoft/suse-sles-15-sp4-chost-byos-v20240809-x86_64
• microsoft/suse-sles-15-sp4-hardened-byos-v20240809-x86_64
• microsoft/suse-sles-15-sp4-sapcal-v20240809-x86_64
• microsoft/suse-sles-15-sp5-basic-v20240809-x86_64
• microsoft/suse-sles-15-sp5-byos-v20240809-arm64
• microsoft/suse-sles-15-sp5-byos-v20240809-x86_64
• microsoft/suse-sles-15-sp5-chost-byos-v20240809-arm64
• microsoft/suse-sles-15-sp5-chost-byos-v20240809-x86_64
• microsoft/suse-sles-15-sp5-hardened-byos-v20240809-x86_64
• microsoft/suse-sles-15-sp5-sapcal-v20240809-x86_64
• microsoft/suse-sles-15-sp5-v20240809-arm64
• microsoft/suse-sles-15-sp5-v20240809-x86_64
• microsoft/suse-sles-15-sp6-chost-byos-v20240807-arm64
• microsoft/suse-sles-15-sp6-chost-byos-v20240807-x86_64
• microsoft/suse-sles-sap-15-sp3-byos-v20240809-x86_64
• microsoft/suse-sles-sap-15-sp3-byos-v20240913-x86_64
• microsoft/suse-sles-sap-15-sp3-byos-v20240915-x86_64
• microsoft/suse-sles-sap-15-sp3-byos-v20240916-x86_64
• microsoft/suse-sles-sap-15-sp3-v20240809-x86_64
• microsoft/suse-sles-sap-15-sp3-v20240913-x86_64
• microsoft/suse-sles-sap-15-sp3-v20240915-x86_64
• microsoft/suse-sles-sap-15-sp3-v20240916-x86_64
• microsoft/suse-sles-sap-15-sp4-byos-v20240809-x86_64
• microsoft/suse-sles-sap-15-sp4-v20240809-x86_64
• microsoft/suse-sles-sap-15-sp5-byos-v20240809-x86_64
• microsoft/suse-sles-sap-15-sp5-v20240809-x86_64

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s)	Source package	State
Products under general support and receiving all security fixes.
SLES15-SP5-CHOST-BYOS-Aliyun	docker	Released
SLES15-SP5-CHOST-BYOS-Azure	docker	Released
SLES15-SP5-CHOST-BYOS-EC2	docker	Released
SLES15-SP5-CHOST-BYOS-GCE	docker	Released
SLES15-SP5-CHOST-BYOS-SAP-CCloud	docker	Released
SLES15-SP6-CHOST-BYOS	docker	Released
SLES15-SP6-CHOST-BYOS-Aliyun	docker	Released
SLES15-SP6-CHOST-BYOS-Azure	docker	Released
SLES15-SP6-CHOST-BYOS-EC2	docker	Released
SLES15-SP6-CHOST-BYOS-GCE	docker	Released
SLES15-SP6-CHOST-BYOS-GDC	docker	Released
SLES15-SP6-CHOST-BYOS-SAP-CCloud	docker	Released
SUSE Linux Enterprise High Performance Computing 12	docker	Released
SUSE Linux Enterprise High Performance Computing 15 SP5	docker	Released
SUSE Linux Enterprise High Performance Computing 15 SP6	docker	Released
SUSE Linux Enterprise Micro 5.1	docker	Released
SUSE Linux Enterprise Micro 5.2	docker	Released
SUSE Linux Enterprise Micro 5.3	docker	Released
SUSE Linux Enterprise Micro 5.4	docker	Released
SUSE Linux Enterprise Micro 5.5	docker	Released
SUSE Linux Enterprise Micro 6.0	docker	Released
SUSE Linux Enterprise Micro for Rancher 5.2	docker	Released
SUSE Linux Enterprise Micro for Rancher 5.3	docker	Released
SUSE Linux Enterprise Micro for Rancher 5.4	docker	Released
SUSE Linux Enterprise Module for Containers 15 SP5	docker	Released
SUSE Linux Enterprise Module for Containers 15 SP6	docker	Released
SUSE Linux Enterprise Server 15 SP5	docker	Released
SUSE Linux Enterprise Server 15 SP6	docker	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP5	docker	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP6	docker	Released
SUSE Manager Proxy 4.3	docker	Affected
SUSE Manager Retail Branch Server 4.3	docker	Affected
SUSE Manager Server 4.3	docker	Affected
openSUSE Leap 15.5	docker	Released
openSUSE Leap 15.6	docker	Released
openSUSE Leap Micro 5.5	docker	Released
Products under Long Term Service Pack support and receiving important and critical security fixes.
SLES15-EC2-CHOST-HVM-BYOS	docker	In progress
SLES15-SP1-CHOST-BYOS-Azure	docker	In progress
SLES15-SP1-CHOST-BYOS-EC2	docker	In progress
SLES15-SP1-CHOST-BYOS-GCE	docker	In progress
SLES15-SP2-CHOST-BYOS-Aliyun	docker	In progress
SLES15-SP2-CHOST-BYOS-Azure	docker	In progress
SLES15-SP2-CHOST-BYOS-EC2	docker	In progress
SLES15-SP2-CHOST-BYOS-GCE	docker	In progress
SLES15-SP3-CHOST-BYOS-Aliyun	docker	Released
SLES15-SP3-CHOST-BYOS-Azure	docker	Released
SLES15-SP3-CHOST-BYOS-EC2	docker	Released
SLES15-SP3-CHOST-BYOS-GCE	docker	Released
SLES15-SP3-CHOST-BYOS-SAP-CCloud	docker	In progress
SLES15-SP4-CHOST-BYOS	docker	Released
SLES15-SP4-CHOST-BYOS-Aliyun	docker	Released
SLES15-SP4-CHOST-BYOS-Azure	docker	Released
SLES15-SP4-CHOST-BYOS-EC2	docker	Released
SLES15-SP4-CHOST-BYOS-GCE	docker	Released
SLES15-SP4-CHOST-BYOS-SAP-CCloud	docker	In progress
SUSE Linux Enterprise High Performance Computing 15 SP2	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	docker	Released
SUSE Linux Enterprise High Performance Computing 15 SP3	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	buildah	Released
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	docker	Released
SUSE Linux Enterprise High Performance Computing 15 SP4	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	docker	Released
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	docker	Released
SUSE Linux Enterprise Module for Containers 15 SP2	docker	Affected
SUSE Linux Enterprise Module for Containers 15 SP3	docker	Affected
SUSE Linux Enterprise Module for Containers 15 SP4	docker	Affected
SUSE Linux Enterprise Server 12 SP5	docker	Released
SUSE Linux Enterprise Server 15 SP2	docker	Affected
SUSE Linux Enterprise Server 15 SP2-LTSS	docker	Released
SUSE Linux Enterprise Server 15 SP3	docker	Affected
SUSE Linux Enterprise Server 15 SP3-LTSS	buildah	Released
SUSE Linux Enterprise Server 15 SP3-LTSS	docker	Released
SUSE Linux Enterprise Server 15 SP4	docker	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	docker	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP5	docker	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP2	docker	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP3	buildah	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP3	docker	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP4	docker	Released
Products past their end of life and not receiving proactive updates anymore.
SUSE CaaS Platform 3.0	docker	Affected
SUSE CaaS Platform 4.0	docker	Affected
SUSE Enterprise Storage 6	docker	Affected
SUSE Enterprise Storage 7	docker	Affected
SUSE Enterprise Storage 7.1	buildah	Released
SUSE Enterprise Storage 7.1	docker	Released
SUSE Linux Enterprise High Performance Computing 15	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	docker	Affected
SUSE Linux Enterprise High Performance Computing 15-ESPOS	docker	Affected
SUSE Linux Enterprise High Performance Computing 15-LTSS	docker	Affected
SUSE Linux Enterprise Micro 5.0	docker	Affected
SUSE Linux Enterprise Module for Containers 12	docker	Released
SUSE Linux Enterprise Module for Containers 15	docker	Affected
SUSE Linux Enterprise Module for Containers 15 SP1	docker	Affected
SUSE Linux Enterprise Server 12	docker	Released
SUSE Linux Enterprise Server 12 SP3	docker	Released
SUSE Linux Enterprise Server 12 SP4	docker	Released
SUSE Linux Enterprise Server 15	docker	Affected
SUSE Linux Enterprise Server 15 SP1	docker	Affected
SUSE Linux Enterprise Server 15 SP1-BCL	docker	Affected
SUSE Linux Enterprise Server 15 SP1-LTSS	docker	Affected
SUSE Linux Enterprise Server 15 SP2-BCL	docker	Affected
SUSE Linux Enterprise Server 15 SP3-BCL	docker	Affected
SUSE Linux Enterprise Server 15-LTSS	docker	Affected
SUSE Linux Enterprise Server for SAP Applications 12	docker	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	docker	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP4	docker	Released
SUSE Linux Enterprise Server for SAP Applications 15	docker	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1	docker	Affected
SUSE Manager Proxy 4.0	docker	Affected
SUSE Manager Proxy 4.1	docker	Affected
SUSE Manager Proxy 4.2	docker	Affected
SUSE Manager Retail Branch Server 4.0	docker	Affected
SUSE Manager Retail Branch Server 4.1	docker	Affected
SUSE Manager Retail Branch Server 4.2	docker	Affected
SUSE Manager Server 4.0	docker	Affected
SUSE Manager Server 4.1	docker	Affected
SUSE Manager Server 4.2	docker	Affected
SUSE OpenStack Cloud 6	docker	Affected
SUSE OpenStack Cloud 6-LTSS	docker	Affected
openSUSE Leap 15.3	docker	Affected
openSUSE Leap 15.4	docker	Affected
openSUSE Leap Micro 5.2	docker	Affected
openSUSE Leap Micro 5.3	docker	Affected
openSUSE Leap Micro 5.4	docker	Affected
Products at an unknown state of their lifecycle.
SLES15-SP5-CHOST-BYOS-GDC	docker	Released
Harvester master
rancher/rke2-runtime:v1.29.9-rke2r1	bin/crictl	Affected
rancher/rancher:v2.9.2	opt/drivers/management-state/bin/docker-machine-driver-harvester opt/drivers/management-state/bin/docker-machine-driver-linode usr/share/rancher/ui/assets/wins.exe	Affected
rancher/shell:v0.2.1	usr/local/bin/helm usr/local/bin/k9s	Affected
rancher/shell:v0.1.24 rancher/shell:v0.1.26	usr/local/bin/k9s	Affected
Harvester v1.2-head
rancher/rancher:v2.8.2	opt/drivers/management-state/bin/docker-machine-driver-harvester opt/drivers/management-state/bin/docker-machine-driver-linode usr/share/rancher/ui/assets/docker-machine-driver-harvester usr/share/rancher/ui/assets/docker-machine-driver-linode usr/share/rancher/ui/assets/wins.exe	Affected
rancher/system-agent:v0.3.4-suc	opt/rancher-system-agent-suc/rancher-system-agent	Affected
rancher/fleet-agent:v0.9.0	usr/bin/fleet usr/bin/fleetagent	Affected
rancher/fleet:v0.9.0	usr/bin/fleetcontroller	Affected
rancher/harvester-upgrade:v1.2-head	usr/bin/wharfie	Affected
rancher/shell:v0.1.22	usr/local/bin/k9s	Affected
Harvester v1.2.2
rancher/rancher:v2.8.2	opt/drivers/management-state/bin/docker-machine-driver-harvester opt/drivers/management-state/bin/docker-machine-driver-linode usr/share/rancher/ui/assets/docker-machine-driver-harvester usr/share/rancher/ui/assets/docker-machine-driver-linode usr/share/rancher/ui/assets/wins.exe	Affected
rancher/system-agent:v0.3.4-suc	opt/rancher-system-agent-suc/rancher-system-agent	Affected
rancher/fleet-agent:v0.9.0	usr/bin/fleet usr/bin/fleetagent	Affected
rancher/fleet:v0.9.0	usr/bin/fleetcontroller	Affected
rancher/harvester-upgrade:v1.2.2	usr/bin/wharfie	Affected
rancher/shell:v0.1.22	usr/local/bin/k9s	Affected
Harvester v1.3-head
rancher/rke2-runtime:v1.28.12-rke2r1	bin/containerd bin/crictl	Affected
rancher/rancher:v2.8.5	opt/drivers/management-state/bin/docker-machine-driver-harvester opt/drivers/management-state/bin/docker-machine-driver-linode usr/share/rancher/ui/assets/docker-machine-driver-harvester usr/share/rancher/ui/assets/docker-machine-driver-linode usr/share/rancher/ui/assets/wins.exe	Affected
rancher/system-agent:v0.3.6-suc	opt/rancher-system-agent-suc/rancher-system-agent	Affected
rancher/fleet-agent:v0.9.5	usr/bin/fleet usr/bin/fleetagent	Affected
rancher/fleet:v0.9.5	usr/bin/fleetcontroller	Affected
rancher/shell:v0.1.26	usr/local/bin/k9s	Affected
Harvester v1.3.2
rancher/rke2-runtime:v1.28.12-rke2r1	bin/containerd bin/crictl	Affected
rancher/rancher:v2.8.5	opt/drivers/management-state/bin/docker-machine-driver-harvester opt/drivers/management-state/bin/docker-machine-driver-linode usr/share/rancher/ui/assets/docker-machine-driver-harvester usr/share/rancher/ui/assets/docker-machine-driver-linode usr/share/rancher/ui/assets/wins.exe	Affected
rancher/system-agent:v0.3.6-suc	opt/rancher-system-agent-suc/rancher-system-agent	Affected
rancher/fleet-agent:v0.9.5	usr/bin/fleet usr/bin/fleetagent	Affected
rancher/fleet:v0.9.5	usr/bin/fleetcontroller	Affected
rancher/harvester-upgrade:v1.3.2	usr/bin/wharfie	Affected
rancher/shell:v0.1.26	usr/local/bin/k9s	Affected
Rancher v2.8-head
rancher/rancher:v2.8-head	opt/drivers/management-state/bin/docker-machine-driver-harvester opt/drivers/management-state/bin/docker-machine-driver-linode usr/share/rancher/ui/assets/docker-machine-driver-harvester usr/share/rancher/ui/assets/docker-machine-driver-linode usr/share/rancher/ui/assets/wins.exe	Affected
rancher/rke-tools:v0.1.100 rancher/rke-tools:v0.1.105 rancher/rke-tools:v0.1.96	opt/rke-tools/bin/cri-dockerd	Affected
rancher/shell:v0.1.19 rancher/shell:v0.2.1	usr/local/bin/helm usr/local/bin/k9s	Affected
rancher/shell:v0.1.26	usr/local/bin/k9s	Affected
rancher/hyperkube:v1.27.16-rancher1 rancher/hyperkube:v1.28.15-rancher1	usr/local/bin/kubelet	Affected
Rancher v2.8.9
rancher/rke2-runtime:v1.28.14-rke2r1	bin/crictl	Affected
rancher/rke-tools:v0.1.100 rancher/rke-tools:v0.1.103 rancher/rke-tools:v0.1.96	opt/rke-tools/bin/cri-dockerd	Affected
rancher/shell:v0.1.19 rancher/shell:v0.2.1	usr/local/bin/helm usr/local/bin/k9s	Affected
rancher/shell:v0.1.26	usr/local/bin/k9s	Affected
rancher/hyperkube:v1.27.16-rancher1 rancher/hyperkube:v1.28.14-rancher1	usr/local/bin/kubelet	Affected
Rancher v2.9-head
rancher/rancher:v2.9-head	opt/drivers/management-state/bin/docker-machine-driver-linode	Affected
rancher/rke-tools:v0.1.100 rancher/rke-tools:v0.1.105	opt/rke-tools/bin/cri-dockerd	Affected
rancher/shell:v0.2.1 rancher/shell:v0.2.2	usr/local/bin/helm usr/local/bin/k9s	Affected
rancher/hyperkube:v1.27.16-rancher1 rancher/hyperkube:v1.28.15-rancher1 rancher/hyperkube:v1.29.10-rancher1 rancher/hyperkube:v1.30.6-rancher1	usr/local/bin/kubelet	Affected
Rancher v2.9.3
rancher/rke2-runtime:v1.28.14-rke2r1 rancher/rke2-runtime:v1.29.9-rke2r1	bin/crictl	Affected
rancher/rancher:v2.9.3	opt/drivers/management-state/bin/docker-machine-driver-linode	Affected
rancher/rke-tools:v0.1.100 rancher/rke-tools:v0.1.103	opt/rke-tools/bin/cri-dockerd	Affected
rancher/shell:v0.1.19 rancher/shell:v0.2.1 rancher/shell:v0.2.2	usr/local/bin/helm usr/local/bin/k9s	Affected
rancher/hyperkube:v1.27.16-rancher1 rancher/hyperkube:v1.28.14-rancher1 rancher/hyperkube:v1.29.9-rancher1 rancher/hyperkube:v1.30.5-rancher1	usr/local/bin/kubelet	Affected

---

SUSE Timeline for this CVE

CVE page created: Wed Jul 24 20:00:58 2024
CVE page last modified: Wed Nov 6 14:04:27 2024