Upstream information
Description
QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
National Vulnerability Database | |
---|---|
Base Score | 7.5 |
Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Partial |
Integrity Impact | Partial |
Availability Impact | Partial |
National Vulnerability Database | |
---|---|
Base Score | 9.8 |
Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Attack Vector | Network |
Attack Complexity | Low |
Privileges Required | None |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | High |
Integrity Impact | High |
Availability Impact | High |
CVSSv3 Version | 3.1 |
SUSE Security Advisories:
- SUSE-SU-2021:2554-1, published Wed Jul 28 19:20:07 UTC 2021
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
HPE Helion OpenStack 8 |
| Patchnames: HPE-Helion-OpenStack-8-2021-2554 |
SUSE OpenStack Cloud 8 |
| Patchnames: SUSE-OpenStack-Cloud-8-2021-2554 |
SUSE OpenStack Cloud Crowbar 8 |
| Patchnames: SUSE-OpenStack-Cloud-Crowbar-8-2021-2554 |
SUSE Timeline for this CVE
CVE page created: Mon Mar 13 09:47:00 2017CVE page last modified: Sat Nov 26 11:23:42 2022