SUSE-SU-2017:2923-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2017:2923-1

Upstream

Related

Published

2017-11-02T12:09:35Z

Modified

2026-02-04T04:05:12Z

Summary

Security update for SuSEfirewall2

Details

This update for SuSEfirewall2 fixes the following issues:

CVE-2017-15638: Fixed a security issue with too open implicit portmapper rules (bsc#1064127): A source net restriction for rpc services was not taken into account for the implicitly added rules for port 111, making the portmap service accessible to everyone in the affected zone.

References

Affected packages

Name: SuSEfirewall2
Purl: pkg:rpm/suse/SuSEfirewall2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.6_SVNr208-2.18.3.1

{
    "binaries": [
        {
            "SuSEfirewall2": "3.6_SVNr208-2.18.3.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:2923-1.json"

Name: SuSEfirewall2
Purl: pkg:rpm/suse/SuSEfirewall2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.6_SVNr208-2.18.3.1

{
    "binaries": [
        {
            "SuSEfirewall2": "3.6_SVNr208-2.18.3.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:2923-1.json"