SUSE-SU-2018:1162-1: patch&distro=SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2018:1162-1 is a vulnerability in patch&distro=SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 07-05-2018PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for patch This update for patch fixes several issues. These security issues were fixed: - CVE-2018-1000156: patch: Malicious patch files cause ed to execute arbitrary commands (bsc#1088420). - CVE-2014-9637: Prevent DoS by remote attackers (memory consumption and segmentation fault) via a crafted diff file (bsc#914891). - CVE-2016-10713: Prevent out-of-bounds access within pch_write_line() that could have lead to DoS via a crafted input file (bsc#1080918). - CVE-2010-4651: Fixed a directory traversal bug (bsc#662957):
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse5 products
- patch&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 2.5.9-252.22.7.1
- patch&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 2.5.9-252.22.7.1
- patch&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 2.5.9-252.22.7.1
- patch&distro=SUSE Linux Enterprise Server 11 SP4< 2.5.9-252.22.7.1
- patch&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 2.5.9-252.22.7.1
1 vendor · 5 products
References
10 links- bugzilla.suse.com/662957REPORT
- bugzilla.suse.com/914891REPORT