GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2026:20893-1

Vulnerability from csaf_opensuse - Published: 2026-06-02 17:46 - Updated: 2026-09-17 17:34
Summary
Security update for cloudflared
Severity
Important
Notes
Title of the patch: Security update for cloudflared
Description of the patch: This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.5.2 * Add more information to proxy-dns removal message * Update tail command to use /management/logs endpoint * Add cloudflared management token command * Fix bugs * Update golang.org/x/net to 0.55.0 (boo#1266794, boo#1265920, CVE-2026-39821 CVE-2026-33814) - Update version to 2026.2.0 * Fix bugs - Update version to 2025.11.1 * bump coredns to solve CVE * add vulncheck to cloudflared * Remove references to cloudflare-go * Add logging format as JSON * Centralize UDP origin proxy dialing as ingress service * Add virtual DNS service * Add OriginDialerService to include TCP * Add --dns-resolver-addrs flag * Remove P256Kyber768Draft00PQKex curve from nonFips curve preferences * Bump go-boring from 1.24.2 to 1.24.4 * Add metrics for virtual DNS origin * set proper url and hostname for cloudflared tail command * Add support for login interstitial auto closure * update fed callback url for login helper * Correct QUIC connection management for datagram handlers * Set endpoint in tunnel credentials when generating locally managed tunnel with a Fed token * Migrate cloudflared-ci pipelines to Gitlab CI * Add support for FedRAMP in originRequest Access config * Add buffers for UDP and ICMP datagrams in datagram v3 * Add write deadline for UDP origin writes * Improve metrics for datagram v3 * Force usage of go-boring 1.24 * Fix import of GPG keys when two keys are provided * Fix parameter order when uploading RPM .repo file to R2 * Add new datagram v3 feature flag * Bump datagram v3 write channel capacity * Fix upload of RPM repo file during double signing * Fix the cloudflared binary path used in the component test * Fix typo causing r2-release-next deployment to fail * Update from go1.24.6 to go1.24.9 * Fix systemd service installation hanging * Add cf-proxy-* to control response headers * Add pipelines for linux packaging * Prefix gitlab steps with operating system * Fix docker hub push step * Fix CVE-2025-58181 boo#1253918 * Fix CVE-2025-22869 boo#1239422 - Update version to 2025.6.0 * Remove dynamic reloading of features for datagram v3 * Add metric for unsupported RPC commands for datagram v3 * Add dynamic loading of features to connections via ConnectionOptionsSnapshot * Use is_default_network instead of is_default to create vnet's * Update go to 1.24 - Update version to 2025.4.2 * emit explicit errors for the service command on unsupported OSes * Fix some issues - Update version to 2024.12.1 * TUN-8748: Migrated datagram V3 flows to use migrated context * TUN-8737: update metrics server port selection * TUN-8731: Implement diag/system endpoint * TUN-8728: implement diag/tunnel endpoint * TUN-8730: implement diag/configuration * TUN-8735: add managed/local log collection * TUN-8733: add log collection for docker * TUN-8734: add log collection for kubernetes * TUN-8640: Refactor ICMPRouter to support new ICMPResponders * TUN-8729: implement network collection for diagnostic procedure * TUN-8727: implement metrics, runtime, system, and tunnelstate in diagnostic http client * TUN-8726: implement compression routine to be used in diagnostic procedure * TUN-8732: implement port selection algorithm * TUN-8762: fix argument order when invoking tracert and modify network info output parsing * TUN-8769: fix k8s log collector arguments * TUN-8727: extend client to include function to get cli configuration and tunnel configuration * TUN-8725: implement diagnostic procedure * TUN-8767: include raw output from network collector in diagnostic zip file * TUN-8770: add cli configuration and tunnel configuration to diagnostic zipfile * TUN-8768: add job report to diagnostic zipfile * TUN-8775: Make sure the session Close can only be called once * TUN-8781: Add Trixie, drop Buster. Default to Bookworm * TUN-8640: Add ICMP support for datagram V3 * TUN-8789: make python package installation consistent * TUN-8795: update createrepo to createrepo_c to fix the release_pkgs.py script - fix CVE-2024-45337 and boo#1234582 - Update version to 2024.11.1 * Add cloudflared tunnel health command * PPIP-2310: Update quick tunnel disclaimer * TUN-8621: Prevent QUIC connection from closing before grace period after unregistering * TUN-8484: Print response when QuickTunnel can't be unmarshalled * TUN-8592: Use metadata from the edge to determine if request body is empty for QUIC transport * TUN-8621: Fix cloudflared version in change notes to account for release date * TUN-8638: Add datagram v3 serializers and deserializers * TUN-8685: Bump coredns dependency * TUN-8688: Correct UDP bind for IPv6 edge connectivity on macOS * TUN-8694: Fix github release script * TUN-8694: Rework release script * TUN-8661: Refactor connection methods to support future different datagram muxing methods * TUN-8692: remove dashes from session id * TUN-8708: Bump python min version to 3.10 * TUN-8667: Add datagram v3 session manager * TUN-8553: Bump go to 1.22.5 and go-boring 1.22.5-1 * TUN-8700: Add datagram v3 muxer * TUN-8646: Allow experimental feature support for datagram v3 * TUN-8641: Expose methods to simplify V3 Datagram parsing on the edge * VULN-66059: remove ssh server tests * TUN-8709: Add session migration for datagram v3 * TUN-8701: Add metrics and adjust logs for datagram v3 * add: new go-fuzz targets * TUN-8701: Simplify flow registration logs for datagram v3
Patchnames: openSUSE-Leap-16.0-packagehub-295
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64
Vendor Fix
Threats
Impact important
Affected products
Recommended 4 products, the same list as for CVE-2024-45337
Threats
Impact important
Affected products
Recommended 4 products, the same list as for CVE-2024-45337
Threats
Impact moderate
Affected products
Recommended 4 products, the same list as for CVE-2024-45337
Threats
Impact important
Affected products
Recommended 4 products, the same list as for CVE-2024-45337
Threats
Impact important

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for cloudflared",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for cloudflared fixes the following issues:\n\nChanges in cloudflared:\n\n- Update version to 2026.5.2\n  * Add more information to proxy-dns removal message\n  * Update tail command to use /management/logs endpoint\n  * Add cloudflared management token command\n  * Fix bugs\n  * Update golang.org/x/net to 0.55.0 (boo#1266794, boo#1265920, CVE-2026-39821\n    CVE-2026-33814)\n\n- Update version to 2026.2.0\n  * Fix bugs\n\n- Update version to 2025.11.1\n  * bump coredns to solve CVE\n  * add vulncheck to cloudflared\n  * Remove references to cloudflare-go\n  * Add logging format as JSON\n  * Centralize UDP origin proxy dialing as ingress service\n  * Add virtual DNS service\n  * Add OriginDialerService to include TCP\n  * Add --dns-resolver-addrs flag\n  * Remove P256Kyber768Draft00PQKex curve from nonFips curve preferences\n  * Bump go-boring from 1.24.2 to 1.24.4\n  * Add metrics for virtual DNS origin\n  * set proper url and hostname for cloudflared tail command\n  * Add support for login interstitial auto closure\n  * update fed callback url for login helper\n  * Correct QUIC connection management for datagram handlers\n  * Set endpoint in tunnel credentials when generating locally managed tunnel\n    with a Fed token\n  * Migrate cloudflared-ci pipelines to Gitlab CI\n  * Add support for FedRAMP in originRequest Access config\n  * Add buffers for UDP and ICMP datagrams in datagram v3\n  * Add write deadline for UDP origin writes\n  * Improve metrics for datagram v3\n  * Force usage of go-boring 1.24\n  * Fix import of GPG keys when two keys are provided\n  * Fix parameter order when uploading RPM .repo file to R2\n  * Add new datagram v3 feature flag\n  * Bump datagram v3 write channel capacity\n  * Fix upload of RPM repo file during double signing\n  * Fix the cloudflared binary path used in the component test\n  * Fix typo causing r2-release-next deployment to fail\n  * Update from go1.24.6 to go1.24.9\n  * Fix systemd service installation hanging\n  * Add cf-proxy-* to control response headers\n  * Add pipelines for linux packaging\n  * Prefix gitlab steps with operating system\n  * Fix docker hub push step\n  * Fix CVE-2025-58181 boo#1253918\n  * Fix CVE-2025-22869 boo#1239422\n\n- Update version to 2025.6.0\n  * Remove dynamic reloading of features for datagram v3\n  * Add metric for unsupported RPC commands for datagram v3\n  * Add dynamic loading of features to connections via ConnectionOptionsSnapshot\n  * Use is_default_network instead of is_default to create vnet\u0027s\n  * Update go to 1.24\n\n- Update version to 2025.4.2\n  * emit explicit errors for the service command on unsupported OSes\n  * Fix some issues\n\n- Update version to 2024.12.1\n  * TUN-8748: Migrated datagram V3 flows to use migrated context\n  * TUN-8737: update metrics server port selection\n  * TUN-8731: Implement diag/system endpoint\n  * TUN-8728: implement diag/tunnel endpoint\n  * TUN-8730: implement diag/configuration\n  * TUN-8735: add managed/local log collection\n  * TUN-8733: add log collection for docker\n  * TUN-8734: add log collection for kubernetes\n  * TUN-8640: Refactor ICMPRouter to support new ICMPResponders\n  * TUN-8729: implement network collection for diagnostic procedure\n  * TUN-8727: implement metrics, runtime, system, and tunnelstate in diagnostic\n    http client\n  * TUN-8726: implement compression routine to be used in diagnostic procedure\n  * TUN-8732: implement port selection algorithm\n  * TUN-8762: fix argument order when invoking tracert and modify network info\n    output parsing\n  * TUN-8769: fix k8s log collector arguments\n  * TUN-8727: extend client to include function to get cli configuration\n    and tunnel configuration\n  * TUN-8725: implement diagnostic procedure\n  * TUN-8767: include raw output from network collector in diagnostic zip file\n  * TUN-8770: add cli configuration and tunnel configuration to diagnostic zipfile\n  * TUN-8768: add job report to diagnostic zipfile\n  * TUN-8775: Make sure the session Close can only be called once\n  * TUN-8781: Add Trixie, drop Buster. Default to Bookworm\n  * TUN-8640: Add ICMP support for datagram V3\n  * TUN-8789: make python package installation consistent\n  * TUN-8795: update createrepo to createrepo_c to fix the release_pkgs.py\n    script\n- fix CVE-2024-45337 and boo#1234582\n\n- Update version to 2024.11.1\n  * Add cloudflared tunnel health command\n  * PPIP-2310: Update quick tunnel disclaimer\n  * TUN-8621: Prevent QUIC connection from closing before grace period\n    after unregistering\n  * TUN-8484: Print response when QuickTunnel can\u0027t be unmarshalled\n  * TUN-8592: Use metadata from the edge to determine if request body is\n    empty for QUIC transport\n  * TUN-8621: Fix cloudflared version in change notes to account for\n    release date\n  * TUN-8638: Add datagram v3 serializers and deserializers\n  * TUN-8685: Bump coredns dependency\n  * TUN-8688: Correct UDP bind for IPv6 edge connectivity on macOS\n  * TUN-8694: Fix github release script\n  * TUN-8694: Rework release script\n  * TUN-8661: Refactor connection methods to support future different\n    datagram muxing methods\n  * TUN-8692: remove dashes from session id\n  * TUN-8708: Bump python min version to 3.10\n  * TUN-8667: Add datagram v3 session manager\n  * TUN-8553: Bump go to 1.22.5 and go-boring 1.22.5-1\n  * TUN-8700: Add datagram v3 muxer\n  * TUN-8646: Allow experimental feature support for datagram v3\n  * TUN-8641: Expose methods to simplify V3 Datagram parsing on the edge\n  * VULN-66059: remove ssh server tests\n  * TUN-8709: Add session migration for datagram v3\n  * TUN-8701: Add metrics and adjust logs for datagram v3\n  * add: new go-fuzz targets\n  * TUN-8701: Simplify flow registration logs for datagram v3\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-295",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20893-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1234582",
        "url": "https://bugzilla.suse.com/1234582"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1239422",
        "url": "https://bugzilla.suse.com/1239422"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253918",
        "url": "https://bugzilla.suse.com/1253918"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265920",
        "url": "https://bugzilla.suse.com/1265920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266794",
        "url": "https://bugzilla.suse.com/1266794"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-45337 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-45337/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-22869 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-22869/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-58181 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-58181/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33814 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33814/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-39821 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-39821/"
      }
    ],
    "title": "Security update for cloudflared",
    "tracking": {
      "current_release_date": "2026-09-17T17:34:11Z",
      "generator": {
        "date": "2026-06-02T17:46:55Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:20893-1",
      "initial_release_date": "2026-06-02T17:46:55Z",
      "revision_history": [
        {
          "date": "2026-06-02T17:46:55Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:36:40Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:39:26Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T17:34:11Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cloudflared-0:2026.5.2-bp160.1.1.aarch64",
                "product": {
                  "name": "cloudflared-0:2026.5.2-bp160.1.1.aarch64",
                  "product_id": "cloudflared-0:2026.5.2-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/cloudflared@2026.5.2-bp160.1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
                "product": {
                  "name": "cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
                  "product_id": "cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/cloudflared@2026.5.2-bp160.1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cloudflared-0:2026.5.2-bp160.1.1.s390x",
                "product": {
                  "name": "cloudflared-0:2026.5.2-bp160.1.1.s390x",
                  "product_id": "cloudflared-0:2026.5.2-bp160.1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/cloudflared@2026.5.2-bp160.1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cloudflared-0:2026.5.2-bp160.1.1.x86_64",
                "product": {
                  "name": "cloudflared-0:2026.5.2-bp160.1.1.x86_64",
                  "product_id": "cloudflared-0:2026.5.2-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/cloudflared@2026.5.2-bp160.1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cloudflared-0:2026.5.2-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64"
        },
        "product_reference": "cloudflared-0:2026.5.2-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cloudflared-0:2026.5.2-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le"
        },
        "product_reference": "cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cloudflared-0:2026.5.2-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x"
        },
        "product_reference": "cloudflared-0:2026.5.2-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cloudflared-0:2026.5.2-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
        },
        "product_reference": "cloudflared-0:2026.5.2-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-45337",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-45337"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that \"A call to this function does not guarantee that the key offered is in fact used to authenticate.\" Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions. For example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key. Since this API is widely misused, as a partial mitigation golang.org/x/cry...@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth. Users should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-45337",
          "url": "https://www.suse.com/security/cve/CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1234482 for CVE-2024-45337",
          "url": "https://bugzilla.suse.com/1234482"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-02T17:46:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-45337"
    },
    {
      "cve": "CVE-2025-22869",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-22869"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-22869",
          "url": "https://www.suse.com/security/cve/CVE-2025-22869"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1239322 for CVE-2025-22869",
          "url": "https://bugzilla.suse.com/1239322"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-02T17:46:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-22869"
    },
    {
      "cve": "CVE-2025-58181",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-58181"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-58181",
          "url": "https://www.suse.com/security/cve/CVE-2025-58181"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253784 for CVE-2025-58181",
          "url": "https://bugzilla.suse.com/1253784"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-02T17:46:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-58181"
    },
    {
      "cve": "CVE-2026-33814",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33814"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33814",
          "url": "https://www.suse.com/security/cve/CVE-2026-33814"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264506 for CVE-2026-33814",
          "url": "https://bugzilla.suse.com/1264506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268758 for CVE-2026-33814",
          "url": "https://bugzilla.suse.com/1268758"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-02T17:46:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33814"
    },
    {
      "cve": "CVE-2026-39821",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-39821"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-39821",
          "url": "https://www.suse.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266474 for CVE-2026-39821",
          "url": "https://bugzilla.suse.com/1266474"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:cloudflared-0:2026.5.2-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-02T17:46:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-39821"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…