Vulnerability-Lookup

SUSE-SU-2022:4351-1

Vulnerability from csaf_suse - Published: 2022-12-07 16:38 - Updated: 2026-09-20 14:48

Summary

Security update for osc

Severity

Important

Notes

Title of the patch: Security update for osc

Description of the patch: This update for osc fixes the following issues: osc was updated to version 0.182.0 (bsc#1154972, bsc#1144211, bsc#1142662, bsc#1140697, bsc#1138165): - Added MFA support (jsc#OBS-203). - CVE-2019-3681: Fixed vulnerability where osc stored downloaded RPMs in network controlled paths (bsc#1122675). - CVE-2019-3685: Fixed broken TLS certificate handling (bsc#1142518). Bugfixes: - Removed use of chardet to guess encoding. Utf-8 or latin-1 is now assumed, which will speed up decoding (bsc#1173926). - Added helper method _html_escape to enable python3.8 and python2.* compatibility (bsc#1166537). - Added MR creation to honor orev (bsc#1160446). - Fixed local build outside of the working copy of a package (bsc#1136584). - Don't enforce password reuse (bsc#1156501). - osc vc --file=foo bar.changes now writes the content from foo into bar.changes instead of creating a new file (bsc#1155953). - Fixed decoding on osc lbl (bsc#1137477). - Simplified and fixed osc meta -e (bsc#1138977). - osc lbl now works with non utf8 encoding (bsc#1129889). - Added full python3 compatibility (bsc#1125243, bsc#1131512, bsc#1129757). - Fixed slowdown of rbl with readline(bufsize) function (bsc#1127932). - Fixed osc build -p dir TypeError (bsc#1126055). - Fixed osc buildinfo -p TypeError (bsc#1126058). - Added new options --unexpand and --meta to diff command (bsc#1089025). - Fixed Requires to python-base which does not contain ssl.py (bsc#1097996).

Patchnames: SUSE-2022-4351,SUSE-SLE-SDK-12-SP5-2022-4351

CVE-2019-3681

4.2 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected products

Recommended 3 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:osc-0:0.182.0-15.12.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:osc-0:0.182.0-15.12.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:osc-0:0.182.0-15.12.1.noarch	—	Vendor Fix

Threats

Impact moderate

CVE-2019-3685

7.4 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 3 products, the same list as for CVE-2019-3681

Threats

Impact important

References

35 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1089025	self
https://bugzilla.suse.com/1097996	self
https://bugzilla.suse.com/1122675	self
https://bugzilla.suse.com/1125243	self
https://bugzilla.suse.com/1126055	self
https://bugzilla.suse.com/1126058	self
https://bugzilla.suse.com/1127932	self
https://bugzilla.suse.com/1129757	self
https://bugzilla.suse.com/1129889	self
https://bugzilla.suse.com/1131512	self
https://bugzilla.suse.com/1136584	self
https://bugzilla.suse.com/1137477	self
https://bugzilla.suse.com/1138165	self
https://bugzilla.suse.com/1138977	self
https://bugzilla.suse.com/1140697	self
https://bugzilla.suse.com/1142518	self
https://bugzilla.suse.com/1142662	self
https://bugzilla.suse.com/1144211	self
https://bugzilla.suse.com/1154972	self
https://bugzilla.suse.com/1155953	self
https://bugzilla.suse.com/1156501	self
https://bugzilla.suse.com/1160446	self
https://bugzilla.suse.com/1166537	self
https://bugzilla.suse.com/1173926	self
https://www.suse.com/security/cve/CVE-2019-3681/	self
https://www.suse.com/security/cve/CVE-2019-3685/	self
https://www.suse.com/security/cve/CVE-2019-3681	external
https://bugzilla.suse.com/1122675	external
https://www.suse.com/security/cve/CVE-2019-3685	external
https://bugzilla.suse.com/1142518	external
https://bugzilla.suse.com/1142662	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for osc",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for osc fixes the following issues:\n\n  osc was updated to version 0.182.0 (bsc#1154972, bsc#1144211, bsc#1142662, bsc#1140697, bsc#1138165):\n\n  - Added MFA support (jsc#OBS-203).\n  - CVE-2019-3681: Fixed vulnerability where osc stored downloaded RPMs in network controlled paths (bsc#1122675).\n  - CVE-2019-3685: Fixed broken TLS certificate handling (bsc#1142518). \n\n  Bugfixes:\n  - Removed use of chardet to guess encoding. Utf-8 or latin-1 is now assumed, which will speed up decoding (bsc#1173926).\n  - Added helper method _html_escape to enable python3.8 and python2.* compatibility (bsc#1166537).\n  - Added MR creation to honor orev (bsc#1160446).\n  - Fixed local build outside of the working copy of a package (bsc#1136584).\n  - Don\u0027t enforce password reuse (bsc#1156501).\n  - osc vc --file=foo bar.changes now writes the content from foo into bar.changes instead of creating a new file (bsc#1155953).\n  - Fixed decoding on osc lbl (bsc#1137477).\n  - Simplified and fixed osc meta -e (bsc#1138977).\n  - osc lbl now works with non utf8 encoding (bsc#1129889).\n  - Added full python3 compatibility (bsc#1125243, bsc#1131512, bsc#1129757).\n  - Fixed slowdown of rbl with readline(bufsize) function (bsc#1127932).\n  - Fixed osc build -p dir TypeError (bsc#1126055).\n  - Fixed osc buildinfo -p TypeError (bsc#1126058).\n  - Added new options --unexpand and --meta to diff command (bsc#1089025).\n  - Fixed Requires to python-base which does not contain ssl.py (bsc#1097996).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2022-4351,SUSE-SLE-SDK-12-SP5-2022-4351",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_4351-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2022:4351-1",
        "url": "https://www.suse.com/support/update/announcement/2022/suse-su-20224351-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2022:4351-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013202.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1089025",
        "url": "https://bugzilla.suse.com/1089025"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1097996",
        "url": "https://bugzilla.suse.com/1097996"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1122675",
        "url": "https://bugzilla.suse.com/1122675"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1125243",
        "url": "https://bugzilla.suse.com/1125243"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1126055",
        "url": "https://bugzilla.suse.com/1126055"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1126058",
        "url": "https://bugzilla.suse.com/1126058"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127932",
        "url": "https://bugzilla.suse.com/1127932"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1129757",
        "url": "https://bugzilla.suse.com/1129757"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1129889",
        "url": "https://bugzilla.suse.com/1129889"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131512",
        "url": "https://bugzilla.suse.com/1131512"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136584",
        "url": "https://bugzilla.suse.com/1136584"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137477",
        "url": "https://bugzilla.suse.com/1137477"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138165",
        "url": "https://bugzilla.suse.com/1138165"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138977",
        "url": "https://bugzilla.suse.com/1138977"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140697",
        "url": "https://bugzilla.suse.com/1140697"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1142518",
        "url": "https://bugzilla.suse.com/1142518"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1142662",
        "url": "https://bugzilla.suse.com/1142662"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144211",
        "url": "https://bugzilla.suse.com/1144211"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154972",
        "url": "https://bugzilla.suse.com/1154972"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155953",
        "url": "https://bugzilla.suse.com/1155953"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156501",
        "url": "https://bugzilla.suse.com/1156501"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1160446",
        "url": "https://bugzilla.suse.com/1160446"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166537",
        "url": "https://bugzilla.suse.com/1166537"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173926",
        "url": "https://bugzilla.suse.com/1173926"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-3681 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-3681/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-3685 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-3685/"
      }
    ],
    "title": "Security update for osc",
    "tracking": {
      "current_release_date": "2026-09-20T14:48:22Z",
      "generator": {
        "date": "2022-12-07T16:38:34Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2022:4351-1",
      "initial_release_date": "2022-12-07T16:38:34Z",
      "revision_history": [
        {
          "date": "2022-12-07T16:38:34Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T14:48:22Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "osc-0:0.182.0-15.12.1.noarch",
                "product": {
                  "name": "osc-0:0.182.0-15.12.1.noarch",
                  "product_id": "osc-0:0.182.0-15.12.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensuse:osc:0.182.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/osc@0.182.0-15.12.1?arch=noarch\u0026upstream=osc-0:0.182.0-15.12.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "osc-0:0.182.0-15.12.1.noarch as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:osc-0:0.182.0-15.12.1.noarch"
        },
        "product_reference": "osc-0:0.182.0-15.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "osc-0:0.182.0-15.12.1.noarch as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:osc-0:0.182.0-15.12.1.noarch"
        },
        "product_reference": "osc-0:0.182.0-15.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "osc-0:0.182.0-15.12.1.noarch as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:osc-0:0.182.0-15.12.1.noarch"
        },
        "product_reference": "osc-0:0.182.0-15.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-3681",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-3681"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 .",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:osc-0:0.182.0-15.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:osc-0:0.182.0-15.12.1.noarch",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:osc-0:0.182.0-15.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-3681",
          "url": "https://www.suse.com/security/cve/CVE-2019-3681"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1122675 for CVE-2019-3681",
          "url": "https://bugzilla.suse.com/1122675"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:osc-0:0.182.0-15.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:osc-0:0.182.0-15.12.1.noarch",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:osc-0:0.182.0-15.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:osc-0:0.182.0-15.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:osc-0:0.182.0-15.12.1.noarch",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:osc-0:0.182.0-15.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-12-07T16:38:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-3681"
    },
    {
      "cve": "CVE-2019-3685",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-3685"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Open Build Service before version 0.165.4 diddn\u0027t validate TLS certificates for HTTPS connections with the osc client binary",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:osc-0:0.182.0-15.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:osc-0:0.182.0-15.12.1.noarch",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:osc-0:0.182.0-15.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-3685",
          "url": "https://www.suse.com/security/cve/CVE-2019-3685"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142518 for CVE-2019-3685",
          "url": "https://bugzilla.suse.com/1142518"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142662 for CVE-2019-3685",
          "url": "https://bugzilla.suse.com/1142662"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:osc-0:0.182.0-15.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:osc-0:0.182.0-15.12.1.noarch",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:osc-0:0.182.0-15.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:osc-0:0.182.0-15.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:osc-0:0.182.0-15.12.1.noarch",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:osc-0:0.182.0-15.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-12-07T16:38:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-3685"
    }
  ]
}

CVE-2019-3681 (GCVE-0-2019-3681)

Vulnerability from cvelistv5 – Published: 2020-06-29 12:00 – Updated: 2024-09-17 03:28

Title

osc: stores downloaded (supposed) RPM in network-controlled filesystem paths

Summary

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 .

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-73 - External Control of File Name or Path

Assigner

suse CNA under the mitre root

CNA scorecard B 80/100 over 122 records in the last 180 days details

References

1 reference

URL	Tags
https://bugzilla.suse.com/show_bug.cgi?id=1122675	x_refsource_CONFIRM

Impacted products

5 products

Vendor	Product	Version
SUSE	SUSE Linux Enterprise Module for Development Tools 15	Affected: osc , < 0.169.1-3.20.1 (custom)
SUSE	SUSE Linux Enterprise Software Development Kit 12-SP5	Affected: osc , < 0.162.1-15.9.1 (custom)
SUSE	SUSE Linux Enterprise Software Development Kit 12-SP4	Affected: osc , < 0.162.1-15.9.1 (custom)
openSUSE	openSUSE Leap 15.1	Affected: osc , < 0.169.1-lp151.2.15.1 (custom)
openSUSE	openSUSE Factory	Affected: osc , < 0.169.0 (custom)

Date Public

2020-05-27 00:00

Credits

Malte Kraus of SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:12:09.655Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1122675"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SUSE Linux Enterprise Module for Development Tools 15",
          "vendor": "SUSE",
          "versions": [
            {
              "lessThan": "0.169.1-3.20.1",
              "status": "affected",
              "version": "osc",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "SUSE Linux Enterprise Software Development Kit 12-SP5",
          "vendor": "SUSE",
          "versions": [
            {
              "lessThan": "0.162.1-15.9.1",
              "status": "affected",
              "version": "osc",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "SUSE Linux Enterprise Software Development Kit 12-SP4",
          "vendor": "SUSE",
          "versions": [
            {
              "lessThan": "0.162.1-15.9.1",
              "status": "affected",
              "version": "osc",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "openSUSE Leap 15.1",
          "vendor": "openSUSE",
          "versions": [
            {
              "lessThan": "0.169.1-lp151.2.15.1",
              "status": "affected",
              "version": "osc",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "openSUSE Factory",
          "vendor": "openSUSE",
          "versions": [
            {
              "lessThan": "0.169.0",
              "status": "affected",
              "version": "osc",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Malte Kraus of SUSE"
        }
      ],
      "datePublic": "2020-05-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 ."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "CWE-73: External Control of File Name or Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-29T12:00:16.000Z",
        "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
        "shortName": "suse"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1122675"
        }
      ],
      "source": {
        "advisory": "https://bugzilla.suse.com/show_bug.cgi?id=1122675",
        "defect": [
          "1122675"
        ],
        "discovery": "INTERNAL"
      },
      "title": "osc: stores downloaded (supposed) RPM in network-controlled filesystem paths",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@suse.com",
          "DATE_PUBLIC": "2020-05-27T00:00:00.000Z",
          "ID": "CVE-2019-3681",
          "STATE": "PUBLIC",
          "TITLE": "osc: stores downloaded (supposed) RPM in network-controlled filesystem paths"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SUSE Linux Enterprise Module for Development Tools 15",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "osc",
                            "version_value": "0.169.1-3.20.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SUSE Linux Enterprise Software Development Kit 12-SP5",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "osc",
                            "version_value": "0.162.1-15.9.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SUSE Linux Enterprise Software Development Kit 12-SP4",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "osc",
                            "version_value": "0.162.1-15.9.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "SUSE"
              },
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "openSUSE Leap 15.1",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "osc",
                            "version_value": "0.169.1-lp151.2.15.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "openSUSE Factory",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "osc",
                            "version_value": "0.169.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "openSUSE"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Malte Kraus of SUSE"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 ."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-73: External Control of File Name or Path"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1122675",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1122675"
            }
          ]
        },
        "source": {
          "advisory": "https://bugzilla.suse.com/show_bug.cgi?id=1122675",
          "defect": [
            "1122675"
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
    "assignerShortName": "suse",
    "cveId": "CVE-2019-3681",
    "datePublished": "2020-06-29T12:00:16.969Z",
    "dateReserved": "2019-01-03T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:28:54.416Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-3685 (GCVE-0-2019-3685)

Vulnerability from cvelistv5 – Published: 2019-11-05 09:30 – Updated: 2024-09-16 16:49

Title

Missing TLS certificate validation for HTTPS connections in osc

Summary

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-295 - Improper Certificate Validation

Assigner

suse CNA under the mitre root

CNA scorecard B 80/100 over 122 records in the last 180 days details

References

1 reference

URL	Tags
https://bugzilla.suse.com/show_bug.cgi?id=1142518	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Open Build Service	Open Build Service	Affected: unspecified , < 0.165.4 (custom)

Date Public

2019-07-23 00:00

Credits

Wolfgang Frisch of SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:19:16.818Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1142518"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Open Build Service",
          "vendor": "Open Build Service",
          "versions": [
            {
              "lessThan": "0.165.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Wolfgang Frisch of SUSE"
        }
      ],
      "datePublic": "2019-07-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Open Build Service before version 0.165.4 diddn\u0027t validate TLS certificates for HTTPS connections with the osc client binary"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295: Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-05T09:30:41.000Z",
        "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
        "shortName": "suse"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1142518"
        }
      ],
      "source": {
        "advisory": "https://bugzilla.suse.com/show_bug.cgi?id=1142518",
        "defect": [
          "1142518"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Missing TLS certificate validation for HTTPS connections in osc",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@suse.com",
          "DATE_PUBLIC": "2019-07-23T00:00:00.000Z",
          "ID": "CVE-2019-3685",
          "STATE": "PUBLIC",
          "TITLE": "Missing TLS certificate validation for HTTPS connections in osc"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Open Build Service",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "0.165.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Open Build Service"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Wolfgang Frisch of SUSE"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Open Build Service before version 0.165.4 diddn\u0027t validate TLS certificates for HTTPS connections with the osc client binary"
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-295: Improper Certificate Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1142518",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1142518"
            }
          ]
        },
        "source": {
          "advisory": "https://bugzilla.suse.com/show_bug.cgi?id=1142518",
          "defect": [
            "1142518"
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
    "assignerShortName": "suse",
    "cveId": "CVE-2019-3685",
    "datePublished": "2019-11-05T09:30:41.212Z",
    "dateReserved": "2019-01-03T00:00:00.000Z",
    "dateUpdated": "2024-09-16T16:49:06.631Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2022:4351-1

CVE-2019-3681 (GCVE-0-2019-3681)

CVE-2019-3685 (GCVE-0-2019-3685)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour