CVE-2018-12471 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-12471 Interim 1 15 2022-10-06T00:41:32Z current 2021-05-30T14:14:27Z 2022-10-06T00:41:32Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-12471 A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-September/004613.html E-Mail link for SUSE-SU-2018:2898-1 https://lists.suse.com/pipermail/sle-security-updates/2018-October/004724.html E-Mail link for SUSE-SU-2018:2898-2 https://lists.suse.com/pipermail/sle-security-updates/2018-September/004614.html E-Mail link for SUSE-SU-2018:2899-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 4 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE OpenStack Cloud 7 Subscription Management Tool 11 SP3 perl-File-Touch-0.11-3.2.2 res-signingkeys-2.0.34-50.8.1 res-signingkeys-3.0.37-52.23.6 res-signingkeys-3.0.38-52.26.1 res-signingkeys-3.0.42-52.38.1 smt-2.0.34-50.8.1 smt-3.0.37-52.23.6 smt-3.0.38-52.26.1 smt-3.0.42-52.38.1 smt-ha-3.0.37-52.23.6 smt-support-2.0.34-50.8.1 smt-support-3.0.37-52.23.6 smt-support-3.0.38-52.26.1 smt-support-3.0.42-52.38.1 yast2-smt-3.0.14-10.6.2 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Enterprise Storage 4 smt-3.0.37-52.23.6 as a component of SUSE Enterprise Storage 4 smt-support-3.0.37-52.23.6 as a component of SUSE Enterprise Storage 4 res-signingkeys-3.0.42-52.38.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 smt-3.0.42-52.38.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 smt-support-3.0.42-52.38.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 perl-File-Touch-0.11-3.2.2 as a component of SUSE Linux Enterprise Module for Public Cloud 12 smt-ha-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Module for Public Cloud 12 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS yast2-smt-3.0.14-10.6.2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3 smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3 smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA res-signingkeys-3.0.38-52.26.1 as a component of SUSE Linux Enterprise Server 12 SP4 smt-3.0.38-52.26.1 as a component of SUSE Linux Enterprise Server 12 SP4 smt-support-3.0.38-52.26.1 as a component of SUSE Linux Enterprise Server 12 SP4 res-signingkeys-3.0.42-52.38.1 as a component of SUSE Linux Enterprise Server 12 SP5 smt-3.0.42-52.38.1 as a component of SUSE Linux Enterprise Server 12 SP5 smt-support-3.0.42-52.38.1 as a component of SUSE Linux Enterprise Server 12 SP5 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 yast2-smt-3.0.14-10.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 res-signingkeys-3.0.37-52.23.6 as a component of SUSE OpenStack Cloud 7 smt-3.0.37-52.23.6 as a component of SUSE OpenStack Cloud 7 smt-support-3.0.37-52.23.6 as a component of SUSE OpenStack Cloud 7 res-signingkeys-2.0.34-50.8.1 as a component of Subscription Management Tool 11 SP3 smt-2.0.34-50.8.1 as a component of Subscription Management Tool 11 SP3 smt-support-2.0.34-50.8.1 as a component of Subscription Management Tool 11 SP3 A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37. CVE-2018-12471 SUSE Enterprise Storage 4:res-signingkeys-3.0.37-52.23.6 SUSE Enterprise Storage 4:smt-3.0.37-52.23.6 SUSE Enterprise Storage 4:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise High Performance Computing 12 SP5:res-signingkeys-3.0.42-52.38.1 SUSE Linux Enterprise High Performance Computing 12 SP5:smt-3.0.42-52.38.1 SUSE Linux Enterprise High Performance Computing 12 SP5:smt-support-3.0.42-52.38.1 SUSE Linux Enterprise Module for Public Cloud 12:perl-File-Touch-0.11-3.2.2 SUSE Linux Enterprise Module for Public Cloud 12:smt-ha-3.0.37-52.23.6 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT:smt-3.0.37-52.23.6 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP1-LTSS:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP1-LTSS:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP1-LTSS:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP1-LTSS:yast2-smt-3.0.14-10.6.2 SUSE Linux Enterprise Server 12 SP2-BCL:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-BCL:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-BCL:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-ESPOS:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-ESPOS:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-ESPOS:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-LTSS:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-LTSS:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-LTSS:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3-TERADATA:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3-TERADATA:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3-TERADATA:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP4:res-signingkeys-3.0.38-52.26.1 SUSE Linux Enterprise Server 12 SP4:smt-3.0.38-52.26.1 SUSE Linux Enterprise Server 12 SP4:smt-support-3.0.38-52.26.1 SUSE Linux Enterprise Server 12 SP5:res-signingkeys-3.0.42-52.38.1 SUSE Linux Enterprise Server 12 SP5:smt-3.0.42-52.38.1 SUSE Linux Enterprise Server 12 SP5:smt-support-3.0.42-52.38.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:yast2-smt-3.0.14-10.6.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:smt-support-3.0.37-52.23.6 SUSE OpenStack Cloud 7:res-signingkeys-3.0.37-52.23.6 SUSE OpenStack Cloud 7:smt-3.0.37-52.23.6 SUSE OpenStack Cloud 7:smt-support-3.0.37-52.23.6 Subscription Management Tool 11 SP3:res-signingkeys-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-support-2.0.34-50.8.1 important 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N