CVE-2019-11360 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-11360 Interim 1 33 2023-09-13T00:06:10Z current 2021-05-30T14:27:38Z 2023-09-13T00:06:10Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-11360 A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings Magnum Orchestration 7 SLES for SAP Applications 11 SP3 SUSE CaaS Platform 3.0 SUSE Container as a Service Platform 2.0 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Legacy 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Legacy 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Legacy 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP1 iptables iptables-nft libip4tc2 libip6tc2 libipq-devel libipq0 libiptc-devel libiptc0 libxtables-devel libxtables10 libxtables12 xtables-plugins iptables as a component of Magnum Orchestration 7 iptables as a component of SLES for SAP Applications 11 SP3 iptables as a component of SUSE CaaS Platform 3.0 libiptc0 as a component of SUSE CaaS Platform 3.0 libxtables10 as a component of SUSE CaaS Platform 3.0 xtables-plugins as a component of SUSE CaaS Platform 3.0 iptables as a component of SUSE Container as a Service Platform 2.0 iptables as a component of SUSE Linux Enterprise Desktop 12 SP3 libiptc0 as a component of SUSE Linux Enterprise Desktop 12 SP3 libxtables10 as a component of SUSE Linux Enterprise Desktop 12 SP3 xtables-plugins as a component of SUSE Linux Enterprise Desktop 12 SP3 iptables as a component of SUSE Linux Enterprise Desktop 12 SP4 libiptc0 as a component of SUSE Linux Enterprise Desktop 12 SP4 libxtables10 as a component of SUSE Linux Enterprise Desktop 12 SP4 xtables-plugins as a component of SUSE Linux Enterprise Desktop 12 SP4 iptables as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 iptables as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libipq-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libipq0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libiptc-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libiptc0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libxtables-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libxtables12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS xtables-plugins as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS iptables as a component of SUSE Linux Enterprise Micro 5.1 libip4tc2 as a component of SUSE Linux Enterprise Micro 5.1 libip6tc2 as a component of SUSE Linux Enterprise Micro 5.1 libxtables12 as a component of SUSE Linux Enterprise Micro 5.1 xtables-plugins as a component of SUSE Linux Enterprise Micro 5.1 iptables as a component of SUSE Linux Enterprise Module for Basesystem 15 libipq-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 libipq0 as a component of SUSE Linux Enterprise Module for Basesystem 15 libiptc-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 libiptc0 as a component of SUSE Linux Enterprise Module for Basesystem 15 libxtables-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 libxtables12 as a component of SUSE Linux Enterprise Module for Basesystem 15 xtables-plugins as a component of SUSE Linux Enterprise Module for Basesystem 15 iptables as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libipq-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libipq0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libiptc-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libiptc0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libxtables-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libxtables12 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 xtables-plugins as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 iptables-nft as a component of SUSE Linux Enterprise Module for Legacy 15 iptables as a component of SUSE Linux Enterprise Module for Legacy 15 iptables-nft as a component of SUSE Linux Enterprise Module for Legacy 15 SP1 iptables as a component of SUSE Linux Enterprise Module for Legacy 15 SP1 iptables as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata iptables as a component of SUSE Linux Enterprise Server 11 SP3 LTSS iptables as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata iptables as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libiptc0 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libxtables10 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS xtables-plugins as a component of SUSE Linux Enterprise Server 12 SP1-LTSS iptables as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libiptc0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libxtables10 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xtables-plugins as a component of SUSE Linux Enterprise Server 12 SP2-LTSS iptables as a component of SUSE Linux Enterprise Server 12 SP3 libiptc0 as a component of SUSE Linux Enterprise Server 12 SP3 libxtables10 as a component of SUSE Linux Enterprise Server 12 SP3 xtables-plugins as a component of SUSE Linux Enterprise Server 12 SP3 iptables as a component of SUSE Linux Enterprise Server 12 SP4 libiptc0 as a component of SUSE Linux Enterprise Server 12 SP4 libxtables10 as a component of SUSE Linux Enterprise Server 12 SP4 xtables-plugins as a component of SUSE Linux Enterprise Server 12 SP4 iptables as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libiptc0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libxtables10 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xtables-plugins as a component of SUSE Linux Enterprise Server 12 SP4-LTSS iptables as a component of SUSE Linux Enterprise Server 12-LTSS libiptc0 as a component of SUSE Linux Enterprise Server 12-LTSS libxtables10 as a component of SUSE Linux Enterprise Server 12-LTSS xtables-plugins as a component of SUSE Linux Enterprise Server 12-LTSS iptables as a component of SUSE Linux Enterprise Server for SAP Applications 12 iptables as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libiptc0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxtables10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xtables-plugins as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 iptables as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libiptc0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libxtables10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xtables-plugins as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 iptables as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libiptc0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libxtables10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xtables-plugins as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libipq-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libipq0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libiptc-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libxtables-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 iptables as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libipq-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libipq0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libiptc-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libxtables-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 iptables as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c. CVE-2019-11360 Magnum Orchestration 7:iptables SLES for SAP Applications 11 SP3:iptables SUSE CaaS Platform 3.0:iptables SUSE CaaS Platform 3.0:libiptc0 SUSE CaaS Platform 3.0:libxtables10 SUSE CaaS Platform 3.0:xtables-plugins SUSE Container as a Service Platform 2.0:iptables SUSE Linux Enterprise Desktop 12 SP3:iptables SUSE Linux Enterprise Desktop 12 SP3:libiptc0 SUSE Linux Enterprise Desktop 12 SP3:libxtables10 SUSE Linux Enterprise Desktop 12 SP3:xtables-plugins SUSE Linux Enterprise Desktop 12 SP4:iptables SUSE Linux Enterprise Desktop 12 SP4:libiptc0 SUSE Linux Enterprise Desktop 12 SP4:libxtables10 SUSE Linux Enterprise Desktop 12 SP4:xtables-plugins SUSE Linux Enterprise High Performance Computing 12 SP4:iptables SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:iptables SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libipq-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libipq0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libiptc-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libiptc0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libxtables-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libxtables12 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:xtables-plugins SUSE Linux Enterprise Micro 5.1:iptables SUSE Linux Enterprise Micro 5.1:libip4tc2 SUSE Linux Enterprise Micro 5.1:libip6tc2 SUSE Linux Enterprise Micro 5.1:libxtables12 SUSE Linux Enterprise Micro 5.1:xtables-plugins SUSE Linux Enterprise Module for Basesystem 15 SP1:iptables SUSE Linux Enterprise Module for Basesystem 15 SP1:libipq-devel SUSE Linux Enterprise Module for Basesystem 15 SP1:libipq0 SUSE Linux Enterprise Module for Basesystem 15 SP1:libiptc-devel SUSE Linux Enterprise Module for Basesystem 15 SP1:libiptc0 SUSE Linux Enterprise Module for Basesystem 15 SP1:libxtables-devel SUSE Linux Enterprise Module for Basesystem 15 SP1:libxtables12 SUSE Linux Enterprise Module for Basesystem 15 SP1:xtables-plugins SUSE Linux Enterprise Module for Basesystem 15:iptables SUSE Linux Enterprise Module for Basesystem 15:libipq-devel SUSE Linux Enterprise Module for Basesystem 15:libipq0 SUSE Linux Enterprise Module for Basesystem 15:libiptc-devel SUSE Linux Enterprise Module for Basesystem 15:libiptc0 SUSE Linux Enterprise Module for Basesystem 15:libxtables-devel SUSE Linux Enterprise Module for Basesystem 15:libxtables12 SUSE Linux Enterprise Module for Basesystem 15:xtables-plugins SUSE Linux Enterprise Module for Legacy 15 SP1:iptables SUSE Linux Enterprise Module for Legacy 15 SP1:iptables-nft SUSE Linux Enterprise Module for Legacy 15:iptables SUSE Linux Enterprise Module for Legacy 15:iptables-nft SUSE Linux Enterprise Server 11 SP1 for Teradata:iptables SUSE Linux Enterprise Server 11 SP3 LTSS:iptables SUSE Linux Enterprise Server 11 SP3 for Teradata:iptables SUSE Linux Enterprise Server 12 SP1-LTSS:iptables SUSE Linux Enterprise Server 12 SP1-LTSS:libiptc0 SUSE Linux Enterprise Server 12 SP1-LTSS:libxtables10 SUSE Linux Enterprise Server 12 SP1-LTSS:xtables-plugins SUSE Linux Enterprise Server 12 SP2-LTSS:iptables SUSE Linux Enterprise Server 12 SP2-LTSS:libiptc0 SUSE Linux Enterprise Server 12 SP2-LTSS:libxtables10 SUSE Linux Enterprise Server 12 SP2-LTSS:xtables-plugins SUSE Linux Enterprise Server 12 SP3:iptables SUSE Linux Enterprise Server 12 SP3:libiptc0 SUSE Linux Enterprise Server 12 SP3:libxtables10 SUSE Linux Enterprise Server 12 SP3:xtables-plugins SUSE Linux Enterprise Server 12 SP4-LTSS:iptables SUSE Linux Enterprise Server 12 SP4-LTSS:libiptc0 SUSE Linux Enterprise Server 12 SP4-LTSS:libxtables10 SUSE Linux Enterprise Server 12 SP4-LTSS:xtables-plugins SUSE Linux Enterprise Server 12 SP4:iptables SUSE Linux Enterprise Server 12 SP4:libiptc0 SUSE Linux Enterprise Server 12 SP4:libxtables10 SUSE Linux Enterprise Server 12 SP4:xtables-plugins SUSE Linux Enterprise Server 12-LTSS:iptables SUSE Linux Enterprise Server 12-LTSS:libiptc0 SUSE Linux Enterprise Server 12-LTSS:libxtables10 SUSE Linux Enterprise Server 12-LTSS:xtables-plugins SUSE Linux Enterprise Server for SAP Applications 12 SP2:iptables SUSE Linux Enterprise Server for SAP Applications 12 SP2:libiptc0 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxtables10 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xtables-plugins SUSE Linux Enterprise Server for SAP Applications 12 SP3:iptables SUSE Linux Enterprise Server for SAP Applications 12 SP3:libiptc0 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxtables10 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xtables-plugins SUSE Linux Enterprise Server for SAP Applications 12 SP4:iptables SUSE Linux Enterprise Server for SAP Applications 12 SP4:libiptc0 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxtables10 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xtables-plugins SUSE Linux Enterprise Server for SAP Applications 12:iptables SUSE Linux Enterprise Software Development Kit 12 SP3:iptables SUSE Linux Enterprise Software Development Kit 12 SP3:libipq-devel SUSE Linux Enterprise Software Development Kit 12 SP3:libipq0 SUSE Linux Enterprise Software Development Kit 12 SP3:libiptc-devel SUSE Linux Enterprise Software Development Kit 12 SP3:libxtables-devel SUSE Linux Enterprise Software Development Kit 12 SP4:iptables SUSE Linux Enterprise Software Development Kit 12 SP4:libipq-devel SUSE Linux Enterprise Software Development Kit 12 SP4:libipq0 SUSE Linux Enterprise Software Development Kit 12 SP4:libiptc-devel SUSE Linux Enterprise Software Development Kit 12 SP4:libxtables-devel moderate 3.5 AV:N/AC:M/Au:S/C:N/I:N/A:P 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H