Main Vulnerability Database Vulnerabilities #VU75798

Configuration in tftpboot-installation-SLE-Micro-5.1-x86_64 - #VU75798

Published: May 9, 2023

Vulnerability identifier: #VU75798

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-16

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The issue may allow a local user to bypass implemented security restrictions.

The issue exists due to the possibility to bypass implemented security restrictions, related to secure boot. it was addressed by rebuilding the package with the new secure boot key.

Affected software

tftpboot-installation-SLE-Micro-5.1-x86_64
tftpboot-installation-SLE-Micro-5.1-aarch64
tftpboot-installation-SLE-Micro-5.1-s390x
SUSE Linux Enterprise Micro

Remediation

Install updates from vendor's website.

tftpboot-installation-SLE-Micro-5.1-x86_64 - update to 16.56.6-150300.3.2.1
tftpboot-installation-SLE-Micro-5.1-aarch64 - update to 16.56.6-150300.3.2.1
tftpboot-installation-SLE-Micro-5.1-s390x - update to 16.56.6-150300.3.2.1

External References

Related Security Bulletins