{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2023 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2018-8020","title":"Title"},{"category":"description","text":"Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check OCSP pre-produced responses, which are lists (multiple entries) of certificate statuses. Subsequently, revoked client certificates may not be properly identified, allowing for users to authenticate with revoked certificates to connections that require mutual TLS. Users not using OCSP checks are not affected by this vulnerability.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2018-8020","url":"https://www.suse.com/security/cve/CVE-2018-8020"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1103347 for CVE-2018-8020","url":"https://bugzilla.suse.com/1103347"},{"category":"external","summary":"Advisory link for SUSE-SU-2019:14014-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2019-April/005314.html"}],"title":"SUSE CVE CVE-2018-8020","tracking":{"current_release_date":"2023-02-15T04:29:19Z","generator":{"date":"2023-02-15T04:29:19Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2018-8020","initial_release_date":"2023-02-15T04:29:19Z","revision_history":[{"date":"2023-02-15T04:29:19Z","number":"2","summary":"Current version"}],"status":"interim","version":"2"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"HPE Helion OpenStack 8","product":{"name":"HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8","product_identification_helper":{"cpe":"cpe:/o:suse:hpe-helion-openstack:8"}}},{"category":"product_name","name":"SUSE Enterprise Storage 7","product":{"name":"SUSE Enterprise Storage 7","product_id":"SUSE Enterprise Storage 7","product_identification_helper":{"cpe":"cpe:/o:suse:ses:7"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP4","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP4","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 12 SP5","product":{"name":"SUSE Linux Enterprise High Performance Computing 12 SP5","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-hpc:12:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc-espos:15:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc-espos:15:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc-ltss:15:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Point of Sale 11 SP3","product":{"name":"SUSE Linux Enterprise Point of Sale 11 SP3","product_id":"SUSE Linux Enterprise Point of Sale 11 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-pos:11:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Real Time 15 SP2","product":{"name":"SUSE Linux Enterprise Real Time 15 SP2","product_id":"SUSE Linux Enterprise Real Time 15 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sle_rt:15:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP1-TERADATA","product":{"name":"SUSE Linux Enterprise Server 11 SP1-TERADATA","product_id":"SUSE Linux Enterprise Server 11 SP1-TERADATA","product_identification_helper":{"cpe":"cpe:/o:suse:sles:11:sp1:teradata"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP3-TERADATA","product":{"name":"SUSE Linux Enterprise Server 11 SP3-TERADATA","product_id":"SUSE Linux Enterprise Server 11 SP3-TERADATA","product_identification_helper":{"cpe":"cpe:/o:suse:sles:11:sp3:teradata"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP4-LTSS","product":{"name":"SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles:11:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP2-BCL","product":{"name":"SUSE Linux Enterprise Server 12 SP2-BCL","product_id":"SUSE Linux Enterprise Server 12 SP2-BCL","product_identification_helper":{"cpe":"cpe:/o:suse:sles-bcl:12:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP4","product":{"name":"SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sles:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP4","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP4","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP4-ESPOS","product":{"name":"SUSE Linux Enterprise Server 12 SP4-ESPOS","product_id":"SUSE Linux Enterprise Server 12 SP4-ESPOS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-espos:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP4-LTSS","product":{"name":"SUSE Linux Enterprise Server 12 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP4-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP5","product":{"name":"SUSE Linux Enterprise Server 12 SP5","product_id":"SUSE Linux Enterprise Server 12 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sles:12:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP5","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP5","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15 SP2-LTSS","product":{"name":"SUSE Linux Enterprise Server 15 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP2-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:15:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server Business Critical Linux 15 SP1","product":{"name":"SUSE Linux Enterprise Server Business Critical Linux 15 SP1","product_id":"SUSE Linux Enterprise Server Business Critical Linux 15 SP1","product_identification_helper":{"cpe":"cpe:/o:suse:sles_bcl:15:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server Business Critical Linux 15 SP2","product":{"name":"SUSE Linux Enterprise Server Business Critical Linux 15 SP2","product_id":"SUSE Linux Enterprise Server Business Critical Linux 15 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sles_bcl:15:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server Teradata 12 SP3","product":{"name":"SUSE Linux Enterprise Server Teradata 12 SP3","product_id":"SUSE Linux Enterprise Server Teradata 12 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sles_teradata:12:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 12 SP4","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP4","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP4","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 12 SP5","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 12 SP5","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:12:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP5","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP5","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 15 SP2","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:15:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp5"}}},{"category":"product_name","name":"SUSE Manager Proxy 4.1","product":{"name":"SUSE Manager Proxy 4.1","product_id":"SUSE Manager Proxy 4.1","product_identification_helper":{"cpe":"cpe:/o:suse:suse-manager-proxy:4.1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp4"}}},{"category":"product_name","name":"SUSE Manager Retail Branch Server 4.1","product":{"name":"SUSE Manager Retail Branch Server 4.1","product_id":"SUSE Manager Retail Branch Server 4.1","product_identification_helper":{"cpe":"cpe:/o:suse:suse-manager-retail-branch-server:4.1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp4"}}},{"category":"product_name","name":"SUSE Manager Server 4.1","product":{"name":"SUSE Manager Server 4.1","product_id":"SUSE Manager Server 4.1","product_identification_helper":{"cpe":"cpe:/o:suse:suse-manager-server:4.1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15:sp4"}}},{"category":"product_name","name":"SUSE OpenStack Cloud 8","product":{"name":"SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8","product_identification_helper":{"cpe":"cpe:/o:suse:suse-openstack-cloud:8"}}},{"category":"product_name","name":"SUSE OpenStack Cloud 9","product":{"name":"SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9","product_identification_helper":{"cpe":"cpe:/o:suse:suse-openstack-cloud:9"}}},{"category":"product_name","name":"SUSE OpenStack Cloud Crowbar 8","product":{"name":"SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8","product_identification_helper":{"cpe":"cpe:/o:suse:suse-openstack-cloud-crowbar:8"}}},{"category":"product_name","name":"SUSE OpenStack Cloud Crowbar 9","product":{"name":"SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9","product_identification_helper":{"cpe":"cpe:/o:suse:suse-openstack-cloud-crowbar:9"}}},{"category":"product_version","name":"libtcnative-1-0","product":{"name":"libtcnative-1-0","product_id":"libtcnative-1-0"}},{"category":"product_version","name":"libtcnative-1-0-1.2.17-1.12","product":{"name":"libtcnative-1-0-1.2.17-1.12","product_id":"libtcnative-1-0-1.2.17-1.12"}},{"category":"product_version","name":"libtcnative-1-0-1.2.23-3.3.3","product":{"name":"libtcnative-1-0-1.2.23-3.3.3","product_id":"libtcnative-1-0-1.2.23-3.3.3"}},{"category":"product_version","name":"libtcnative-1-0-1.3.4-12.5.5.2","product":{"name":"libtcnative-1-0-1.3.4-12.5.5.2","product_id":"libtcnative-1-0-1.3.4-12.5.5.2"}},{"category":"product_version","name":"libtcnative-1-0-devel","product":{"name":"libtcnative-1-0-devel","product_id":"libtcnative-1-0-devel"}},{"category":"product_version","name":"libtcnative-1-0-devel-1.2.17-1.12","product":{"name":"libtcnative-1-0-devel-1.2.17-1.12","product_id":"libtcnative-1-0-devel-1.2.17-1.12"}},{"category":"product_version","name":"libtcnative-1-0-devel-1.2.23-3.3.3","product":{"name":"libtcnative-1-0-devel-1.2.23-3.3.3","product_id":"libtcnative-1-0-devel-1.2.23-3.3.3"}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-1.2.23-3.3.3 as component of SUSE Linux Enterprise High Performance Computing 12 SP5","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP5:libtcnative-1-0-1.2.23-3.3.3"},"product_reference":"libtcnative-1-0-1.2.23-3.3.3","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-1.3.4-12.5.5.2 as component of SUSE Linux Enterprise Point of Sale 11 SP3","product_id":"SUSE Linux Enterprise Point of Sale 11 SP3:libtcnative-1-0-1.3.4-12.5.5.2"},"product_reference":"libtcnative-1-0-1.3.4-12.5.5.2","relates_to_product_reference":"SUSE Linux Enterprise Point of Sale 11 SP3"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-1.3.4-12.5.5.2 as component of SUSE Linux Enterprise Server 11 SP1-TERADATA","product_id":"SUSE Linux Enterprise Server 11 SP1-TERADATA:libtcnative-1-0-1.3.4-12.5.5.2"},"product_reference":"libtcnative-1-0-1.3.4-12.5.5.2","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP1-TERADATA"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-1.3.4-12.5.5.2 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA","product_id":"SUSE Linux Enterprise Server 11 SP3-TERADATA:libtcnative-1-0-1.3.4-12.5.5.2"},"product_reference":"libtcnative-1-0-1.3.4-12.5.5.2","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP3-TERADATA"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-1.3.4-12.5.5.2 as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:libtcnative-1-0-1.3.4-12.5.5.2"},"product_reference":"libtcnative-1-0-1.3.4-12.5.5.2","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-1.2.17-1.12 as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:libtcnative-1-0-1.2.17-1.12"},"product_reference":"libtcnative-1-0-1.2.17-1.12","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-1.2.23-3.3.3 as component of SUSE Linux Enterprise Server 12 SP5","product_id":"SUSE Linux Enterprise Server 12 SP5:libtcnative-1-0-1.2.23-3.3.3"},"product_reference":"libtcnative-1-0-1.2.23-3.3.3","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel-1.2.17-1.12 as component of SUSE Linux Enterprise Software Development Kit 12 SP4","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP4:libtcnative-1-0-devel-1.2.17-1.12"},"product_reference":"libtcnative-1-0-devel-1.2.17-1.12","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel-1.2.23-3.3.3 as component of SUSE Linux Enterprise Software Development Kit 12 SP5","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP5:libtcnative-1-0-devel-1.2.23-3.3.3"},"product_reference":"libtcnative-1-0-devel-1.2.23-3.3.3","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Enterprise Storage 7","product_id":"SUSE Enterprise Storage 7:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Enterprise Storage 7"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise High Performance Computing 12 SP5","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP5:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libtcnative-1-0-devel"},"product_reference":"libtcnative-1-0-devel","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libtcnative-1-0-devel"},"product_reference":"libtcnative-1-0-devel","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libtcnative-1-0-devel"},"product_reference":"libtcnative-1-0-devel","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Module for Basesystem 15 SP3","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP3:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Module for Basesystem 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP4:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Module for Basesystem 15 SP4"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP5:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Module for Basesystem 15 SP5"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3:libtcnative-1-0-devel"},"product_reference":"libtcnative-1-0-devel","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP3","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4:libtcnative-1-0-devel"},"product_reference":"libtcnative-1-0-devel","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15 SP4"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5:libtcnative-1-0-devel"},"product_reference":"libtcnative-1-0-devel","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15 SP5"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Real Time 15 SP2","product_id":"SUSE Linux Enterprise Real Time 15 SP2:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Real Time 15 SP2"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server 12 SP2-BCL","product_id":"SUSE Linux Enterprise Server 12 SP2-BCL:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-BCL"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server 12 SP4-ESPOS","product_id":"SUSE Linux Enterprise Server 12 SP4-ESPOS:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4-ESPOS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server 12 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP4-LTSS:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server 12 SP5","product_id":"SUSE Linux Enterprise Server 12 SP5:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server 15 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP2-LTSS:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel as component of SUSE Linux Enterprise Server 15 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP2-LTSS:libtcnative-1-0-devel"},"product_reference":"libtcnative-1-0-devel","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1","product_id":"SUSE Linux Enterprise Server Business Critical Linux 15 SP1:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server Business Critical Linux 15 SP1"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2","product_id":"SUSE Linux Enterprise Server Business Critical Linux 15 SP2:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server Business Critical Linux 15 SP2"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server Teradata 12 SP3","product_id":"SUSE Linux Enterprise Server Teradata 12 SP3:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server Teradata 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15 SP2"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0-devel as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libtcnative-1-0-devel"},"product_reference":"libtcnative-1-0-devel","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15 SP2"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Manager Proxy 4.1","product_id":"SUSE Manager Proxy 4.1:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Manager Proxy 4.1"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Manager Retail Branch Server 4.1","product_id":"SUSE Manager Retail Branch Server 4.1:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Manager Retail Branch Server 4.1"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE Manager Server 4.1","product_id":"SUSE Manager Server 4.1:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE Manager Server 4.1"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"libtcnative-1-0 as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:libtcnative-1-0"},"product_reference":"libtcnative-1-0","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"}]},"vulnerabilities":[{"cve":"CVE-2018-8020","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2018-8020"}],"notes":[{"category":"general","text":"Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check OCSP pre-produced responses, which are lists (multiple entries) of certificate statuses. Subsequently, revoked client certificates may not be properly identified, allowing for users to authenticate with revoked certificates to connections that require mutual TLS. Users not using OCSP checks are not affected by this vulnerability.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise High Performance Computing 12 SP5:libtcnative-1-0-1.2.23-3.3.3","SUSE Linux Enterprise Point of Sale 11 SP3:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 11 SP1-TERADATA:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 11 SP3-TERADATA:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 11 SP4-LTSS:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 12 SP4:libtcnative-1-0-1.2.17-1.12","SUSE Linux Enterprise Server 12 SP5:libtcnative-1-0-1.2.23-3.3.3","SUSE Linux Enterprise Software Development Kit 12 SP4:libtcnative-1-0-devel-1.2.17-1.12","SUSE Linux Enterprise Software Development Kit 12 SP5:libtcnative-1-0-devel-1.2.23-3.3.3"],"known affected":["HPE Helion OpenStack 8:libtcnative-1-0","SUSE Linux Enterprise Server 12 SP2-BCL:libtcnative-1-0","SUSE Linux Enterprise Server Teradata 12 SP3:libtcnative-1-0","SUSE OpenStack Cloud 8:libtcnative-1-0","SUSE OpenStack Cloud Crowbar 8:libtcnative-1-0"],"known not affected":["SUSE Enterprise Storage 7:libtcnative-1-0","SUSE Linux Enterprise High Performance Computing 12 SP5:libtcnative-1-0","SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libtcnative-1-0","SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libtcnative-1-0-devel","SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libtcnative-1-0","SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libtcnative-1-0-devel","SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libtcnative-1-0","SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libtcnative-1-0-devel","SUSE Linux Enterprise Module for Basesystem 15 SP3:libtcnative-1-0","SUSE Linux Enterprise Module for Basesystem 15 SP4:libtcnative-1-0","SUSE Linux Enterprise Module for Basesystem 15 SP5:libtcnative-1-0","SUSE Linux Enterprise Module for Web and Scripting 15 SP3:libtcnative-1-0","SUSE Linux Enterprise Module for Web and Scripting 15 SP3:libtcnative-1-0-devel","SUSE Linux Enterprise Module for Web and Scripting 15 SP4:libtcnative-1-0","SUSE Linux Enterprise Module for Web and Scripting 15 SP4:libtcnative-1-0-devel","SUSE Linux Enterprise Module for Web and Scripting 15 SP5:libtcnative-1-0","SUSE Linux Enterprise Module for Web and Scripting 15 SP5:libtcnative-1-0-devel","SUSE Linux Enterprise Real Time 15 SP2:libtcnative-1-0","SUSE Linux Enterprise Server 12 SP4-ESPOS:libtcnative-1-0","SUSE Linux Enterprise Server 12 SP4-LTSS:libtcnative-1-0","SUSE Linux Enterprise Server 12 SP5:libtcnative-1-0","SUSE Linux Enterprise Server 15 SP2-LTSS:libtcnative-1-0","SUSE Linux Enterprise Server 15 SP2-LTSS:libtcnative-1-0-devel","SUSE Linux Enterprise Server Business Critical Linux 15 SP1:libtcnative-1-0","SUSE Linux Enterprise Server Business Critical Linux 15 SP2:libtcnative-1-0","SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtcnative-1-0","SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtcnative-1-0","SUSE Linux Enterprise Server for SAP Applications 15 SP2:libtcnative-1-0","SUSE Linux Enterprise Server for SAP Applications 15 SP2:libtcnative-1-0-devel","SUSE Manager Proxy 4.1:libtcnative-1-0","SUSE Manager Retail Branch Server 4.1:libtcnative-1-0","SUSE Manager Server 4.1:libtcnative-1-0","SUSE OpenStack Cloud 9:libtcnative-1-0","SUSE OpenStack Cloud Crowbar 9:libtcnative-1-0"]},"references":[{"category":"external","summary":"CVE-2018-8020","url":"https://www.suse.com/security/cve/CVE-2018-8020"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1103347 for CVE-2018-8020","url":"https://bugzilla.suse.com/1103347"},{"category":"external","summary":"Advisory link for SUSE-SU-2019:14014-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2019-April/005314.html"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise High Performance Computing 12 SP5:libtcnative-1-0-1.2.23-3.3.3","SUSE Linux Enterprise Point of Sale 11 SP3:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 11 SP1-TERADATA:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 11 SP3-TERADATA:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 11 SP4-LTSS:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 12 SP4:libtcnative-1-0-1.2.17-1.12","SUSE Linux Enterprise Server 12 SP5:libtcnative-1-0-1.2.23-3.3.3","SUSE Linux Enterprise Software Development Kit 12 SP4:libtcnative-1-0-devel-1.2.17-1.12","SUSE Linux Enterprise Software Development Kit 12 SP5:libtcnative-1-0-devel-1.2.23-3.3.3"]}],"scores":[{"cvss_v3":{"baseScore":7.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.0"},"products":["SUSE Linux Enterprise High Performance Computing 12 SP5:libtcnative-1-0-1.2.23-3.3.3","SUSE Linux Enterprise Point of Sale 11 SP3:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 11 SP1-TERADATA:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 11 SP3-TERADATA:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 11 SP4-LTSS:libtcnative-1-0-1.3.4-12.5.5.2","SUSE Linux Enterprise Server 12 SP4:libtcnative-1-0-1.2.17-1.12","SUSE Linux Enterprise Server 12 SP5:libtcnative-1-0-1.2.23-3.3.3","SUSE Linux Enterprise Software Development Kit 12 SP4:libtcnative-1-0-devel-1.2.17-1.12","SUSE Linux Enterprise Software Development Kit 12 SP5:libtcnative-1-0-devel-1.2.23-3.3.3"]}],"threats":[{"category":"impact","date":"2018-07-31T14:55:54Z","details":"important"}],"title":"CVE-2018-8020"}]}