CVE-2017-15638 Auth bypass in n/a
Remote attackers can bypass access restrictions on the portmap service due to missing source network restrictions in SuSEfirewall2.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-15638?
CVE-2017-15638 is a medium-severity authentication bypass vulnerability in n/a, published on 9 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for _rpc_ services.
Which versions are affected by CVE-2017-15638?
It affects 1 product.
Linux distribution packages (9)
SuSEfirewall2 SUSE:Linux Enterprise Desktop 12 SP2 | All versions | 3.6.312-2.13.1 |
SuSEfirewall2 SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 3.6.312.333-3.10.1 |
SuSEfirewall2 SUSE:Linux Enterprise Server 11 SP4 | All versions | 3.6_SVNr208-2.18.3.1 |
SuSEfirewall2 SUSE:Linux Enterprise Server 12 SP2 | All versions | 3.6.312-2.13.1 |
SuSEfirewall2 SUSE:Linux Enterprise Server 12 SP3 | All versions | 3.6.312.333-3.10.1 |
SuSEfirewall2 SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | All versions | 3.6.312-2.13.1 |
SuSEfirewall2 SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 3.6_SVNr208-2.18.3.1 |
SuSEfirewall2 SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 3.6.312-2.13.1 |
SuSEfirewall2 SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 3.6.312.333-3.10.1 |
Products include Suse Susefirewall2.
How do I fix CVE-2017-15638?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-15638 being exploited?
There is no known exploitation of CVE-2017-15638 in the wild and no public exploit code.
Sources
Also known as GHSA-v93v-g9vq-9v7p, SUSE-SU-2017:2923-1, SUSE-SU-2017:2932-1, SUSE-SU-2017:2935-1.