VDB

SUSE-SU-2024%3A0485-1

SUSE-SU-2024%3A0485-1 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from OSV · Published February 15, 2024

Security update for SUSE Manager Server 4.3

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
subscription-matcherSUSE:Manager Server Module 4.30.35-150400.3.19.5
spacewalk-setupSUSE:Manager Server Module 4.34.3.19-150400.3.30.5
spacewalk-backendSUSE:Manager Proxy Module 4.34.3.27-150400.3.38.2
spacecmdSUSE:Manager Server Module 4.34.3.26-150400.3.33.5
grafana-formulaSUSE:Manager Server Module 4.30.10.0-150400.3.15.5
patterns-suse-managerSUSE:Manager Server Module 4.34.3-150400.5.9.5
susemanager-slsSUSE:Manager Server Module 4.34.3.40-150400.3.44.1
spacewalk-client-toolsSUSE:Manager Server Module 4.34.3.18-150400.3.24.7
supportutils-plugin-susemanagerSUSE:Manager Server Module 4.34.3.10-150400.3.18.5
mgr-daemonSUSE:Manager Proxy Module 4.34.3.8-150400.3.12.5
cobblerSUSE:Manager Server Module 4.33.3.3-150400.5.39.5
saltboot-formulaSUSE:Manager Server Module 4.30.1.1701196218.b6b8ca1-150400.3.15.3, 0.1.1701196218

22 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

VendorProductVersions
SUSE:Manager Server Module 4.3subscription-matcher0
SUSE:Manager Server Module 4.3spacewalk-setup0
SUSE:Manager Proxy Module 4.3spacewalk-backend0
SUSE:Manager Server Module 4.3spacecmd0
SUSE:Manager Server Module 4.3grafana-formula0
SUSE:Manager Server Module 4.3patterns-suse-manager0
SUSE:Manager Server Module 4.3susemanager-sls0
SUSE:Manager Server Module 4.3spacewalk-client-tools0
SUSE:Manager Server Module 4.3supportutils-plugin-susemanager0
SUSE:Manager Proxy Module 4.3mgr-daemon0
SUSE:Manager Server Module 4.3cobbler0
SUSE:Manager Server Module 4.3saltboot-formula0, 0
SUSE:Manager Server Module 4.3liberate-formula0
SUSE:Manager Server Module 4.3jose4j0
SUSE:Manager Server Module 4.3spacewalk-java0
SUSE:Manager Proxy Module 4.3spacewalk-web0
SUSE:Manager Server Module 4.3susemanager-sync-data0
SUSE:Manager Proxy Module 4.3spacewalk-client-tools0
SUSE:Manager Server Module 4.3inter-server-sync0
SUSE:Manager Server Module 4.3prometheus-postgres_exporter0

…and 14 more

Timeline

  • Feb 15, 2024 CVE Published
  • Feb 4, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln SUSE-SU-2024%3A0485-1
vulnetix vdb fixes SUSE-SU-2024%3A0485-1

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2024%253A0485-1/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 29 more

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›