Every CVE Search/ Get API key

CVE-2017-15638

The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2,...

6.5 MediumFix available

The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for rpc services.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
Low

Exploit likelihood

1.23%Up 0.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for rpc services.

Record
CVE-2017-15638
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:P/I:N/A:P
Updated
2026-11-02
CVE List No score

The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for rpc services.

Record
CVE-2017-15638
Updated
2026-11-02
EUVDEUVD-2017-7089 No score

The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for rpc services.

Record
EUVD-2017-7089
Updated
2026-11-03
GitHub AdvisoriesGHSA-v93v-g9vq-9v7p 6.5

The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2,...

The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for rpc services.

Record
GHSA-v93v-g9vq-9v7p
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVSUSE-SU-2017:2923-1 No score

Security update for SuSEfirewall2

This update for SuSEfirewall2 fixes the following issues:

  • CVE-2017-15638: Fixed a security issue with too open implicit portmapper rules (bsc#1064127): A source net restriction for rpc services was not taken into account for the implicitly added rules for port 111, making the portmap service accessible to everyone in the affected zone.
Record
SUSE-SU-2017:2923-1
Updated
2026-11-02
OSVSUSE-SU-2017:2932-1 No score

Security update for SuSEfirewall2

This update for SuSEfirewall2 fixes the following issues:

  • CVE-2017-15638: Fixed a security issue with too open implicit portmapper rules (bsc#1064127): A source net restriction for rpc services was not taken into account for the implicitly added rules for port 111, making the portmap service accessible to everyone in the affected zone.
Record
SUSE-SU-2017:2932-1
Updated
2026-11-02
OSVSUSE-SU-2017:2935-1 No score

Security update for SuSEfirewall2

This update for SuSEfirewall2 fixes the following issues:

  • CVE-2017-15638: Fixed security issue with too open implicit portmapper rules (bsc#1064127): A source net restriction for rpc services was not taken into account for the implicitly added rules for port 111, making the portmap service accessible to everyone in the affected zone when the 'rpc' matching was used.
Record
SUSE-SU-2017:2935-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
SuSEfirewall2
SUSE:Linux Enterprise Server 11 SP4
 before 3.6_SVNr208-2.18.3.1
3.6_SVNr208-2.18.3.1
SuSEfirewall2
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.6_SVNr208-2.18.3.1
3.6_SVNr208-2.18.3.1
SuSEfirewall2
SUSE:Linux Enterprise Desktop 12 SP2
 before 3.6.312-2.13.1
3.6.312-2.13.1
SuSEfirewall2
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 3.6.312-2.13.1
3.6.312-2.13.1
SuSEfirewall2
SUSE:Linux Enterprise Server 12 SP2
 before 3.6.312-2.13.1
3.6.312-2.13.1
SuSEfirewall2
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 3.6.312-2.13.1
3.6.312-2.13.1
SuSEfirewall2
SUSE:Linux Enterprise Desktop 12 SP3
 before 3.6.312.333-3.10.1
3.6.312.333-3.10.1
SuSEfirewall2
SUSE:Linux Enterprise Server 12 SP3
 before 3.6.312.333-3.10.1
3.6.312.333-3.10.1
SuSEfirewall2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 3.6.312.333-3.10.1
3.6.312.333-3.10.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-15638 is a medium vulnerability (CVSS 6.5) in Suse Susefirewall2, published November 2, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 69th percentile. Fixed in SuSEfirewall2 3.6_SVNr208-2.18.3.1.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open