CVE-2021-25316
Assigner: suse
Published: 2021-04-14T00:00:00
State: PUBLISHED
title: Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools
datePublic: 2021-02-28T00:00:00
descriptions: value: A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1.
affected: vendor: SUSE
product: SUSE Linux Enterprise Server 12-SP5
versions: version: s390-tools
status: affected
lessThan: 2.1.0-18.29.1
versionType: custom
vendor: SUSE
product: SUSE Linux Enterprise Server 15-SP2
versions: version: s390-tools
status: affected
lessThan: 2.11.0-9.20.1
versionType: custom
credits: value: Wolfgang Frisch of SUSE
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
baseScore: 3.3
baseSeverity: LOW
problemTypes: descriptions: type: CWE
description: CWE-377: Insecure Temporary File
cweId: CWE-377
x_generator: engine: Vulnogram 0.0.9
source: advisory: https://bugzilla.suse.com/show_bug.cgi?id=1182777
defect: 1182777
discovery: INTERNAL