{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "state": "PUBLISHED", "cveId": "CVE-2021-25316", "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "assignerShortName": "suse", "dateUpdated": "2024-09-17T03:32:49.137Z", "dateReserved": "2021-01-19T00:00:00.000Z", "datePublished": "2021-04-14T09:55:12.766Z" }, "containers": { "cna": { "title": "Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools", "datePublic": "2021-02-28T00:00:00.000Z", "providerMetadata": { "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2023-01-19T00:00:00.000Z" }, "descriptions": [ { "lang": "en", "value": "A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1." } ], "affected": [ { "vendor": "SUSE", "product": "SUSE Linux Enterprise Server 12-SP5", "versions": [ { "version": "s390-tools", "status": "affected", "lessThan": "2.1.0-18.29.1", "versionType": "custom" } ] }, { "vendor": "SUSE", "product": "SUSE Linux Enterprise Server 15-SP2", "versions": [ { "version": "s390-tools", "status": "affected", "lessThan": "2.11.0-9.20.1", "versionType": "custom" } ] } ], "references": [ { "url": "https://bugzilla.suse.com/show_bug.cgi?id=1182777" } ], "credits": [ { "lang": "en", "value": "Wolfgang Frisch of SUSE" } ], "metrics": [ { "cvssV3_1": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW" } } ], "problemTypes": [ { "descriptions": [ { "type": "CWE", "lang": "en", "description": "CWE-377: Insecure Temporary File", "cweId": "CWE-377" } ] } ], "x_generator": { "engine": "Vulnogram 0.0.9" }, "source": { "advisory": "https://bugzilla.suse.com/show_bug.cgi?id=1182777", "defect": [ "1182777" ], "discovery": "INTERNAL" } }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T20:03:05.203Z" }, "title": "CVE Program Container", "references": [ { "url": "https://bugzilla.suse.com/show_bug.cgi?id=1182777", "tags": [ "x_transferred" ] } ] } ] } }