Suse Linux Enterprise High Availability vulnerabilities

2 CVEs affecting Suse Linux Enterprise High Availability, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-18017, published 2018-01-03.

More from Suse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-18017, published 2018-01-03. Critical severity, CVSS 9.8. EPSS: 52.8% chance of exploitation in the next 30 days. The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and…
• CVE-2016-7797, published 2017-03-24. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.