1 line
1.9 KiB
JSON
1 line
1.9 KiB
JSON
{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2017-8495","title":"Title"},{"category":"description","text":"Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange, aka \"Kerberos SNAME Security Feature Bypass Vulnerability\" or Orpheus' Lyre.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2017-8495","url":"https://www.suse.com/security/cve/CVE-2017-8495"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1048278 for CVE-2017-8495","url":"https://bugzilla.suse.com/1048278"}],"title":"SUSE CVE CVE-2017-8495","tracking":{"current_release_date":"2026-11-06T01:15:41Z","generator":{"date":"2026-11-06T01:15:41Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2017-8495","initial_release_date":"2026-11-06T01:15:41Z","revision_history":[{"date":"2026-11-06T01:15:41Z","number":"2","summary":"references added,severity changed from to moderate"}],"status":"interim","version":"2"}}} |