<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2018:1080-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2018-04-25T13:27:56Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2018-04-25T13:27:56Z</InitialReleaseDate>
    <CurrentReleaseDate>2018-04-25T13:27:56Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bnc#1068032).

  Enhancements and bugfixes over the previous fixes have been added to this kernel.

- CVE-2018-10087: The kernel_wait4 function in kernel/exit.c might have allowed local users to cause a denial of service by triggering an attempted use of the -INT_MIN value (bnc#1089608).
- CVE-2018-7757: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c allowed local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file (bnc#1084536).
- CVE-2018-7566: There was a buffer overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user (bnc#1083483).
- CVE-2017-0861: Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem allowed attackers to gain privileges via unspecified vectors (bnc#1088260).
- CVE-2018-8822: Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c could be exploited by malicious NCPFS servers to crash the kernel or execute code (bnc#1086162).
- CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver. (bnc#1072865).
- CVE-2017-18203: The dm_get_from_kobject function in drivers/md/dm.c allowed local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices (bnc#1083242).
- CVE-2017-16911: The vhci_hcd driver allowed allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP (bnc#1078674).
- CVE-2017-18208: The madvise_willneed function in mm/madvise.c local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping (bnc#1083494).
- CVE-2017-16644: The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c allowed local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1067118).
- CVE-2018-6927: The futex_requeue function in kernel/futex.c in the Linux kernel might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value (bnc#1080757).
- CVE-2017-16914: The 'stub_send_ret_submit()' function (drivers/usb/usbip/stub_tx.c) allowed attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet (bnc#1078669).
- CVE-2016-7915: The hid_input_field function in drivers/hid/hid-core.c allowed physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) by connecting a device, as demonstrated by a Logitech DJ receiver (bnc#1010470).
- CVE-2015-5156: The virtnet_probe function in drivers/net/virtio_net.c attempted to support a FRAGLIST feature without proper memory allocation, which allowed guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets (bnc#940776).
- CVE-2017-12190: The bio_map_user_iov and bio_unmap_user functions in block/bio.c did unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition (bnc#1062568).
- CVE-2017-16912: The 'get_pipe()' function (drivers/usb/usbip/stub_rx.c) allowed attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet (bnc#1078673).
- CVE-2017-16913: The 'stub_recv_cmd_submit()' function (drivers/usb/usbip/stub_rx.c) when handling CMD_SUBMIT packets allowed attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet (bnc#1078672).

The following non-security bugs were fixed:

- af_iucv: enable control sends in case of SEND_SHUTDOWN (bnc#1085513, LTC#165135).
- cifs: fix buffer overflow in cifs_build_path_to_root() (bsc#1085113).
- drm/mgag200: fix a test in mga_vga_mode_valid() (bsc#1087092).
- hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers) (bnc#1013018).
- hrtimer: Reset hrtimer cpu base proper on CPU hotplug (bnc#1013018).
- ide-cd: workaround VMware ESXi cdrom emulation bug (bsc#1080813).
- ipc/msg: introduce msgctl(MSG_STAT_ANY) (bsc#1072689).
- ipc/sem: introduce semctl(SEM_STAT_ANY) (bsc#1072689).
- ipc/shm: introduce shmctl(SHM_STAT_ANY) (bsc#1072689).
- jffs2: Fix use-after-free bug in jffs2_iget()'s error handling path (git-fixes).
- kabi: x86/kaiser: properly align trampoline stack.
- keys: do not let add_key() update an uninstantiated key (bnc#1063416).
- keys: prevent creating a different user's keyrings (bnc#1065999).
- leds: do not overflow sysfs buffer in led_trigger_show (bsc#1080464).
- mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack (bnc#1039348).
- nfsv4: fix getacl head length estimation (git-fixes).
- pci: Use function 0 VPD for identical functions, regular VPD for others (bnc#943786 git-fixes).
- pipe: actually allow root to exceed the pipe buffer limits (git-fixes).
- posix-timers: Protect posix clock array access against speculation (bnc#1081358).
- powerpc/pseries: Support firmware disable of RFI flush (bsc#1068032, bsc#1075088).
- qeth: repair SBAL elements calculation (bnc#1085513, LTC#165484).
- Revert 'USB: cdc-acm: fix broken runtime suspend' (bsc#1067912)
- s390/qeth: fix underestimated count of buffer elements (bnc#1082091, LTC#164529).
- scsi: sr: workaround VMware ESXi cdrom emulation bug (bsc#1080813).
- usbnet: Fix a race between usbnet_stop() and the BH (bsc#1083275).
- x86-64: Move the 'user' vsyscall segment out of the data segment (bsc#1082424).
- x86/espfix: Fix return stack in do_double_fault() (bsc#1085279).
- x86/kaiser: properly align trampoline stack (bsc#1087260).
- x86/retpoline: do not perform thunk calls in ring3 vsyscall code (bsc#1085331).
- xen/x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs (bsc#909077).
- xen/x86/cpu: Check speculation control CPUID bit (bsc#1068032).
- xen/x86/cpu: Factor out application of forced CPU caps (bsc#1075994 bsc#1075091).
- xen/x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option (bsc#1065600).
- xen/x86/cpu: Sync CPU feature flags late (bsc#1075994 bsc#1075091).
- xen/x86/entry: Use IBRS on entry to kernel space (bsc#1068032).
- xen/x86/idle: Toggle IBRS when going idle (bsc#1068032).
- xen/x86/kaiser: Move feature detection up (bsc#1068032).
- xfs: check for buffer errors before waiting (bsc#1052943).
- xfs: fix allocbt cursor leak in xfs_alloc_ag_vextent_near (bsc#1087762).
- xfs: really fix the cursor leak in xfs_alloc_ag_vextent_near (bsc#1087762).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">sdksp4-kernel-source-20180417-13574,slessp4-kernel-source-20180417-13574,slexsp3-kernel-source-20180417-13574</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      <Description>Link for SUSE-SU-2018:1080-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html</URL>
      <Description>E-Mail link for SUSE-SU-2018:1080-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1010470</URL>
      <Description>SUSE Bug 1010470</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1013018</URL>
      <Description>SUSE Bug 1013018</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1039348</URL>
      <Description>SUSE Bug 1039348</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1052943</URL>
      <Description>SUSE Bug 1052943</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1062568</URL>
      <Description>SUSE Bug 1062568</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1062840</URL>
      <Description>SUSE Bug 1062840</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1063416</URL>
      <Description>SUSE Bug 1063416</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1063516</URL>
      <Description>SUSE Bug 1063516</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1065600</URL>
      <Description>SUSE Bug 1065600</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1065999</URL>
      <Description>SUSE Bug 1065999</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1067118</URL>
      <Description>SUSE Bug 1067118</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1067912</URL>
      <Description>SUSE Bug 1067912</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1068032</URL>
      <Description>SUSE Bug 1068032</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1072689</URL>
      <Description>SUSE Bug 1072689</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1072865</URL>
      <Description>SUSE Bug 1072865</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1075088</URL>
      <Description>SUSE Bug 1075088</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1075091</URL>
      <Description>SUSE Bug 1075091</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1075994</URL>
      <Description>SUSE Bug 1075994</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1078669</URL>
      <Description>SUSE Bug 1078669</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1078672</URL>
      <Description>SUSE Bug 1078672</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1078673</URL>
      <Description>SUSE Bug 1078673</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1078674</URL>
      <Description>SUSE Bug 1078674</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1080464</URL>
      <Description>SUSE Bug 1080464</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1080757</URL>
      <Description>SUSE Bug 1080757</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1080813</URL>
      <Description>SUSE Bug 1080813</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1081358</URL>
      <Description>SUSE Bug 1081358</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1082091</URL>
      <Description>SUSE Bug 1082091</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1082424</URL>
      <Description>SUSE Bug 1082424</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1083242</URL>
      <Description>SUSE Bug 1083242</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1083275</URL>
      <Description>SUSE Bug 1083275</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1083483</URL>
      <Description>SUSE Bug 1083483</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1083494</URL>
      <Description>SUSE Bug 1083494</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1084536</URL>
      <Description>SUSE Bug 1084536</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1085113</URL>
      <Description>SUSE Bug 1085113</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1085279</URL>
      <Description>SUSE Bug 1085279</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1085331</URL>
      <Description>SUSE Bug 1085331</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1085513</URL>
      <Description>SUSE Bug 1085513</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1086162</URL>
      <Description>SUSE Bug 1086162</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1087092</URL>
      <Description>SUSE Bug 1087092</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1087260</URL>
      <Description>SUSE Bug 1087260</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1087762</URL>
      <Description>SUSE Bug 1087762</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1088147</URL>
      <Description>SUSE Bug 1088147</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1088260</URL>
      <Description>SUSE Bug 1088260</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1089608</URL>
      <Description>SUSE Bug 1089608</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/909077</URL>
      <Description>SUSE Bug 909077</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/940776</URL>
      <Description>SUSE Bug 940776</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/943786</URL>
      <Description>SUSE Bug 943786</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-5156/</URL>
      <Description>SUSE CVE CVE-2015-5156 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-7915/</URL>
      <Description>SUSE CVE CVE-2016-7915 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-0861/</URL>
      <Description>SUSE CVE CVE-2017-0861 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-12190/</URL>
      <Description>SUSE CVE CVE-2017-12190 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-13166/</URL>
      <Description>SUSE CVE CVE-2017-13166 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-16644/</URL>
      <Description>SUSE CVE CVE-2017-16644 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-16911/</URL>
      <Description>SUSE CVE CVE-2017-16911 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-16912/</URL>
      <Description>SUSE CVE CVE-2017-16912 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-16913/</URL>
      <Description>SUSE CVE CVE-2017-16913 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-16914/</URL>
      <Description>SUSE CVE CVE-2017-16914 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-18203/</URL>
      <Description>SUSE CVE CVE-2017-18203 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-18208/</URL>
      <Description>SUSE CVE CVE-2017-18208 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-5715/</URL>
      <Description>SUSE CVE CVE-2017-5715 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2018-10087/</URL>
      <Description>SUSE CVE CVE-2018-10087 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2018-6927/</URL>
      <Description>SUSE CVE CVE-2018-6927 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2018-7566/</URL>
      <Description>SUSE CVE CVE-2018-7566 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2018-7757/</URL>
      <Description>SUSE CVE CVE-2018-7757 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2018-8822/</URL>
      <Description>SUSE CVE CVE-2018-8822 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4" CPE="cpe:/o:suse:suse_sles:11:sp4">SUSE Linux Enterprise Server 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4" CPE="cpe:/o:suse:sles_sap:11:sp4">SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4" CPE="cpe:/a:suse:sle-sdk:11:sp4">SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-docs-3.0.101-108.38.1">kernel-docs-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-bigmem-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-bigmem-3.0.101-108.38.1">kernel-bigmem-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-bigmem-base-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-bigmem-base-3.0.101-108.38.1">kernel-bigmem-base-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-bigmem-devel-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-bigmem-devel-3.0.101-108.38.1">kernel-bigmem-devel-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-default-3.0.101-108.38.1">kernel-default-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-default-base-3.0.101-108.38.1">kernel-default-base-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-devel-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-default-devel-3.0.101-108.38.1">kernel-default-devel-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-man-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-default-man-3.0.101-108.38.1">kernel-default-man-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-ec2-3.0.101-108.38.1">kernel-ec2-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-base-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-ec2-base-3.0.101-108.38.1">kernel-ec2-base-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-devel-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-ec2-devel-3.0.101-108.38.1">kernel-ec2-devel-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-pae-3.0.101-108.38.1">kernel-pae-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-base-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-pae-base-3.0.101-108.38.1">kernel-pae-base-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-devel-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-pae-devel-3.0.101-108.38.1">kernel-pae-devel-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ppc64-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-ppc64-3.0.101-108.38.1">kernel-ppc64-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ppc64-base-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-ppc64-base-3.0.101-108.38.1">kernel-ppc64-base-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ppc64-devel-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-ppc64-devel-3.0.101-108.38.1">kernel-ppc64-devel-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-source-3.0.101-108.38.1">kernel-source-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-syms-3.0.101-108.38.1">kernel-syms-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-trace-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-trace-3.0.101-108.38.1">kernel-trace-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-trace-base-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-trace-base-3.0.101-108.38.1">kernel-trace-base-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-trace-devel-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-trace-devel-3.0.101-108.38.1">kernel-trace-devel-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-xen-3.0.101-108.38.1">kernel-xen-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-base-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-xen-base-3.0.101-108.38.1">kernel-xen-base-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-devel-3.0.101-108.38.1">
      <FullProductName ProductID="kernel-xen-devel-3.0.101-108.38.1">kernel-xen-devel-3.0.101-108.38.1</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-bigmem-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1">kernel-bigmem-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1">kernel-bigmem-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1">kernel-bigmem-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1">kernel-default-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1">kernel-default-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1">kernel-default-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1">kernel-default-man-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1">kernel-ec2-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1">kernel-ec2-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1">kernel-ec2-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1">kernel-pae-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1">kernel-pae-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1">kernel-pae-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1">kernel-ppc64-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1">kernel-ppc64-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1">kernel-ppc64-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1">kernel-source-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1">kernel-syms-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1">kernel-trace-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1">kernel-trace-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1">kernel-trace-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1">kernel-xen-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1">kernel-xen-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1">kernel-xen-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1">kernel-bigmem-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1">kernel-bigmem-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1">kernel-bigmem-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1">kernel-default-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1">kernel-default-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1">kernel-default-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1">kernel-default-man-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1">kernel-ec2-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1">kernel-ec2-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1">kernel-ec2-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1">kernel-pae-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1">kernel-pae-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1">kernel-pae-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1">kernel-ppc64-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1">kernel-ppc64-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1">kernel-ppc64-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1">kernel-source-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1">kernel-syms-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1">kernel-trace-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1">kernel-trace-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1">kernel-trace-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1">kernel-xen-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-base-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1">kernel-xen-base-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-devel-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1">kernel-xen-devel-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-3.0.101-108.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1">kernel-docs-3.0.101-108.38.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets.</Note>
    </Notes>
    <CVE>CVE-2015-5156</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6</BaseScore>
        <Vector>AV:L/AC:H/Au:S/C:C/I:C/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5156.html</URL>
        <Description>CVE-2015-5156</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1123903</URL>
        <Description>SUSE Bug 1123903</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/940776</URL>
        <Description>SUSE Bug 940776</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/945048</URL>
        <Description>SUSE Bug 945048</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951638</URL>
        <Description>SUSE Bug 951638</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The hid_input_field function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) by connecting a device, as demonstrated by a Logitech DJ receiver.</Note>
    </Notes>
    <CVE>CVE-2016-7915</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.7</BaseScore>
        <Vector>AV:L/AC:H/Au:N/C:P/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7915.html</URL>
        <Description>CVE-2016-7915</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1010470</URL>
        <Description>SUSE Bug 1010470</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2017-0861</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-0861.html</URL>
        <Description>CVE-2017-0861</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1088260</URL>
        <Description>SUSE Bug 1088260</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1088268</URL>
        <Description>SUSE Bug 1088268</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1115893</URL>
        <Description>SUSE Bug 1115893</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.</Note>
    </Notes>
    <CVE>CVE-2017-12190</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>5</BaseScore>
        <Vector>AV:A/AC:L/Au:M/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-12190.html</URL>
        <Description>CVE-2017-12190</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1062568</URL>
        <Description>SUSE Bug 1062568</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.</Note>
    </Notes>
    <CVE>CVE-2017-13166</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-13166.html</URL>
        <Description>CVE-2017-13166</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1072865</URL>
        <Description>SUSE Bug 1072865</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1085447</URL>
        <Description>SUSE Bug 1085447</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device.</Note>
    </Notes>
    <CVE>CVE-2017-16644</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.7</BaseScore>
        <Vector>AV:L/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-16644.html</URL>
        <Description>CVE-2017-16644</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1067118</URL>
        <Description>SUSE Bug 1067118</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1146519</URL>
        <Description>SUSE Bug 1146519</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.</Note>
    </Notes>
    <CVE>CVE-2017-16911</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-16911.html</URL>
        <Description>CVE-2017-16911</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1078674</URL>
        <Description>SUSE Bug 1078674</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.</Note>
    </Notes>
    <CVE>CVE-2017-16912</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-16912.html</URL>
        <Description>CVE-2017-16912</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1078673</URL>
        <Description>SUSE Bug 1078673</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.</Note>
    </Notes>
    <CVE>CVE-2017-16913</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-16913.html</URL>
        <Description>CVE-2017-16913</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1078672</URL>
        <Description>SUSE Bug 1078672</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet.</Note>
    </Notes>
    <CVE>CVE-2017-16914</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-16914.html</URL>
        <Description>CVE-2017-16914</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1078669</URL>
        <Description>SUSE Bug 1078669</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices.</Note>
    </Notes>
    <CVE>CVE-2017-18203</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-18203.html</URL>
        <Description>CVE-2017-18203</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1083242</URL>
        <Description>SUSE Bug 1083242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.</Note>
    </Notes>
    <CVE>CVE-2017-18208</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-18208.html</URL>
        <Description>CVE-2017-18208</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1083494</URL>
        <Description>SUSE Bug 1083494</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.</Note>
    </Notes>
    <CVE>CVE-2017-5715</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.7</BaseScore>
        <Vector>AV:L/AC:M/Au:N/C:C/I:N/A:N</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5715.html</URL>
        <Description>CVE-2017-5715</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1068032</URL>
        <Description>SUSE Bug 1068032</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074562</URL>
        <Description>SUSE Bug 1074562</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074578</URL>
        <Description>SUSE Bug 1074578</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074701</URL>
        <Description>SUSE Bug 1074701</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074741</URL>
        <Description>SUSE Bug 1074741</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074919</URL>
        <Description>SUSE Bug 1074919</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075006</URL>
        <Description>SUSE Bug 1075006</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075007</URL>
        <Description>SUSE Bug 1075007</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075262</URL>
        <Description>SUSE Bug 1075262</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075419</URL>
        <Description>SUSE Bug 1075419</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1076115</URL>
        <Description>SUSE Bug 1076115</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1076372</URL>
        <Description>SUSE Bug 1076372</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1076606</URL>
        <Description>SUSE Bug 1076606</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1078353</URL>
        <Description>SUSE Bug 1078353</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1080039</URL>
        <Description>SUSE Bug 1080039</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087887</URL>
        <Description>SUSE Bug 1087887</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087939</URL>
        <Description>SUSE Bug 1087939</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1088147</URL>
        <Description>SUSE Bug 1088147</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1089055</URL>
        <Description>SUSE Bug 1089055</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1095735</URL>
        <Description>SUSE Bug 1095735</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1102517</URL>
        <Description>SUSE Bug 1102517</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1105108</URL>
        <Description>SUSE Bug 1105108</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1126516</URL>
        <Description>SUSE Bug 1126516</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1173489</URL>
        <Description>SUSE Bug 1173489</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178658</URL>
        <Description>SUSE Bug 1178658</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201457</URL>
        <Description>SUSE Bug 1201457</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201877</URL>
        <Description>SUSE Bug 1201877</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203236</URL>
        <Description>SUSE Bug 1203236</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value.</Note>
    </Notes>
    <CVE>CVE-2018-10087</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2018-10087.html</URL>
        <Description>CVE-2018-10087</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1089608</URL>
        <Description>SUSE Bug 1089608</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value.</Note>
    </Notes>
    <CVE>CVE-2018-6927</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2018-6927.html</URL>
        <Description>CVE-2018-6927</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1080757</URL>
        <Description>SUSE Bug 1080757</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.</Note>
    </Notes>
    <CVE>CVE-2018-7566</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2018-7566.html</URL>
        <Description>CVE-2018-7566</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1083483</URL>
        <Description>SUSE Bug 1083483</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1083488</URL>
        <Description>SUSE Bug 1083488</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.</Note>
    </Notes>
    <CVE>CVE-2018-7757</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2018-7757.html</URL>
        <Description>CVE-2018-7757</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1084536</URL>
        <Description>SUSE Bug 1084536</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087209</URL>
        <Description>SUSE Bug 1087209</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through 4.15.11, and in drivers/staging/ncpfs/ncplib_kernel.c in the Linux kernel 4.16-rc through 4.16-rc6, could be exploited by malicious NCPFS servers to crash the kernel or execute code.</Note>
    </Notes>
    <CVE>CVE-2018-8822</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2018-8822.html</URL>
        <Description>CVE-2018-8822</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1086162</URL>
        <Description>SUSE Bug 1086162</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1090404</URL>
        <Description>SUSE Bug 1090404</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
