CVE catalog

CVE-2019-3816

Security update for openwsman

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
14.74% · Oct 25, 2026

This update for openwsman fixes the following issues: Security issues fixed: - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623). - CVE-2019-3833: Fixed a vulnerability in process_connection() which could allow an attacker to trigger an infinite loop which leads to Denial of Service (bsc#1122623). Other issues addressed: - Added OpenSSL 1.1 compatibility - Compilation in debug mode fixed - Directory listing without authentication fixed (bsc#1092206).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Suseopenwsmanlinux enterprise module for server applications 152.6.7-3.3.1fixed
Suseopenwsmanlinux enterprise desktop 12 sp32.4.11-21.8.1fixed
Suseopenwsmanlinux enterprise desktop 12 sp42.4.11-21.8.1fixed
Suseopenwsmanlinux enterprise software development kit 12 sp32.4.11-21.8.1fixed
Suseopenwsmanlinux enterprise software development kit 12 sp42.4.11-21.8.1fixed
Suseopenwsmanlinux enterprise server 12 sp32.4.11-21.8.1fixed
Suseopenwsmanlinux enterprise server for sap applications 12 sp32.4.11-21.8.1fixed
Suseopenwsmanlinux enterprise server 12 sp42.4.11-21.8.1fixed
Suseopenwsmanlinux enterprise server for sap applications 12 sp42.4.11-21.8.1fixed
Opensuseopenwsmanleap 15.02.6.7-lp150.2.3.1fixed
Suseopenwsmanlinux enterprise software development kit 11 sp42.2.3-0.16.8.1fixed
Suseopenwsmanlinux enterprise server 11 sp42.2.3-0.16.8.1fixed
Suseopenwsmanlinux enterprise server for sap applications 11 sp42.2.3-0.16.8.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Suseopenwsmanrpmlinux enterprise module for server applications 152.6.7-3.3.1Not reportedSUSE-SU-2019:0654-1Not reported
Suseopenwsmanrpmlinux enterprise desktop 12 sp32.4.11-21.8.1Not reportedSUSE-SU-2019:0656-1Not reported
Suseopenwsmanrpmlinux enterprise desktop 12 sp42.4.11-21.8.1Not reportedSUSE-SU-2019:0656-1Not reported
Suseopenwsmanrpmlinux enterprise software development kit 12 sp32.4.11-21.8.1Not reportedSUSE-SU-2019:0656-1Not reported
Suseopenwsmanrpmlinux enterprise software development kit 12 sp42.4.11-21.8.1Not reportedSUSE-SU-2019:0656-1Not reported
Suseopenwsmanrpmlinux enterprise server 12 sp32.4.11-21.8.1Not reportedSUSE-SU-2019:0656-1Not reported
Suseopenwsmanrpmlinux enterprise server for sap applications 12 sp32.4.11-21.8.1Not reportedSUSE-SU-2019:0656-1Not reported
Suseopenwsmanrpmlinux enterprise server 12 sp42.4.11-21.8.1Not reportedSUSE-SU-2019:0656-1Not reported
Suseopenwsmanrpmlinux enterprise server for sap applications 12 sp42.4.11-21.8.1Not reportedSUSE-SU-2019:0656-1Not reported
Opensuseopenwsmanrpmleap 15.02.6.7-lp150.2.3.1Not reportedOPENSUSE-SU-2019:1111-1Not reported
Suseopenwsmanrpmlinux enterprise software development kit 11 sp42.2.3-0.16.8.1Not reportedSUSE-SU-2019:13981-1Not reported
Suseopenwsmanrpmlinux enterprise server 11 sp42.2.3-0.16.8.1Not reportedSUSE-SU-2019:13981-1Not reported
Suseopenwsmanrpmlinux enterprise server for sap applications 11 sp42.2.3-0.16.8.1Not reportedSUSE-SU-2019:13981-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]