CVE catalog

CVE-2020-35458

Security update for hawk2

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
5.56% · Oct 27, 2026

This update for hawk2 fixes the following issues: hawk2 was updated to version 2.5. Security issue fixed: - Fixed another possible code execution vulnerability in the controller code (bsc#1179998).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susehawk2linux enterprise high availability extension 12 sp32.5.0+git.1611141696.64c61e0c-2.36.1fixed
Susehawk2linux enterprise high availability extension 12 sp42.5.0+git.1611141696.64c61e0c-3.24.1fixed
Susehawk2linux enterprise high availability extension 12 sp52.5.0+git.1611141696.64c61e0c-3.24.1fixed
Susehawk2linux enterprise high availability extension 12 sp42.4.0+git.1607523195.05cd3222-3.21.1fixed
Susehawk2linux enterprise high availability extension 12 sp52.4.0+git.1607523195.05cd3222-3.21.1fixed
Susehawk2linux enterprise high availability extension 152.4.0+git.1611141202.2fe6369e-3.21.1fixed
Susehawk2linux enterprise high availability extension 15 sp12.4.0+git.1611141202.2fe6369e-3.21.1fixed
Susehawk2linux enterprise high availability extension 15 sp22.4.0+git.1611141202.2fe6369e-3.21.1fixed
Susehawk2linux enterprise high availability extension 12 sp32.4.0+git.1607523195.05cd3222-2.33.1fixed
Opensusehawk2leap 15.12.4.0+git.1611141202.2fe6369e-lp151.2.21.1fixed
Opensusehawk2tumbleweed2.6.4+git.1682509819.1ff135ea-1.1fixed
Opensusehawk2leap 15.22.4.0+git.1611141202.2fe6369e-lp152.2.12.1fixed
Opensusehawk2leap 15.22.3.0+git.1603969748.10468582-lp152.2.9.1fixed
Opensusehawk2leap 15.12.3.0+git.1603969748.10468582-lp151.2.18.1fixed
Susehawk2linux enterprise high availability extension 152.3.0+git.1603969748.10468582-3.18.1fixed
Susehawk2linux enterprise high availability extension 15 sp12.3.0+git.1603969748.10468582-3.18.1fixed
Susehawk2linux enterprise high availability extension 15 sp22.3.0+git.1603969748.10468582-3.18.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susehawk2rpmlinux enterprise high availability extension 12 sp32.5.0+git.1611141696.64c61e0c-2.36.1Not reportedSUSE-SU-2021:0198-1Not reported
Susehawk2rpmlinux enterprise high availability extension 12 sp42.5.0+git.1611141696.64c61e0c-3.24.1Not reportedSUSE-SU-2021:0192-1Not reported
Susehawk2rpmlinux enterprise high availability extension 12 sp52.5.0+git.1611141696.64c61e0c-3.24.1Not reportedSUSE-SU-2021:0192-1Not reported
Susehawk2rpmlinux enterprise high availability extension 12 sp42.4.0+git.1607523195.05cd3222-3.21.1Not reportedSUSE-SU-2021:0089-1Not reported
Susehawk2rpmlinux enterprise high availability extension 12 sp52.4.0+git.1607523195.05cd3222-3.21.1Not reportedSUSE-SU-2021:0089-1Not reported
Susehawk2rpmlinux enterprise high availability extension 152.4.0+git.1611141202.2fe6369e-3.21.1Not reportedSUSE-SU-2021:0200-1Not reported
Susehawk2rpmlinux enterprise high availability extension 15 sp12.4.0+git.1611141202.2fe6369e-3.21.1Not reportedSUSE-SU-2021:0200-1Not reported
Susehawk2rpmlinux enterprise high availability extension 15 sp22.4.0+git.1611141202.2fe6369e-3.21.1Not reportedSUSE-SU-2021:0200-1Not reported
Susehawk2rpmlinux enterprise high availability extension 12 sp32.4.0+git.1607523195.05cd3222-2.33.1Not reportedSUSE-SU-2021:0090-1Not reported
Opensusehawk2rpmleap 15.12.4.0+git.1611141202.2fe6369e-lp151.2.21.1Not reportedOPENSUSE-SU-2021:0147-1Not reported
Opensusehawk2rpmtumbleweed2.6.4+git.1682509819.1ff135ea-1.1Not reportedOPENSUSE-SU-2024:12952-1Not reported
Opensusehawk2rpmleap 15.22.4.0+git.1611141202.2fe6369e-lp152.2.12.1Not reportedOPENSUSE-SU-2021:0144-1Not reported
Opensusehawk2rpmleap 15.22.3.0+git.1603969748.10468582-lp152.2.9.1Not reportedOPENSUSE-SU-2021:0054-1Not reported
Opensusehawk2rpmleap 15.12.3.0+git.1603969748.10468582-lp151.2.18.1Not reportedOPENSUSE-SU-2021:0074-1Not reported
Susehawk2rpmlinux enterprise high availability extension 152.3.0+git.1603969748.10468582-3.18.1Not reportedSUSE-SU-2021:0088-1Not reported
Susehawk2rpmlinux enterprise high availability extension 15 sp12.3.0+git.1603969748.10468582-3.18.1Not reportedSUSE-SU-2021:0088-1Not reported
Susehawk2rpmlinux enterprise high availability extension 15 sp22.3.0+git.1603969748.10468582-3.18.1Not reportedSUSE-SU-2021:0088-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [hawk2]Fixed

    Source package: [hawk2]

    Details (1)

    • 2.7.1+git.1787667448.cd1d963e-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 2.6.4+git.1682509819.1ff135ea-1.1

      pypi · hawk2 · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]