CVE catalog
CVE-2023-33199
rekor-1.2.1-1.1 on GA media
This update for rekor fixes the following issues: - updated to rekor 1.2.1 (jsc#SLE-23476): - CVE-2023-33199: Fixed that malformed proposed intoto v0.0.2 entries can cause a panic (bsc#1211790).
- Severity
- Medium · CVSS 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.67% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [],
"fixed_versions": [],
"distribution_packages": [
{
"name": "rekor",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.1-150400.4.12.1"
}
]
}
],
"release": "linux enterprise module for basesystem 15 sp4",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.2.1-150400.4.12.1",
"provider_record_id": "SUSE-SU-2023:2515-1"
},
{
"name": "rekor",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.1-150400.4.12.1"
}
]
}
],
"release": "linux enterprise module for basesystem 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.2.1-150400.4.12.1",
"provider_record_id": "SUSE-SU-2023:2515-1"
},
{
"name": "rekor",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.1-150400.4.12.1"
}
]
}
],
"release": "leap 15.4",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.2.1-150400.4.12.1",
"provider_record_id": "SUSE-SU-2023:2515-1"
},
{
"name": "rekor",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.1-150400.4.12.1"
}
]
}
],
"release": "leap 15.5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.2.1-150400.4.12.1",
"provider_record_id": "SUSE-SU-2023:2515-1"
},
{
"name": "rekor",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.1-1.1"
}
]
}
],
"release": "tumbleweed",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.2.1-1.1",
"provider_record_id": "OPENSUSE-SU-2024:12965-1"
}
]
}