CVE-2017-13069 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-13069 Interim 1 38 2024-10-23T00:56:28Z current 2021-05-30T14:00:58Z 2024-10-23T00:56:28Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-13069 QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 bash bash-doc bash-lang libreadline6 libreadline6-32bit readline-doc bash as a component of HPE Helion OpenStack 8 bash-doc as a component of HPE Helion OpenStack 8 libreadline6 as a component of HPE Helion OpenStack 8 libreadline6-32bit as a component of HPE Helion OpenStack 8 readline-doc as a component of HPE Helion OpenStack 8 bash as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 bash as a component of SUSE Linux Enterprise Server 12 SP2-BCL bash-doc as a component of SUSE Linux Enterprise Server 12 SP2-BCL libreadline6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL readline-doc as a component of SUSE Linux Enterprise Server 12 SP2-BCL bash as a component of SUSE Linux Enterprise Server 12 SP3-BCL bash-doc as a component of SUSE Linux Enterprise Server 12 SP3-BCL libreadline6 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP3-BCL readline-doc as a component of SUSE Linux Enterprise Server 12 SP3-BCL bash as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS bash-doc as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libreadline6 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS readline-doc as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS bash as a component of SUSE Linux Enterprise Server 12 SP3-LTSS bash-doc as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libreadline6 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP3-LTSS readline-doc as a component of SUSE Linux Enterprise Server 12 SP3-LTSS bash as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS bash-doc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libreadline6 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS readline-doc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS bash as a component of SUSE Linux Enterprise Server 12 SP4-LTSS bash-doc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libreadline6 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS readline-doc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS bash as a component of SUSE Linux Enterprise Server 12 SP5 bash-doc as a component of SUSE Linux Enterprise Server 12 SP5 libreadline6 as a component of SUSE Linux Enterprise Server 12 SP5 libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP5 readline-doc as a component of SUSE Linux Enterprise Server 12 SP5 bash as a component of SUSE Linux Enterprise Server Teradata 12 SP3 bash as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bash-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libreadline6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libreadline6-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 readline-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bash as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 bash-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libreadline6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libreadline6-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 readline-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 bash as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bash-lang as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 bash as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 bash as a component of SUSE OpenStack Cloud 8 bash-doc as a component of SUSE OpenStack Cloud 8 libreadline6 as a component of SUSE OpenStack Cloud 8 libreadline6-32bit as a component of SUSE OpenStack Cloud 8 readline-doc as a component of SUSE OpenStack Cloud 8 bash as a component of SUSE OpenStack Cloud 9 bash-doc as a component of SUSE OpenStack Cloud 9 libreadline6 as a component of SUSE OpenStack Cloud 9 libreadline6-32bit as a component of SUSE OpenStack Cloud 9 readline-doc as a component of SUSE OpenStack Cloud 9 bash as a component of SUSE OpenStack Cloud Crowbar 8 bash-doc as a component of SUSE OpenStack Cloud Crowbar 8 libreadline6 as a component of SUSE OpenStack Cloud Crowbar 8 libreadline6-32bit as a component of SUSE OpenStack Cloud Crowbar 8 readline-doc as a component of SUSE OpenStack Cloud Crowbar 8 bash as a component of SUSE OpenStack Cloud Crowbar 9 bash-doc as a component of SUSE OpenStack Cloud Crowbar 9 libreadline6 as a component of SUSE OpenStack Cloud Crowbar 9 libreadline6-32bit as a component of SUSE OpenStack Cloud Crowbar 9 readline-doc as a component of SUSE OpenStack Cloud Crowbar 9 QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS. CVE-2017-13069 HPE Helion OpenStack 8:bash HPE Helion OpenStack 8:bash-doc HPE Helion OpenStack 8:libreadline6 HPE Helion OpenStack 8:libreadline6-32bit HPE Helion OpenStack 8:readline-doc SUSE Linux Enterprise High Performance Computing 12 SP5:bash SUSE Linux Enterprise Server 12 SP2-BCL:bash SUSE Linux Enterprise Server 12 SP2-BCL:bash-doc SUSE Linux Enterprise Server 12 SP2-BCL:libreadline6 SUSE Linux Enterprise Server 12 SP2-BCL:libreadline6-32bit SUSE Linux Enterprise Server 12 SP2-BCL:readline-doc SUSE Linux Enterprise Server 12 SP3-BCL:bash SUSE Linux Enterprise Server 12 SP3-BCL:bash-doc SUSE Linux Enterprise Server 12 SP3-BCL:libreadline6 SUSE Linux Enterprise Server 12 SP3-BCL:libreadline6-32bit SUSE Linux Enterprise Server 12 SP3-BCL:readline-doc SUSE Linux Enterprise Server 12 SP3-ESPOS:bash SUSE Linux Enterprise Server 12 SP3-ESPOS:bash-doc SUSE Linux Enterprise Server 12 SP3-ESPOS:libreadline6 SUSE Linux Enterprise Server 12 SP3-ESPOS:libreadline6-32bit SUSE Linux Enterprise Server 12 SP3-ESPOS:readline-doc SUSE Linux Enterprise Server 12 SP3-LTSS:bash SUSE Linux Enterprise Server 12 SP3-LTSS:bash-doc SUSE Linux Enterprise Server 12 SP3-LTSS:libreadline6 SUSE Linux Enterprise Server 12 SP3-LTSS:libreadline6-32bit SUSE Linux Enterprise Server 12 SP3-LTSS:readline-doc SUSE Linux Enterprise Server 12 SP4-ESPOS:bash SUSE Linux Enterprise Server 12 SP4-ESPOS:bash-doc SUSE Linux Enterprise Server 12 SP4-ESPOS:libreadline6 SUSE Linux Enterprise Server 12 SP4-ESPOS:libreadline6-32bit SUSE Linux Enterprise Server 12 SP4-ESPOS:readline-doc SUSE Linux Enterprise Server 12 SP4-LTSS:bash SUSE Linux Enterprise Server 12 SP4-LTSS:bash-doc SUSE Linux Enterprise Server 12 SP4-LTSS:libreadline6 SUSE Linux Enterprise Server 12 SP4-LTSS:libreadline6-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:readline-doc SUSE Linux Enterprise Server 12 SP5:bash SUSE Linux Enterprise Server 12 SP5:bash-doc SUSE Linux Enterprise Server 12 SP5:libreadline6 SUSE Linux Enterprise Server 12 SP5:libreadline6-32bit SUSE Linux Enterprise Server 12 SP5:readline-doc SUSE Linux Enterprise Server Teradata 12 SP3:bash SUSE Linux Enterprise Server for SAP Applications 12 SP3:bash SUSE Linux Enterprise Server for SAP Applications 12 SP3:bash-doc SUSE Linux Enterprise Server for SAP Applications 12 SP3:libreadline6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libreadline6-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP3:readline-doc SUSE Linux Enterprise Server for SAP Applications 12 SP4:bash SUSE Linux Enterprise Server for SAP Applications 12 SP4:bash-doc SUSE Linux Enterprise Server for SAP Applications 12 SP4:libreadline6 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libreadline6-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:readline-doc SUSE Linux Enterprise Server for SAP Applications 12 SP5:bash SUSE Linux Enterprise Workstation Extension 12 SP5:bash SUSE Linux Enterprise Workstation Extension 12 SP5:bash-lang SUSE OpenStack Cloud 8:bash SUSE OpenStack Cloud 8:bash-doc SUSE OpenStack Cloud 8:libreadline6 SUSE OpenStack Cloud 8:libreadline6-32bit SUSE OpenStack Cloud 8:readline-doc SUSE OpenStack Cloud 9:bash SUSE OpenStack Cloud 9:bash-doc SUSE OpenStack Cloud 9:libreadline6 SUSE OpenStack Cloud 9:libreadline6-32bit SUSE OpenStack Cloud 9:readline-doc SUSE OpenStack Cloud Crowbar 8:bash SUSE OpenStack Cloud Crowbar 8:bash-doc SUSE OpenStack Cloud Crowbar 8:libreadline6 SUSE OpenStack Cloud Crowbar 8:libreadline6-32bit SUSE OpenStack Cloud Crowbar 8:readline-doc SUSE OpenStack Cloud Crowbar 9:bash SUSE OpenStack Cloud Crowbar 9:bash-doc SUSE OpenStack Cloud Crowbar 9:libreadline6 SUSE OpenStack Cloud Crowbar 9:libreadline6-32bit SUSE OpenStack Cloud Crowbar 9:readline-doc important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H