A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2024:1202-1 advisory.

  - A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a     transaction could be impacted. As a result, some memory access could occur on memory regions that were     previously freed. Once freed, a memory region can be reused for other allocations and any previously     stored data in this memory region is considered lost. (CVE-2024-0217)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1046-1 advisory.

  - A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a     transaction could be impacted. As a result, some memory access could occur on memory regions that were     previously freed. Once freed, a memory region can be reused for other allocations and any previously     stored data in this memory region is considered lost. (CVE-2024-0217)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0966-1 advisory.

  - A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a     transaction could be impacted. As a result, some memory access could occur on memory regions that were     previously freed. Once freed, a memory region can be reused for other allocations and any previously     stored data in this memory region is considered lost. (CVE-2024-0217)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
193247	SUSE SLED15 / SLES15 : Recommended update for libzypp, zypper, PackageKit (SUSE-SU-SUSE-RU-2024:1202-1)	Nessus	SuSE Local Security Checks	low
192691	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : PackageKit (SUSE-SU-2024:1046-1)	Nessus	SuSE Local Security Checks	low
192495	SUSE SLED12 / SLES12 Security Update : PackageKit (SUSE-SU-2024:0966-1)	Nessus	SuSE Local Security Checks	low

Detections

Analytics

CVE-2024-0217

low

Tenable Plugins

low

low

low