CVE-2024-21537 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-21537 Interim 1 5 2025-04-30T23:58:18Z current 2024-11-01T00:18:59Z 2025-04-30T23:58:18Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-21537 Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Micro 6.0 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 cockpit cockpit-bridge cockpit-dashboard cockpit-machines cockpit-networkmanager cockpit-selinux cockpit-storaged cockpit-system cockpit-tukit cockpit-ws pgadmin4 pgadmin4-cloud pgadmin4-desktop pgadmin4-doc pgadmin4-web pgadmin4-web-uwsgi system-user-pgadmin pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS cockpit as a component of SUSE Linux Enterprise Micro 5.1 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.1 cockpit-dashboard as a component of SUSE Linux Enterprise Micro 5.1 cockpit-system as a component of SUSE Linux Enterprise Micro 5.1 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.1 cockpit as a component of SUSE Linux Enterprise Micro 5.2 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.2 cockpit-system as a component of SUSE Linux Enterprise Micro 5.2 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.2 cockpit-machines as a component of SUSE Linux Enterprise Micro 5.2 cockpit-tukit as a component of SUSE Linux Enterprise Micro 5.2 cockpit as a component of SUSE Linux Enterprise Micro 5.3 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.3 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.3 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.3 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.3 cockpit-system as a component of SUSE Linux Enterprise Micro 5.3 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.3 cockpit-machines as a component of SUSE Linux Enterprise Micro 5.3 cockpit-tukit as a component of SUSE Linux Enterprise Micro 5.3 cockpit as a component of SUSE Linux Enterprise Micro 5.4 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.4 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.4 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.4 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.4 cockpit-system as a component of SUSE Linux Enterprise Micro 5.4 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.4 cockpit-machines as a component of SUSE Linux Enterprise Micro 5.4 cockpit-tukit as a component of SUSE Linux Enterprise Micro 5.4 cockpit as a component of SUSE Linux Enterprise Micro 5.5 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.5 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.5 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.5 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.5 cockpit-system as a component of SUSE Linux Enterprise Micro 5.5 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.5 cockpit-machines as a component of SUSE Linux Enterprise Micro 5.5 cockpit-tukit as a component of SUSE Linux Enterprise Micro 5.5 pgadmin4 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-doc as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-web as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 system-user-pgadmin as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 pgadmin4-doc as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 pgadmin4-web as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server Teradata 15 SP4 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 cockpit as a component of SUSE Linux Micro 6.0 cockpit-bridge as a component of SUSE Linux Micro 6.0 cockpit-networkmanager as a component of SUSE Linux Micro 6.0 cockpit-selinux as a component of SUSE Linux Micro 6.0 cockpit-storaged as a component of SUSE Linux Micro 6.0 cockpit-system as a component of SUSE Linux Micro 6.0 cockpit-ws as a component of SUSE Linux Micro 6.0 cockpit-machines as a component of SUSE Linux Micro 6.0 cockpit-tukit as a component of SUSE Linux Micro 6.0 pgadmin4 as a component of SUSE Manager Proxy 4.3 pgadmin4-doc as a component of SUSE Manager Proxy 4.3 pgadmin4-web as a component of SUSE Manager Proxy 4.3 pgadmin4 as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4-doc as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4-web as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4 as a component of SUSE Manager Server 4.3 pgadmin4-doc as a component of SUSE Manager Server 4.3 pgadmin4-web as a component of SUSE Manager Server 4.3 pgadmin4 as a component of openSUSE Leap 15.5 pgadmin4-doc as a component of openSUSE Leap 15.5 pgadmin4-web as a component of openSUSE Leap 15.5 pgadmin4-web-uwsgi as a component of openSUSE Leap 15.5 pgadmin4 as a component of openSUSE Leap 15.6 pgadmin4-cloud as a component of openSUSE Leap 15.6 pgadmin4-desktop as a component of openSUSE Leap 15.6 pgadmin4-doc as a component of openSUSE Leap 15.6 pgadmin4-web-uwsgi as a component of openSUSE Leap 15.6 system-user-pgadmin as a component of openSUSE Leap 15.6 Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function. CVE-2024-21537 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pgadmin4 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pgadmin4-doc SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pgadmin4-web SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pgadmin4 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pgadmin4-doc SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pgadmin4-web SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:pgadmin4 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:pgadmin4-doc SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:pgadmin4-web SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:pgadmin4 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:pgadmin4-doc SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:pgadmin4-web SUSE Linux Enterprise Micro 5.1:cockpit SUSE Linux Enterprise Micro 5.1:cockpit-bridge SUSE Linux Enterprise Micro 5.1:cockpit-dashboard SUSE Linux Enterprise Micro 5.1:cockpit-system SUSE Linux Enterprise Micro 5.1:cockpit-ws SUSE Linux Enterprise Micro 5.2:cockpit SUSE Linux Enterprise Micro 5.2:cockpit-bridge SUSE Linux Enterprise Micro 5.2:cockpit-machines SUSE Linux Enterprise Micro 5.2:cockpit-system SUSE Linux Enterprise Micro 5.2:cockpit-tukit SUSE Linux Enterprise Micro 5.2:cockpit-ws SUSE Linux Enterprise Micro 5.3:cockpit SUSE Linux Enterprise Micro 5.3:cockpit-bridge SUSE Linux Enterprise Micro 5.3:cockpit-machines SUSE Linux Enterprise Micro 5.3:cockpit-networkmanager SUSE Linux Enterprise Micro 5.3:cockpit-selinux SUSE Linux Enterprise Micro 5.3:cockpit-storaged SUSE Linux Enterprise Micro 5.3:cockpit-system SUSE Linux Enterprise Micro 5.3:cockpit-tukit SUSE Linux Enterprise Micro 5.3:cockpit-ws SUSE Linux Enterprise Micro 5.4:cockpit SUSE Linux Enterprise Micro 5.4:cockpit-bridge SUSE Linux Enterprise Micro 5.4:cockpit-machines SUSE Linux Enterprise Micro 5.4:cockpit-networkmanager SUSE Linux Enterprise Micro 5.4:cockpit-selinux SUSE Linux Enterprise Micro 5.4:cockpit-storaged SUSE Linux Enterprise Micro 5.4:cockpit-system SUSE Linux Enterprise Micro 5.4:cockpit-tukit SUSE Linux Enterprise Micro 5.4:cockpit-ws SUSE Linux Enterprise Micro 5.5:cockpit SUSE Linux Enterprise Micro 5.5:cockpit-bridge SUSE Linux Enterprise Micro 5.5:cockpit-machines SUSE Linux Enterprise Micro 5.5:cockpit-networkmanager SUSE Linux Enterprise Micro 5.5:cockpit-selinux SUSE Linux Enterprise Micro 5.5:cockpit-storaged SUSE Linux Enterprise Micro 5.5:cockpit-system SUSE Linux Enterprise Micro 5.5:cockpit-tukit SUSE Linux Enterprise Micro 5.5:cockpit-ws SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4 SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-doc SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-web SUSE Linux Enterprise Module for Python 3 15 SP6:system-user-pgadmin SUSE Linux Enterprise Module for Server Applications 15 SP5:pgadmin4 SUSE Linux Enterprise Module for Server Applications 15 SP5:pgadmin4-doc SUSE Linux Enterprise Module for Server Applications 15 SP5:pgadmin4-web SUSE Linux Enterprise Server 15 SP1-LTSS:pgadmin4 SUSE Linux Enterprise Server 15 SP1-LTSS:pgadmin4-doc SUSE Linux Enterprise Server 15 SP1-LTSS:pgadmin4-web SUSE Linux Enterprise Server 15 SP2-LTSS:pgadmin4 SUSE Linux Enterprise Server 15 SP2-LTSS:pgadmin4-doc SUSE Linux Enterprise Server 15 SP2-LTSS:pgadmin4-web SUSE Linux Enterprise Server 15 SP3-LTSS:pgadmin4 SUSE Linux Enterprise Server 15 SP3-LTSS:pgadmin4-doc SUSE Linux Enterprise Server 15 SP3-LTSS:pgadmin4-web SUSE Linux Enterprise Server 15 SP4-LTSS:pgadmin4 SUSE Linux Enterprise Server 15 SP4-LTSS:pgadmin4-doc SUSE Linux Enterprise Server 15 SP4-LTSS:pgadmin4-web SUSE Linux Enterprise Server Teradata 15 SP4:pgadmin4 SUSE Linux Enterprise Server for SAP Applications 15 SP2:pgadmin4 SUSE Linux Enterprise Server for SAP Applications 15 SP2:pgadmin4-doc SUSE Linux Enterprise Server for SAP Applications 15 SP2:pgadmin4-web SUSE Linux Enterprise Server for SAP Applications 15 SP3:pgadmin4 SUSE Linux Enterprise Server for SAP Applications 15 SP3:pgadmin4-doc SUSE Linux Enterprise Server for SAP Applications 15 SP3:pgadmin4-web SUSE Linux Enterprise Server for SAP Applications 15 SP4:pgadmin4 SUSE Linux Enterprise Server for SAP Applications 15 SP4:pgadmin4-doc SUSE Linux Enterprise Server for SAP Applications 15 SP4:pgadmin4-web SUSE Linux Micro 6.0:cockpit SUSE Linux Micro 6.0:cockpit-bridge SUSE Linux Micro 6.0:cockpit-machines SUSE Linux Micro 6.0:cockpit-networkmanager SUSE Linux Micro 6.0:cockpit-selinux SUSE Linux Micro 6.0:cockpit-storaged SUSE Linux Micro 6.0:cockpit-system SUSE Linux Micro 6.0:cockpit-tukit SUSE Linux Micro 6.0:cockpit-ws SUSE Manager Proxy 4.3:pgadmin4 SUSE Manager Proxy 4.3:pgadmin4-doc SUSE Manager Proxy 4.3:pgadmin4-web SUSE Manager Retail Branch Server 4.3:pgadmin4 SUSE Manager Retail Branch Server 4.3:pgadmin4-doc SUSE Manager Retail Branch Server 4.3:pgadmin4-web SUSE Manager Server 4.3:pgadmin4 SUSE Manager Server 4.3:pgadmin4-doc SUSE Manager Server 4.3:pgadmin4-web openSUSE Leap 15.5:pgadmin4 openSUSE Leap 15.5:pgadmin4-doc openSUSE Leap 15.5:pgadmin4-web openSUSE Leap 15.5:pgadmin4-web-uwsgi openSUSE Leap 15.6:pgadmin4 openSUSE Leap 15.6:pgadmin4-cloud openSUSE Leap 15.6:pgadmin4-desktop openSUSE Leap 15.6:pgadmin4-doc openSUSE Leap 15.6:pgadmin4-web-uwsgi openSUSE Leap 15.6:system-user-pgadmin important 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H