Skip to contentOpensuse Leap vulnerabilities
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers...CVE-2016-5177Fix available8.8 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 moreThe TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to...CVE-2016-7449Fix available7.5 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 moreThe Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of...CVE-2016-7448Fix available7.5 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 moreHeap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25...CVE-2016-7447Fix available9.8 Critical
- qemu, opensuse leap, redhat openstack +1 more +3 moreMemory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when...CVE-2016-7466Fix available6.0 Medium
- jasper project jasper, fedoraproject fedora, opensuse leap +1 more +3 moreUse-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the...CVE-2015-5221Fix available5.5 Medium
- jasper project jasper, fedoraproject fedora, opensuse leap +1 more +3 moreDouble free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote...CVE-2015-5203Fix available5.5 Medium
- powerdns authoritative server, opensuse leap, opensuse +2 morePowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause...CVE-2016-6172Fix available6.8 Medium
- qemu, debian linux, opensuse leap +2 moreThe vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local...CVE-2016-7170Fix available4.4 Medium
- haxx libcurl, opensuse leap +1 morecurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...CVE-2016-7141Fix available7.5 High
- google chrome, opensuse leap +1 moreMultiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and...CVE-2016-5167Fix available8.8 High
- google chrome, opensuse leap +1 moreThe download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before...CVE-2016-5166Fix available3.1 Low
- google chrome, opensuse leap +1 moreCross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in...CVE-2016-5165Fix available6.1 Medium
- google chrome, opensuse leap +1 moreCross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in...CVE-2016-5164Fix available6.1 Medium
- google chrome, opensuse leap +1 moreThe bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X...CVE-2016-5163Fix available4.3 Medium
- google chrome, opensuse leap +1 moreThe AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google...CVE-2016-5162Fix available6.5 Medium
- google chrome, opensuse leap +1 moreThe EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as...CVE-2016-5161Fix available8.8 High
- google chrome, opensuse leap +1 moreThe AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google...CVE-2016-5160Fix available6.5 Medium
- google chrome, opensuse leap +1 moreMultiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on...CVE-2016-5159Fix available8.8 High
- google chrome, opensuse leap +1 moreMultiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in...CVE-2016-5158Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse leap +2 moreHeap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in...CVE-2016-5157Fix available8.8 High
- google chrome, opensuse leap +1 moreextensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89...CVE-2016-5156Fix available8.8 High
- google chrome, opensuse leap +1 moreGoogle Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not...CVE-2016-5155Fix available6.5 Medium
- google chrome, opensuse leap +1 moreMultiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on...CVE-2016-5154Fix available8.8 High
- google chrome, opensuse leap +1 moreThe Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on...CVE-2016-5153Fix available8.8 High
- google chrome, opensuse leap +1 moreInteger overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in...CVE-2016-5152Fix available8.8 High
- google chrome, opensuse leap +1 morePDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux...CVE-2016-5151Fix available8.8 High
- google chrome, opensuse leap +1 moreWebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome...CVE-2016-5150Fix available8.8 High
- google chrome, opensuse leap +1 moreThe extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0...CVE-2016-5149Fix available8.8 High
- opensuse libstorage, libstorage-ng, yast yast-storage +1 more +3 morelibstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage...CVE-2016-5746Fix available5.1 Medium
- imagemagick, opensuse leap +1 moreUse-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5...CVE-2016-10051Fix available7.8 High
- imagemagick, opensuse leap +1 moreHeap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8...CVE-2016-10050Fix available7.8 High
- gnome eye of gnome, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreEye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4,...CVE-2016-6855Public exploitFix availableEPSS 18.4%7.5 High
- cracklib project cracklib, debian linux, opensuse leap +2 moreStack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows...CVE-2016-6318Fix available7.8 High
- haxx libcurl, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...CVE-2016-5421Fix available8.1 High
- haxx libcurl, debian linux, opensuse leap +2 morecurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...CVE-2016-5420Fix availableEPSS 15.4%7.5 High
- haxx libcurl, debian linux, opensuse leap +2 morecurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...CVE-2016-5419Fix availableEPSS 15.1%7.5 High
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse leap +1 more +3 moreThe OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a...CVE-2016-6352Fix available7.5 High
- artifex mupdf, opensuse leap, opensuse +2 moreUse-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows...CVE-2016-6265Fix available5.5 Medium
- cronic project cronic, debian linux, opensuse leap +1 more +3 morecronic before 3 allows local users to write to arbitrary files via a symlink attack on a (1)...CVE-2016-3992Fix available6.2 Medium
- perl, apache spamassassin, debian linux +2 more +4 more(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin...CVE-2016-1238Fix available7.8 High
- google chrome, xmlsoft libxml2, apple iphone os +14 more +16 moreUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...CVE-2016-5131Fix available8.8 High
- gnu libidn, canonical ubuntu linux, opensuse leap +1 more +3 moreidn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by...CVE-2016-6262Fix available7.5 High
- gnu libidn, canonical ubuntu linux, opensuse leap +2 moreThe idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent...CVE-2016-6261Fix available7.5 High
- libgd, debian linux, opensuse leap +1 more +3 moreInteger overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics...CVE-2016-6207Fix available6.5 Medium
- apache mod fcgid, opensuse leap, opensuse +2 moreA security Bypass vulnerability exists in mod_fcgid through 2016-07-07 in the FcgidPassHeader Proxy.CVE-2016-1000104Fix available8.8 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- php, debian linux, drupal +9 more +11 moreHTTP Proxy header vulnerabilityCVE-2016-5385Fix availableEPSS 50.4%8.1 High
- libgd, opensuse leap, opensuse +2 moreThe read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3...CVE-2016-6905Fix available6.5 Medium
- libgd, debian linux, opensuse leap +2 moregd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a...CVE-2016-6214Fix available6.5 Medium
- Show moreLoading…