Skip to contentOpensuse Leap vulnerabilities
- systemd project systemd, debian linux, opensuse leap +2 moresystemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on...CVE-2017-18078Public exploitFix available7.8 High
- libtiff, opensuse leap, suse linux enterprise desktop +2 more +4 more** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to...CVE-2017-16232Fix availableDisputed7.5 High
- google chrome, qt, opensuse leap +2 moreThe Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt...CVE-2015-12908.8 High
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 Medium
- debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 Critical
- moinmo moinmoin, canonical ubuntu linux, debian linux +1 more +3 moreModerate severity vulnerability that affects moinCVE-2017-5934Fix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that...CVE-2017-17806Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero...CVE-2017-17805Fix available7.8 High
- openldap, mcafee policy auditor, opensuse leap +1 more +3 morecontrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the...CVE-2017-17740Fix available7.5 High
- suse build, opensuse leap, suse linux enterprise software development kit +2 morepackage builds could use directory traversal to write outside of target areaCVE-2017-14804Fix available9.9 Critical
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity...CVE-2017-13088Fix available5.3 Medium
- canonical ubuntu linux, debian linux, freebsd +9 more +11 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group...CVE-2017-13087Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ...CVE-2017-13086Fix available6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the...CVE-2017-13082Fix available8.1 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13081Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13080Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13079Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13078Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)...CVE-2017-13077Fix available6.8 Medium
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 moreStack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14493Public exploitFix availableEPSS 85.2%9.8 Critical
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 Critical
- heimdal project heimdal, opensuse leap +1 moreThe transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath...CVE-2017-6594Fix available7.5 High
- cairographics cairo, opensuse leap +1 morecairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of...CVE-2017-9814Fix available7.5 High
- golang go, fedoraproject fedora, novell suse package hub for suse linux enterprise +1 more +3 moreA bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in...CVE-2017-8932Fix available5.9 Medium
- gnu glibc, debian linux, mcafee web gateway +17 more +19 moreglibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate...CVE-2017-1000366Public exploitFix available7.8 High
- gnome libcroco, opensuse leap +1 moreThe cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote...CVE-2017-8871Public exploitFix availableEPSS 12.9%6.5 Medium
- gnome libcroco, opensuse leap +1 moreThe cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to...CVE-2017-8834Fix available6.5 Medium
- git git-shell, canonical ubuntu linux, debian linux +2 more +4 moregit-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x...CVE-2017-8386Public exploitFix availableEPSS 12.4%8.8 High
- tcpdump, opensuse leap +1 moreprint-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service ...CVE-2015-31387.5 High
- putty, opensuse leap +1 moreThe ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have...CVE-2017-6542Public exploitFix availableEPSS 21.8%9.8 Critical
- icinga, opensuse leap +1 moreCross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and...CVE-2015-80106.1 Medium
- jasper project jasper, fedoraproject fedora, opensuse leap +2 moreThe calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a...CVE-2016-93997.5 High
- percona xtrabackup, fedoraproject fedora, opensuse leap +2 morexbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the...CVE-2016-6225Fix available5.9 Medium
- postfixadmin project postfixadmin, opensuse leap +1 moreThe AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins...CVE-2017-5930Fix availableEPSS 15.0%2.7 Low
- sane-backends project sane-backends, opensuse leap +1 moresaned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via...CVE-2017-6318Fix available7.5 High
- tigervnc, opensuse leap +1 moreThe Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory...CVE-2016-10207Fix available7.5 High
- viewvc, debian linux, opensuse leap +2 moreCross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC...CVE-2017-5938Fix available6.1 Medium
- php-gettext project php-gettext, fedoraproject fedora, opensuse leap +1 more +3 moreThe plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote...CVE-2015-8980Fix available9.8 Critical
- gnome libxml2, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not...CVE-2016-95977.5 High
- canonical ubuntu linux, debian linux, littlecms little cms color engine +16 more +18 moreThe Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...CVE-2016-10165Fix available7.1 High
- gnu gnutls, opensuse leap +1 moreMultiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3...CVE-2017-5337Fix available9.8 Critical
- gnu gnutls, opensuse leap +1 moreStack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS...CVE-2017-5336Fix available9.8 Critical
- gnu gnutls, opensuse leap +1 moreThe stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x...CVE-2017-5335Fix available7.5 High
- gnu gnutls, opensuse leap +1 moreDouble free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26...CVE-2017-5334Fix availableEPSS 32.8%9.8 Critical
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreInteger overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in...CVE-2017-5333Fix available7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreThe extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access...CVE-2017-5332Fix available7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1...CVE-2017-5331Fix available7.8 High
- jasper project jasper, fedoraproject fedora, opensuse leap +3 more +5 moreThe jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to...CVE-2016-93987.5 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 moreThe MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause...CVE-2016-9830Fix available5.5 Medium
- Show moreLoading…