Skip to contentOpensuse Leap vulnerabilities
- python requests, canonical ubuntu linux, opensuse leap +3 more +5 moreInsufficiently Protected Credentials in RequestsCVE-2018-18074Public exploitFix available7.5 High
- python, canonical ubuntu linux, debian linux +5 more +7 morePython's elementtree C accelerator failed to initialise Expat's hash salt during initialization....CVE-2018-14647Fix availableEPSS 10.9%5.3 Medium
- linux kernel, netapp active iq performance analytics services, element software +1 more +3 moreAn issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs...CVE-2018-16597Fix available5.5 Medium
- liblouis, canonical ubuntu linux, opensuse leap +2 moreThe matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not...CVE-2018-17294Fix available6.5 Medium
- python, canonical ubuntu linux, debian linux +1 more +3 morePython Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper...CVE-2018-1000802Public exploitFix availableEPSS 20.1%9.8 Critical
- gluster glusterfs, debian linux, opensuse leap +4 more +6 moreA flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated...CVE-2018-10930Fix available6.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreA flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated...CVE-2018-10929Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +4 more +6 moreA flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink...CVE-2018-10928Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreA flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated...CVE-2018-10927Fix available7.1 High
- gluster glusterfs, debian linux, opensuse leap +3 more +5 moreA flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An...CVE-2018-10926Fix available8.1 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that the "mknod" call derived from mknod(2) can create files pointing to devices on...CVE-2018-10923Fix available7.6 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster...CVE-2018-10914Fix available5.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreAn information disclosure vulnerability was discovered in glusterfs server. An attacker could...CVE-2018-10913Fix available3.5 Low
- gluster glusterfs, debian linux, opensuse leap +5 more +7 moreA flaw was found in the way dic_unserialize function of glusterfs does not handle negative key...CVE-2018-10911Fix available6.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to...CVE-2018-10907Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats...CVE-2018-10904Fix available8.8 High
- imagemagick, opensuse leap +1 moreImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c...CVE-2018-16412Fix available8.8 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 morelibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double...CVE-2018-16402Fix available9.8 Critical
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moredwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote...CVE-2018-16062Fix available5.5 Medium
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 moreThe lxc-user-nic component of LXC allows unprivileged users to open arbitrary filesCVE-2018-6556Fix available3.3 Low
- [unknown] lftp, canonical ubuntu linux, opensuse leap +2 moreIt has been discovered that lftp up to and including version 4.8.3 does not properly sanitize...CVE-2018-10916Fix available5.3 Medium
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to out of bound read when samplerate > 50kHzCVE-2018-14523Fix available8.8 High
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to denial of service via aubio_pitch_set_unit functionCVE-2018-14522Fix available8.8 High
- ceph, debian linux, opensuse leap +7 more +9 moreA flaw was found in the way signature calculation was handled by cephx authentication protocol....CVE-2018-1129Fix available6.5 Medium
- ceph, debian linux, opensuse leap +7 more +9 moreIt was found that cephx authentication protocol did not verify ceph clients correctly and was...CVE-2018-1128Fix available7.5 High
- ceph, redhat ceph storage, debian linux +6 more +8 moreA flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having...CVE-2018-10861Fix available8.1 High
- bouncycastle bc-java, netapp oncommand workflow automation, opensuse leap +21 more +23 moreDeserialization of Untrusted Data in Bouncy castleCVE-2018-1000613Fix available9.8 Critical
- [unknown] docker, mobyproject moby, opensuse leap +3 more +5 moreThe default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does...CVE-2018-10892Fix available6.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service ...CVE-2018-13099Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service ...CVE-2018-13096Fix available5.5 Medium
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 moreThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...CVE-2018-12910Fix available9.8 Critical
- file project file, canonical ubuntu linux, opensuse leap +2 moreThe do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to...CVE-2018-10360Fix available6.5 Medium
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-12085Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in...CVE-2018-11685Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in...CVE-2018-11684Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-11683Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.CVE-2018-11577Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-11440Fix available8.8 High
- debian linux, procps-ng project procps-ng, [unknown] procps-ng, procps +2 more +4 moreprocps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This...CVE-2018-1125Fix available4.4 Medium
- [unknown] procps-ng, canonical ubuntu linux, debian linux +6 more +8 moreprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap...CVE-2018-1124Public exploitFix available7.3 High
- ijg libjpeg, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows...CVE-2018-11212Fix available6.5 Medium
- postgresql, opensuse leap +1 morepostgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog...CVE-2018-1115Fix available4.2 Medium
- debian linux, kde plasma, opensuse leap +2 morekwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary...CVE-2018-10380Fix available7.8 High
- gnome libgxps, opensuse leap, redhat ansible tower +3 more +5 moreThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...CVE-2018-10733Fix available6.5 Medium
- redhat gluster storage, debian linux, opensuse leap +4 more +6 moreA privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client...CVE-2018-1088Public exploitFix available8.1 High
- qemu, canonical ubuntu linux, opensuse leap +6 more +8 moreQuick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows...CVE-2018-7858Fix available5.5 Medium
- xv project xv, opensuse leap +1 morexvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields,...CVE-2017-182159.8 Critical
- nextcloud, opensuse leap +1 morenextcloud package security issues with /srv/www/htdocsCVE-2017-92867.8 High
- systemd project systemd, canonical ubuntu linux, opensuse leap +2 moresystemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path...CVE-2018-6954Fix available7.8 High
- Show moreLoading…