Skip to contentOpensuse Leap vulnerabilities
- wplaunchpad wpbackupplus, opensuse leap +1 moreThe WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers...CVE-2018-19456Fix available7.5 High
- haproxy, canonical ubuntu linux, opensuse leap +2 more +4 moreAn out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1...CVE-2018-20615Fix available7.5 High
- libcaca project libcaca, canonical ubuntu linux, debian linux +2 more +4 moreThere is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99...CVE-2018-20549Fix available8.8 High
- libcaca project libcaca, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThere is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99...CVE-2018-20548Fix available8.8 High
- libcaca project libcaca, canonical ubuntu linux, debian linux +2 more +4 moreThere is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0...CVE-2018-20547Fix available8.1 High
- libcaca project libcaca, canonical ubuntu linux, debian linux +2 more +4 moreThere is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0...CVE-2018-20546Fix available8.1 High
- libcaca project libcaca, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThere is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99...CVE-2018-20545Fix available8.8 High
- qt, opensuse leap +1 moreAn issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.CVE-2018-19871Fix available6.5 Medium
- qt, opensuse leap +1 moreAn issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in...CVE-2018-19869Fix available6.5 Medium
- gnu tar, debian linux, opensuse leap +3 more +5 moreGNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which...CVE-2018-20482Fix available4.7 Medium
- qt, debian linux, opensuse leap +2 moreAn issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer...CVE-2018-19870Fix available8.8 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. There is a memory leak in the libvncclient...CVE-2018-21247Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and...CVE-2018-20467Fix available6.5 Medium
- sqlite, apple icloud, iphone os +5 more +7 moreSQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and...CVE-2018-20506Fix available8.1 High
- qemu, canonical ubuntu linux, opensuse leap +2 morehw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are...CVE-2018-20126Fix available5.5 Medium
- libarchive, fedoraproject fedora, opensuse leap +2 morelibarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0...CVE-2018-1000879Fix available6.5 Medium
- libarchive, canonical ubuntu linux, fedoraproject fedora +1 more +3 morelibarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0...CVE-2018-1000880Fix available6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0...CVE-2018-1000878Fix available8.8 High
- qt, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.CVE-2018-19873Fix available9.8 Critical
- qt, debian linux, opensuse leap +2 moreQXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially...CVE-2018-15518Fix available8.8 High
- golang go, [unknown] golang, opensuse leap +2 moreThe crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of...CVE-2018-16875Public exploitFix available5.9 Medium
- [unknown] golang, golang go, debian linux +3 more +5 moreIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory...CVE-2018-16874Fix available6.8 Medium
- [unknown] golang, golang go, debian linux +3 more +5 moreIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code...CVE-2018-16873Fix availableEPSS 66.3%7.5 High
- qemu, canonical ubuntu linux, debian linux +2 more +4 morev9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash)...CVE-2018-19489Fix available4.7 Medium
- qemu, [unknown] qemu:, canonical ubuntu linux +3 more +5 moreA flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in...CVE-2018-16872Fix available5.0 Medium
- php, opensuse leap +1 moreIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...CVE-2018-20783Fix available7.5 High
- sqlite, debian linux, google chrome +1 more +3 moreSQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and...CVE-2018-20346Fix availableEPSS 10.3%8.1 High
- google chrome, canonical ubuntu linux, debian linux +7 more +9 moreAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...CVE-2018-18356Fix available8.8 High
- google chrome, debian linux, opensuse leap +3 more +5 moreHeap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to...CVE-2018-18335Fix available8.8 High
- qemu, opensuse leap +1 moreThe Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to...CVE-2018-19665Fix available5.7 Medium
- qt, opensuse leap +1 moreA keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x,...CVE-2018-19865Fix available7.5 High
- wavpack, canonical ubuntu linux, debian linux +2 more +4 moreThe function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0...CVE-2018-19841Fix available5.5 Medium
- wavpack, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows...CVE-2018-19840Fix available5.5 Medium
- jasper project jasper, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...CVE-2018-19542Fix available6.5 Medium
- jasper project jasper, debian linux, opensuse leap +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is an access violation in the function...CVE-2018-195396.5 Medium
- gnuplot, debian linux, opensuse leap +2 moreAn issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a...CVE-2018-19492Fix available7.8 High
- gnuplot, debian linux, opensuse leap +2 moreAn issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a...CVE-2018-19491Fix available7.8 High
- gnuplot, debian linux, opensuse leap +2 moreAn issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct...CVE-2018-19490Fix available7.8 High
- qemu, canonical ubuntu linux, debian linux +2 more +4 morehw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a...CVE-2018-19364Fix available5.5 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreThe pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or...CVE-2018-18954Fix available5.5 Medium
- lighttpd, debian linux, opensuse backports sle +2 more +4 moreAn issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50....CVE-2018-19052Public exploitFix availableEPSS 13.7%7.5 High
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might...CVE-2018-16845Fix available8.2 High
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...CVE-2018-16843Public exploitFix availableEPSS 48.0%5.3 Medium
- qemu, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreIn Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an...CVE-2018-18849Fix available5.5 Medium
- graphicsmagick, imagemagick, opensuse leap +2 moreThere is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16,...CVE-2018-18544Fix available6.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreDivide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174...CVE-2018-18521Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreAn Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils...CVE-2018-18520Fix available6.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreAn invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl...CVE-2018-18310Fix available5.5 Medium
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan...CVE-2018-18225Fix available7.5 High
- opensuse open build service, leap +1 moreobs-service-refresh_patches can be tricked into deleting '..' or other unrelated directoriesCVE-2018-12477Fix available3.5 Low
- Show moreLoading…