Skip to contentOpensuse Leap vulnerabilities
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen running, the updater service wrote status and log files to an unrestricted location;...CVE-2019-17009Fix available7.8 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_64CVE-2019-1551Fix availableEPSS 14.3%5.3 Medium
- red hat ansible, debian linux, opensuse backports sle +5 more +7 moreInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in AnsibleCVE-2019-14864Fix available5.7 Medium
- suse permissions, opensuse leap +1 morechkstat follows untrusted symbolic linksCVE-2019-3690Fix available6.8 Medium
- wireshark, debian linux, opensuse leap +2 more +4 moreIn Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was...CVE-2019-19553Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...CVE-2019-17012Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...CVE-2019-17011Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when checking the Resist Fingerprinting preference during device...CVE-2019-17010Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...CVE-2019-17008Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe plain text serializer used a fixed-size array for the number of <ol> elements it could...CVE-2019-17005Fix available8.8 High
- shadowsocks shadowsocks-libev, opensuse backports sle, leap +2 moreAn exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev...CVE-2019-5164Fix available7.8 High
- shadowsocks shadowsocks-libev, opensuse backports, leap +2 moreAn exploitable denial-of-service vulnerability exists in the UDPRelay functionality of...CVE-2019-5163Fix available5.9 Medium
- freeradius, opensuse leap, redhat enterprise linux +2 moreIn FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the...CVE-2019-13456Fix available6.5 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious...CVE-2019-19523Fix available4.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious...CVE-2019-19525Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreIn the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious...CVE-2019-19526Fix available4.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a...CVE-2019-19527Fix available6.8 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a...CVE-2019-19530Fix available4.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious...CVE-2019-19531Fix available6.8 Medium
- debian linux, linux kernel, opensuse leap +1 more +3 moreIn the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB...CVE-2019-19535Fix available4.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB...CVE-2019-19536Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 morerelay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a...CVE-2019-19462Fix available5.5 Medium
- gnome dia, fedoraproject fedora, opensuse leap +2 moreWhen GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid...CVE-2019-19451Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreIn the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an...CVE-2019-19318Fix available4.4 Medium
- linux kernel, opensuse leap, redhat enterprise linux +2 moreIn the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can...CVE-2019-19319Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreThe Linux kernel through 5.3.13 on powerpc allows Information Exposure because the Spectre-RSB...CVE-2019-18660Fix available4.7 Medium
- [unknown] ansible, opensuse backports sle, leap +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-14856Fix available6.4 Medium
- opensuse leap 15.1, suse mailman, linux enterprise server 11 +2 more +4 moreLocal privilege escalation from user wwwrun to root in the packaging of mailmanCVE-2019-3693Fix available7.7 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x...CVE-2019-14895Fix available8.0 High
- mozilla firefox, firefox esr, thunderbird +12 more +14 moreWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...CVE-2019-11745Fix available8.8 High
- phpmyadmin, fedoraproject fedora, opensuse backports sle +1 more +3 moreSQL injection in phpMyAdminCVE-2019-18622Fix available9.8 Critical
- ruby-lang ruby, debian linux, opensuse leap +1 more +3 moreRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...CVE-2019-16255Fix available8.1 High
- nlnetlabs unbound, fedoraproject fedora, opensuse leap +2 moreUnbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code...CVE-2019-18934Fix available7.3 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreMemory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the...CVE-2019-19083Fix available4.7 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreMemory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the...CVE-2019-19082Fix available4.7 Medium
- linux kernel, opensuse leap, redhat enterprise linux +2 moreA memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp...CVE-2019-19081Fix available5.9 Medium
- linux kernel, opensuse leap +1 moreFour memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome...CVE-2019-19080Fix available5.9 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreA memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in...CVE-2019-19077Fix available5.5 Medium
- linux kernel, fedoraproject fedora, opensuse leap +2 moreMemory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow...CVE-2019-19073Fix available4.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu...CVE-2019-19068Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreFour memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the...CVE-2019-19067Fix availableDisputed4.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux...CVE-2019-19066Fix available4.7 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreA memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux...CVE-2019-19065Fix availableDisputed4.7 Medium
- linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +15 more +17 moreTwo memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in...CVE-2019-19063Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel...CVE-2019-19062Fix available4.7 Medium
- linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +13 more +15 moreA memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the...CVE-2019-19060Fix available7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in...CVE-2019-19058Fix available4.7 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +15 more +17 moreTwo memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell...CVE-2019-19057Fix available3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell...CVE-2019-19056Fix available4.7 Medium
- linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +14 more +16 moreA memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the...CVE-2019-19054Fix available4.7 Medium
- Show moreLoading…