Skip to contentOpensuse Leap vulnerabilities
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in...CVE-2020-15305Fix available5.5 Medium
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a...CVE-2020-15306Fix available5.5 Medium
- linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is...CVE-2020-10753Fix available5.4 Medium
- ntp, netapp 8300 firmware, 8700 firmware +13 more +15 morentpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a...CVE-2020-15025Fix available4.4 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12862Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12863Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12864Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreA heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12865Fix available8.0 High
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreA NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to...CVE-2020-12866Fix available5.7 Medium
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreA heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the...CVE-2020-12861Fix available8.8 High
- chocolate-doom chocolate doom, crispy doom, opensuse backports +1 more +3 moreThe server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled...CVE-2020-14983Fix available9.8 Critical
- google guest-oslogin, opensuse leap +1 morePriviged Escalation in Google Cloud Platform's Guest-OSLoginCVE-2020-8933Fix available9.3 Critical
- google guest-oslogin, opensuse leap +1 morePriviged Escalation in Google Cloud Platform's Guest-OSLoginCVE-2020-8907Fix available9.3 Critical
- google guest-oslogin, opensuse leap +1 morePriviged Escalation in Google Cloud Platform's Guest-OSLoginCVE-2020-8903Fix available7.3 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in RLEDECOMPRESS in FreeRDPCVE-2020-4033Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPCVE-2020-4032Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreUse-After-Free in gdi_SelectObject in FreeRDPCVE-2020-4031Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in `TrioParse` in FreeRDPCVE-2020-4030Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in license_read_new_or_upgrade_license_packet in FreeRDPCVE-2020-11099Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOut-of-bound read in glyph_cache_put in FreeRDPCVE-2020-11098Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in ntlm_av_pair_get in FreeRDPCVE-2020-11097Public exploitFix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_read_cache_bitmap_v3_order in FreeRDPCVE-2020-11096Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_recv_primary_order in FreeRDPCVE-2020-11095Fix available3.5 Low
- mutt, neomutt, canonical ubuntu linux +3 more +5 moreMutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects...CVE-2020-14954Fix available5.9 Medium
- mozilla firefox, debian linux, fedoraproject fedora +1 more +3 moreDuring RSA key generation, bignum implementations used a variation of the Binary Extended...CVE-2020-12402Fix available4.4 Medium
- linux kernel, opensuse leap +1 moreIn the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and...CVE-2020-14416Fix available4.2 Medium
- python, fedoraproject fedora, opensuse leap +4 more +6 moreIncorrect Calculation and Use of Insufficiently Random Values in PythonCVE-2020-14422Fix availableEPSS 12.7%5.9 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL...CVE-2020-14397Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes...CVE-2020-14398Fix available7.5 High
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through...CVE-2020-14399Fix availableDisputed7.5 High
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through...CVE-2020-14400Fix availableDisputed7.5 High
- libvncserver project libvncserver, debian linux, opensuse leap +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value...CVE-2020-14401Fix available6.5 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 morelibvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket...CVE-2019-20839Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a...CVE-2019-20840Fix available7.5 High
- isc bind, bind9, canonical ubuntu linux +4 more +6 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8619Fix available4.9 Medium
- canonical ubuntu linux, isc bind, bind9 +2 more +4 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8618Fix available4.9 Medium
- mutt, canonical ubuntu linux, debian linux +1 more +3 moreMutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.CVE-2020-14093Fix available5.9 Medium
- icinga, opensuse backports sle, leap +2 moreAn issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of...CVE-2020-14004Fix available7.8 High
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the...CVE-2017-9109Fix available9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a...CVE-2017-9108Fix available7.5 High
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop...CVE-2017-9104Fix available9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from...CVE-2017-9103Fix available9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +20 more +22 moreAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle...CVE-2020-12697.8 High
- qemu, canonical ubuntu linux, opensuse leap +2 more +4 moreAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...CVE-2020-10761Fix available5.0 Medium
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +16 more +18 moreA flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows...CVE-2020-10732Fix available3.3 Low
- canonical ubuntu linux, fedoraproject fedora, intel celeron 1000m +691 more +693 moreIncomplete cleanup from specific special register read operations in some Intel(R) Processors may...CVE-2020-0543Fix available5.5 Medium
- mumble, qt, fedoraproject fedora +1 more +3 moreQt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products,...CVE-2020-13962Fix available7.5 High
- arm cortex-a32 firmware, cortex-a34 firmware, cortex-a35 firmware +5 more +7 moreArm Armv8-A core implementations utilizing speculative execution past unconditional changes in...CVE-2020-13844Fix available5.5 Medium
- libreoffice, fedoraproject fedora, opensuse leap +2 moreXForms submissions could overwrite local filesCVE-2020-12803Fix available6.5 Medium
- libreoffice, fedoraproject fedora, opensuse leap +2 moreremote graphics contained in docx format retrieved in 'stealth mode'CVE-2020-12802Fix available5.3 Medium
- Show moreLoading…