Skip to contentOpensuse vulnerabilities
Newest
- xv project xv, opensuse leap +1 morexvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields,...CVE-2017-182159.8 Critical
- opensuse open buildservice, suse open build service +1 moreopen build service source server symlink exploitation via source patchCVE-2015-07966.3 Medium
- nextcloud, opensuse leap +1 morenextcloud package security issues with /srv/www/htdocsCVE-2017-92867.8 High
- opensuse zypper, fedoraproject fedora +1 moreproxy credentials written to log files by zypperCVE-2017-9271Fix available4.0 Medium
- opensuse open build serviceopen-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissionsCVE-2017-9268Fix available4.4 Medium
- opensuse open build serviceOBS worker VM escape via relative symbolic linksCVE-2017-5188Fix available5.0 Medium
- systemd project systemd, canonical ubuntu linux, opensuse leap +2 moresystemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path...CVE-2018-6954Fix available7.8 High
- systemd project systemd, debian linux, opensuse leap +2 moresystemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on...CVE-2017-18078Public exploitFix available7.8 High
- libtiff, opensuse leap, suse linux enterprise desktop +2 more +4 more** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to...CVE-2017-16232Fix availableDisputed7.5 High
- google chrome, qt, opensuse leap +2 moreThe Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt...CVE-2015-12908.8 High
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 Medium
- debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 Critical
- moinmo moinmoin, canonical ubuntu linux, debian linux +1 more +3 moreModerate severity vulnerability that affects moinCVE-2017-5934Fix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that...CVE-2017-17806Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero...CVE-2017-17805Fix available7.8 High
- openldap, mcafee policy auditor, opensuse leap +1 more +3 morecontrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the...CVE-2017-17740Fix available7.5 High
- opensuse obs-service-source validatorosc executes spec code during "osc commit"CVE-2017-9274Fix available7.8 High
- suse build, opensuse leap, suse linux enterprise software development kit +2 morepackage builds could use directory traversal to write outside of target areaCVE-2017-14804Fix available9.9 Critical
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity...CVE-2017-13088Fix available5.3 Medium
- canonical ubuntu linux, debian linux, freebsd +9 more +11 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group...CVE-2017-13087Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ...CVE-2017-13086Fix available6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the...CVE-2017-13082Fix available8.1 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13081Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13080Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13079Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13078Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)...CVE-2017-13077Fix available6.8 Medium
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 moreStack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14493Public exploitFix availableEPSS 85.2%9.8 Critical
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 Critical
- heimdal project heimdal, opensuse leap +1 moreThe transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath...CVE-2017-6594Fix available7.5 High
- opensuse libzypplack of keypinning in libzypp could lead to repository switchingCVE-2017-9269Fix available7.7 High
- opensuse libzypplibzypp accepts unsigned packages even when configured to check signaturesCVE-2017-7436Fix available8.1 High
- opensuse libzypplibzypp accepts unsigned 3rd party repo without warningCVE-2017-7435Fix available8.1 High
- opensuse cryptctlpost-auth arbitrary file write on cryptctl serverCVE-2017-9270Fix available8.7 High
- cairographics cairo, opensuse leap +1 morecairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of...CVE-2017-9814Fix available7.5 High
- golang go, fedoraproject fedora, novell suse package hub for suse linux enterprise +1 more +3 moreA bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in...CVE-2017-8932Fix available5.9 Medium
- gnu glibc, debian linux, mcafee web gateway +17 more +19 moreglibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate...CVE-2017-1000366Public exploitFix available7.8 High
- gnome libcroco, opensuse leap +1 moreThe cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote...CVE-2017-8871Public exploitFix availableEPSS 12.9%6.5 Medium
- gnome libcroco, opensuse leap +1 moreThe cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to...CVE-2017-8834Fix available6.5 Medium
- git git-shell, canonical ubuntu linux, debian linux +2 more +4 moregit-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x...CVE-2017-8386Public exploitFix availableEPSS 12.4%8.8 High
- tcpdump, opensuse leap +1 moreprint-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service ...CVE-2015-31387.5 High
- putty, opensuse leap +1 moreThe ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have...CVE-2017-6542Public exploitFix availableEPSS 21.8%9.8 Critical
- icinga, opensuse leap +1 moreCross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and...CVE-2015-80106.1 Medium
- jasper project jasper, fedoraproject fedora, opensuse leap +2 moreThe calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a...CVE-2016-93997.5 High
- percona xtrabackup, fedoraproject fedora, opensuse leap +2 morexbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the...CVE-2016-6225Fix available5.9 Medium
- postfixadmin project postfixadmin, opensuse leap +1 moreThe AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins...CVE-2017-5930Fix availableEPSS 15.0%2.7 Low
- sane-backends project sane-backends, opensuse leap +1 moresaned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via...CVE-2017-6318Fix available7.5 High
- tigervnc, opensuse leap +1 moreThe Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory...CVE-2016-10207Fix available7.5 High
- viewvc, debian linux, opensuse leap +2 moreCross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC...CVE-2017-5938Fix available6.1 Medium
- Show moreLoading…