Skip to contentOpensuse vulnerabilities
Newest
- opensuse wickedAn ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows...CVE-2020-72177.5 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 IA_PD optionCVE-2019-189037.5 High
- debian linux, linux kernel, opensuse leap +2 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize...CVE-2020-8647Fix available6.1 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...CVE-2020-8648Fix available7.1 High
- debian linux, linux kernel, opensuse leap +2 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...CVE-2020-8649Fix available5.9 Medium
- ipmitool, debian linux, fedoraproject fedora +1 more +3 moreremote code execution vulnerability in ipmitoolCVE-2020-5208Fix available7.7 High
- canonical cloud-init, debian linux, opensuse leap +2 moreIn cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a...CVE-2020-8632Fix available5.5 Medium
- canonical cloud-init, debian linux, opensuse leap +2 morecloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier...CVE-2020-8631Fix available5.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...CVE-2019-12528Fix availableEPSS 10.5%7.5 High
- squid-cache squid, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM...CVE-2020-8517Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...CVE-2020-8450Fix availableEPSS 71.8%7.3 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...CVE-2020-8449Fix available7.5 High
- hackerone nextcloud server, nextcloud server, novell suse linux enterprise server +1 more +3 moreAn authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local...CVE-2020-81185.0 Medium
- hackerone nextcloud server, nextcloud server, opensuse backports +1 more +3 moreImproper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs...CVE-2019-156244.9 Medium
- hackerone nextcloud server, nextcloud server, opensuse backports sle +1 more +3 moreExposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain...CVE-2019-156235.3 Medium
- hackerone nextcloud server, nextcloud server, opensuse backports +2 moreA bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file...CVE-2019-15613Fix available8.0 High
- gnome librsvg, canonical ubuntu linux, debian linux +3 more +5 moreIn xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause...CVE-2019-20446Fix available6.5 Medium
- canonical ubuntu linux, debian linux, intel 7265 firmware +12 more +14 moreOut of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an...CVE-2020-0569Fix available5.7 Medium
- [unknown] ceph, canonical ubuntu linux, opensuse leap +1 more +3 moreA flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An...CVE-2020-1700Fix available6.5 Medium
- opensuse wicked, leap +1 moreAn ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network...CVE-2020-72167.5 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 client optionsCVE-2019-189027.5 High
- opensuse leap 15.1, rmt-server, suse linux enterprise high performance computing 15-espos +6 more +8 moreMigrations requests can cause DoS on rmtCVE-2019-18904Fix available6.5 Medium
- python, canonical ubuntu linux, debian linux +5 more +7 morePython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...CVE-2020-8492Fix available6.5 Medium
- denx u-boot, opensuse leap +1 moreIn Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts(...CVE-2020-8432Fix available9.8 Critical
- php, debian linux, opensuse leap +2 more +4 moreglobal buffer-overflow in mbfl_filt_conv_big5_wcharCVE-2020-7060Fix available6.5 Medium
- php, debian linux, opensuse leap +2 more +4 moreOOB read in php_strip_tags_exCVE-2020-7059Fix available6.5 Medium
- red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 moreExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in AnsibleCVE-2019-14905Fix available7.3 High
- intel intel(r) processors, canonical ubuntu linux, debian linux +429 more +431 moreCleanup errors in some data cache evictions for some Intel(R) Processors may allow an...CVE-2020-0549Fix available5.5 Medium
- gnome networkmanager, opensuse, suse linux enterprise desktop +1 more +3 moreNetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication...CVE-2006-7246Fix available6.8 Medium
- suse yast2-security, opensuse factory +1 moreyast: Fallback to DES without configuration in /etc/login.defCVE-2019-3700Fix available2.9 Low
- opensuse factory, leap 15.1, privoxy +2 moreLocal privilege escalation from user privoxy to rootCVE-2019-36997.7 High
- gnu gnump3d, opensuse leap, leap 15.1 +2 moreLocal privilege escalation from user gnump3d to rootCVE-2019-36977.7 High
- opensuse factory, leap 15.1, munin +2 moreLocal privilege escalation from munin to root in the packaging of muninCVE-2019-36947.7 High
- opensuse factory, leap, leap 15.1 +3 more +5 moreLocal privilege escalation from user news to root in the packaging of innCVE-2019-3692Fix available7.7 High
- libressl, opensuse +1 moreMemory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause...CVE-2015-53337.5 High
- libressl, opensuse +1 moreOff-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to...CVE-2015-53349.8 Critical
- apt-cacher-ng project apt-cacher-ng, opensuse leap 15.1, backports +2 moreapt-cacher-ng insecure use of /run/apt-cacher-ngCVE-2019-188996.2 Medium
- opensuse libsolv, debian linux +1 morerepodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a...CVE-2019-20387Fix available7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- storebackup, canonical ubuntu linux, debian linux +2 more +4 morestoreBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which...CVE-2020-7040Fix available8.1 High
- apt-cacher-ng project apt-cacher-ng, debian linux, opensuse backports +1 more +3 moreapt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the...CVE-2020-5202Fix available5.5 Medium
- squid analysis report generator project analysis report generator, opensuse backports sle, leap +2 morelog.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation....CVE-2019-18932Fix available7.0 High
- systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in button_open in login/logind-button.c in systemd before 243. When...CVE-2019-20386Fix available2.4 Low
- red hat samba, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x...CVE-2019-19344Fix available6.5 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +1 more +3 moreThere is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4...CVE-2019-14902Fix available5.4 Medium
- saltstack salt, canonical ubuntu linux, debian linux +1 more +3 moreSaltStack Salt is vulnerable to command injectionCVE-2019-17361Fix availableEPSS 15.1%9.8 Critical
- libslirp project libslirp, qemu, debian linux +1 more +3 moretcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...CVE-2020-7039Fix available5.6 Medium
- cacti, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreCacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...CVE-2020-7106Fix available6.1 Medium
- wireshark, fedoraproject fedora, opensuse leap +2 more +4 moreIn Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan...CVE-2020-7044Fix available7.5 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2659Fix available3.7 Low
- Show moreLoading…