Skip to contentOpensuse vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had...CVE-2020-6466Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote...CVE-2020-6465Fix available9.6 Critical
- google chrome, canonical ubuntu linux, debian linux +3 more +5 moreUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...CVE-2020-6463Fix available8.8 High
- fedoraproject fedora, mariadb connector\/c, opensuse leap +2 morelibmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the...CVE-2020-13249Fix available8.8 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash....CVE-2020-13164Fix available7.5 High
- bluetooth core, br/edr, opensuse leap +2 moreBluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacksCVE-2020-10135Public exploitFix available5.4 Medium
- opensuse open build service, debian linux +1 moreunauthorized read access to files where sourceaccess is disabled via a crafted _service file in Open Build ServiceCVE-2020-8021Fix available5.3 Medium
- powerdns recursor, debian linux, fedoraproject fedora +2 more +4 moreAn issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer...CVE-2020-12244Fix available7.5 High
- powerdns recursor, debian linux, fedoraproject fedora +2 more +4 morePowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against...CVE-2020-10995Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.CVE-2020-12663Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...CVE-2020-12662Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +3 more +5 moreA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cCVE-2020-8617Public exploitFix availableEPSS 93.3%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moregadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13...CVE-2020-13143Fix available6.5 Medium
- libreoffice, opensuse leap +1 moreCrash-recovered MSOffice encrypted documents defaulted to not to using encryption on next saveCVE-2020-12801Fix available5.3 Medium
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +2 more +4 moreA vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct...CVE-2020-10726Fix available6.0 Medium
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +2 more +4 moreA flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a...CVE-2020-10725Fix available7.7 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an...CVE-2020-10723Fix available5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...CVE-2020-10722Fix available5.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11526Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11525Fix available2.2 Low
- freerdp, canonical ubuntu linux, opensuse leap +2 moreUpdated freerdp/remmina packages fix security vulnerabilityCVE-2020-11524Fix available6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security updateCVE-2020-11523Fix available6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11522Fix available6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security updateCVE-2020-11521Fix available6.6 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a...CVE-2020-0093Fix available5.0 Medium
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- opensuse open-build-service, debian linux, opensuse open build service +2 morePersistent XSS in markdown parser used by obs-serverCVE-2020-8020Fix available6.5 Medium
- infradead openconnect, debian linux, fedoraproject fedora +1 more +3 moreOpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or...CVE-2020-12823Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreCVE-2020-10711 does not affect BellSoft softwareCVE-2020-10711Fix available5.9 Medium
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.CVE-2020-11866Fix available7.8 High
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.CVE-2020-11865Fix available7.8 High
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).CVE-2020-11864Fix available5.5 Medium
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).CVE-2020-11863Fix available5.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreexif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.CVE-2020-12767Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...CVE-2020-12769Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...CVE-2020-12771Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, debian linux +19 more +21 moreThere is a use-after-free in kernel versions before 5.5 due to a race condition between the...CVE-2020-10690Fix available6.5 Medium
- google chrome, debian linux, opensuse leap +2 moreType confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to...CVE-2020-6464Fix available8.8 High
- oneidentity syslog-ng, opensuse backports sle-15-sp1, leap 15.1 +6 more +8 moresyslog-ng: Local privilege escalation from new to root in %postCVE-2020-8019Fix available7.7 High
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 more/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.CVE-2020-12108Fix available6.5 Medium
- graphicsmagick, debian linux, opensuse backports sle +1 more +3 moreGraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.CVE-2020-12672Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...CVE-2020-6831Fix available9.8 Critical
- linux kernel, canonical ubuntu linux, opensuse leap +2 moregss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in...CVE-2020-12656Fix availableDisputed5.5 Medium
- debian linux, linux kernel, netapp a700s firmware +19 more +21 moreAn issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in...CVE-2020-12653Fix available7.8 High
- roundcube webmail, opensuse backports sle, leap +2 moreRoundcube Webmail before 1.4.4 allows attackers to include local files and execute code via...CVE-2020-12640Public exploitFix available9.8 Critical
- roundcube webmail, opensuse backports sle, leap +2 morercube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via...CVE-2020-12641In KEVPublic exploitFix availableEPSS 84.4%9.8 Critical
- roundcube webmail, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS)...CVE-2020-12625Public exploitFix available6.1 Medium
- sqliteodbc project sqliteodbc, fedoraproject fedora, opensuse backports sle +2 moreSQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition...CVE-2020-12050Fix available7.0 High
- Show moreLoading…