Opensuse Project vulnerabilities

Products

• Leap 35
• Opensuse 16
• Suse Linux Enterprise Desktop 13
• Suse Linux Enterprise Software Development Kit 13
• Suse Linux Enterprise Server 12
• Suse Linux Enterprise Workstation Extension 11
• Suse Linux Enterprise Debuginfo 7

Newest

• debian linux, linux kernel, canonical ubuntu linux +4 more +6 more The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that... CVE-2017-17806 Fix available 7.8 HighDecember 20, 2017
• debian linux, linux kernel, canonical ubuntu linux +4 more +6 more The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero... CVE-2017-17805 Fix available 7.8 HighDecember 20, 2017
• tcpdump, opensuse leap +1 more print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service ... CVE-2015-3138 7.5 HighApril 26, 2017
• putty, opensuse leap +1 more The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have... CVE-2017-6542 Public exploitFix available EPSS 21.8% 9.8 CriticalMarch 27, 2017
• icinga, opensuse leap +1 more Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and... CVE-2015-8010 6.1 MediumMarch 27, 2017
• viewvc, debian linux, opensuse leap +2 more Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC... CVE-2017-5938 Fix available 6.1 MediumFebruary 9, 2017
• torproject tor, debian linux, fedoraproject fedora +2 more +4 more Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via... CVE-2016-1254 Fix available 7.5 HighDecember 20, 2016
• game-music-emu project game-music-emu, fedoraproject fedora, novell suse linux enterprise desktop +3 more +5 more game-music-emu before 0.6.1 mishandles unspecified integer values. CVE-2016-9961 Fix available 9.8 CriticalDecember 15, 2016
• game-music-emu project game-music-emu, fedoraproject fedora, novell suse linux enterprise desktop +3 more +5 more game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and... CVE-2016-9960 Fix available 5.5 MediumDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. CVE-2016-9959 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. CVE-2016-9958 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more Stack-based buffer overflow in game-music-emu before 0.6.1. CVE-2016-9957 Fix available 7.8 HighDecember 15, 2016
• tats w3m, opensuse leap +1 more parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows... CVE-2016-9436 Fix available 6.5 MediumDecember 7, 2016
• tats w3m, opensuse leap +1 more The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize... CVE-2016-9435 Fix available 6.5 MediumDecember 7, 2016
• imagemagick, opensuse project leap +1 more coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service ... CVE-2016-10069 Fix available 5.5 MediumNovember 26, 2016
• imagemagick, opensuse leap +1 more The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of... CVE-2016-10068 Fix available 5.5 MediumNovember 26, 2016
• imagemagick, debian linux, opensuse project leap +2 more The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote... CVE-2016-9556 Fix available 5.5 MediumNovember 23, 2016
• clusterlabs pacemaker, opensuse leap, redhat enterprise linux high availability +3 more +5 more Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a... CVE-2016-7797 Fix available 7.5 HighNovember 22, 2016
• jasper project jasper, fedoraproject fedora, opensuse leap +1 more +3 more Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the... CVE-2015-5221 Fix available 5.5 MediumSeptember 16, 2016
• jasper project jasper, fedoraproject fedora, opensuse leap +1 more +3 more Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote... CVE-2015-5203 Fix available 5.5 MediumSeptember 16, 2016
• libtiff, opensuse, opensuse project leap +2 more Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in... CVE-2016-5317 Fix available 6.5 MediumAugust 30, 2016
• libtiff, opensuse, opensuse project leap +2 more Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier... CVE-2016-5316 Fix available 6.5 MediumAugust 30, 2016
• imagemagick, opensuse project leap +1 more Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote... CVE-2016-10048 Fix available 7.5 HighAugust 25, 2016
• imagemagick, canonical ubuntu linux, opensuse +6 more +8 more Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote... CVE-2014-9842 Fix available 7.5 HighJuly 11, 2016
• kernel util-linux, opensuse, opensuse project leap +2 more Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to... CVE-2015-5218 Fix available 2.1 LowNovember 5, 2015
• imagemagick, canonical ubuntu linux, novell leap +7 more +9 more Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service ... CVE-2014-9853 Fix available 5.5 MediumDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse +6 more +8 more ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash). CVE-2014-9851 Fix available 7.5 HighDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse +5 more +7 more Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource... CVE-2014-9850 Fix available 7.5 HighDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse +6 more +8 more The png coder in ImageMagick allows remote attackers to cause a denial of service (crash). CVE-2014-9849 Fix available 7.5 HighDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse leap +6 more +8 more Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory... CVE-2014-9848 Fix available 7.5 HighDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse +7 more +9 more The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. CVE-2014-9847 Fix available 9.8 CriticalDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse leap +7 more +9 more Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote... CVE-2014-9846 Fix available 9.8 CriticalDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse leap +7 more +9 more The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a... CVE-2014-9845 Fix available 5.5 MediumDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse +7 more +9 more The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause... CVE-2014-9844 Fix available 5.5 MediumDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse +5 more +7 more The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to... CVE-2014-9843 Fix available 9.8 CriticalDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse +5 more +7 more The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have... CVE-2014-9841 Fix available 9.8 CriticalDecember 31, 2014
• djangoproject django, debian linux, opensuse +2 more Django denial of service via file upload naming CVE-2014-0481 Fix available 4.3 MediumAugust 22, 2014
• ntp, debian linux, fedoraproject fedora +10 more +12 more ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys... CVE-2015-3405 Fix available 7.5 HighJuly 21, 2014
• oracle mysql, debian linux, mariadb +9 more +11 more Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5... CVE-2014-4258 Fix available 6.5 MediumJuly 16, 2014
• python, simplejson project simplejson, opensuse +2 more simplejson before 2.6.1 vulnerable to array index error CVE-2014-4616 Fix available 5.9 MediumJune 26, 2014
• castor project castor, opensuse +1 more Improper Restriction of XML External Entity Reference in Castor CVE-2014-3004 Public exploitFix available 4.3 MediumJune 11, 2014
• mozilla firefox, opensuse, oracle solaris +2 more Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0... CVE-2014-1542 Fix available 6.8 MediumJune 11, 2014
• mozilla firefox, seamonkey, canonical ubuntu linux +3 more +5 more The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and... CVE-2014-1528 Fix available 10.0 HighApril 29, 2014
• mozilla firefox, seamonkey, opensuse +4 more +6 more The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla... CVE-2014-1502 6.8 MediumMarch 19, 2014
• mozilla firefox, seamonkey, opensuse +4 more +6 more Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of... CVE-2014-1500 5.0 MediumMarch 19, 2014
• mozilla firefox, seamonkey, opensuse +4 more +6 more Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain... CVE-2014-1499 4.3 MediumMarch 19, 2014
• mozilla firefox, seamonkey, opensuse +4 more +6 more The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25... CVE-2014-1498 5.0 MediumMarch 19, 2014
• mozilla firefox, seamonkey, opensuse +4 more +6 more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and... CVE-2014-1494 9.3 HighMarch 19, 2014
• rubyonrails rails, ruby on rails, opensuse +2 more +4 more Rails vulnerable to Cross-site Scripting CVE-2014-0081 Fix available 4.3 MediumFebruary 20, 2014
• armin burgmeier net6, opensuse, oracle solaris +2 more Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote... CVE-2011-4093 5.8 MediumFebruary 10, 2014
• Show olderLoading…