Suse Cloud vulnerabilities

• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 more In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command... CVE-2022-27239 Fix available 7.8 HighApril 27, 2022
• opensuse factory, leap 15.2, suse arpwatch +3 more +5 more arpwatch: Local privilege escalation from runtime user to root CVE-2021-25321 Fix available 7.8 HighJune 28, 2021
• opensuse factory, leap 15.2, suse cups +4 more +6 more cups: ownership of /var/log/cups allows the lp user to create files as root CVE-2021-25317 Fix available 3.3 LowApril 30, 2021
• opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 more Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2 CVE-2020-8023 Fix available 7.7 HighJuly 6, 2020
• apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 more User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges CVE-2020-8022 Fix available 7.7 HighJune 26, 2020
• suse openstack cloud, openstack cloud crowbar, openstack cloud 7 +4 more +6 more crowbar provision leaks admin password to all nodes in cleartext CVE-2018-17954 Fix available 9.3 CriticalFebruary 3, 2020
• opensuse leap 15.1, rmt-server, suse linux enterprise high performance computing 15-espos +6 more +8 more Migrations requests can cause DoS on rmt CVE-2019-18904 Fix available 6.5 MediumJanuary 30, 2020
• suse keystone-json-assignment, openstack cloud, openstack cloud 8 +1 more +3 more keystone_json_assignment backend granted access to any project for users in user-project-map.json CVE-2019-3683 8.8 HighJanuary 17, 2020
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... CVE-2018-12122 Fix available EPSS 41.3% 7.5 HighNovember 28, 2018
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... CVE-2018-12116 Fix available 7.5 HighNovember 28, 2018
• linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 more The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files CVE-2018-6556 Fix available 3.3 LowAugust 6, 2018
• debian linux, linux kernel, canonical ubuntu linux +9 more +11 more The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write... CVE-2018-7566 Fix available 7.8 HighMarch 28, 2018
• nextcloud, opensuse leap +1 more nextcloud package security issues with /srv/www/htdocs CVE-2017-9286 7.8 HighMarch 1, 2018
• debian linux, linux kernel, arista eos +26 more +28 more The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,... CVE-2017-18017 Fix available EPSS 52.8% 9.8 CriticalJanuary 3, 2018
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)... CVE-2017-13084 6.8 MediumOctober 17, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity... CVE-2017-13088 Fix available 5.3 MediumOctober 16, 2017
• canonical ubuntu linux, debian linux, freebsd +9 more +11 more Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group... CVE-2017-13087 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ... CVE-2017-13086 Fix available 6.8 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the... CVE-2017-13082 Fix available 8.1 HighOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the... CVE-2017-13081 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)... CVE-2017-13080 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the... CVE-2017-13079 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)... CVE-2017-13078 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)... CVE-2017-13077 Fix available 6.8 MediumOctober 16, 2017
• xen, novell suse linux enterprise point of sale, suse linux enterprise server +3 more +5 more Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them,... CVE-2017-7995 Fix available 3.8 LowMay 2, 2017
• ntp, novell suse manager, opensuse leap +6 more +8 more ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash)... CVE-2016-4957 Fix available EPSS 44.9% 7.5 HighJune 13, 2016
• ntp, opensuse leap, opensuse +9 more +11 more ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral... CVE-2016-4953 Fix available EPSS 17.2% 7.5 HighJune 13, 2016
• ntp, novell suse manager, opensuse leap +7 more +9 more ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved... CVE-2016-4956 Fix available EPSS 16.4% 5.3 MediumJune 7, 2016
• ntp, novell suse manager, opensuse leap +7 more +9 more ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a... CVE-2016-4955 Fix available 5.9 MediumJune 7, 2016
• ntp, opensuse leap, opensuse +9 more +11 more The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote... CVE-2016-4954 Fix available EPSS 13.3% 7.5 HighJune 7, 2016
• ibm java sdk, redhat enterprise linux desktop, enterprise linux hpc node supplementary +9 more +11 more Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before... CVE-2016-0264 Fix available 5.6 MediumMay 13, 2016
• imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow... CVE-2016-3718 In KEVPublic exploitFix available EPSS 75.6% 5.5 MediumMay 5, 2016
• imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers... CVE-2016-3715 In KEVPublic exploitFix available EPSS 75.3% 5.5 MediumMay 5, 2016
• linux kernel, novell suse linux enterprise desktop, suse linux enterprise server +5 more +7 more The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1... CVE-2015-8845 Fix available 5.5 MediumApril 27, 2016
• oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 more Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and... CVE-2016-3427 In KEVFix available EPSS 92.3% 9.8 CriticalApril 21, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers... CVE-2016-2315 Fix available EPSS 17.3% 9.8 CriticalMarch 16, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)... CVE-2016-2324 Fix available EPSS 18.1% 9.8 CriticalMarch 15, 2016
• isc bind, canonical ubuntu linux, debian linux +11 more +13 more named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to... CVE-2016-1286 Fix available EPSS 60.8% 8.6 HighMarch 9, 2016
• isc bind, canonical ubuntu linux, debian linux +11 more +13 more named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME... CVE-2016-1285 Fix available EPSS 57.8% 6.8 MediumMarch 9, 2016
• linux kernel, suse linux enterprise debuginfo, linux enterprise desktop +5 more +7 more The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows... CVE-2016-2782 Public exploitFix available 4.6 MediumFebruary 29, 2016
• ntp, canonical ubuntu linux, debian linux +16 more +18 more The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the... CVE-2015-5300 Fix available 7.5 HighOctober 22, 2015
• ntp, canonical ubuntu linux, debian linux +13 more +15 more The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions... CVE-2015-5219 Fix available 7.5 HighAugust 25, 2015
• ntp, canonical ubuntu linux, debian linux +10 more +12 more The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote... CVE-2015-5194 Fix available 7.5 HighAugust 25, 2015
• openstack keystone, suse cloud +1 more OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege CVE-2014-3476 Fix available 6.0 MediumJune 17, 2014
• apache mod fcgid, debian linux, opensuse +2 more +4 more Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the... CVE-2013-4365 Fix available EPSS 13.6% 7.5 HighOctober 12, 2013