Suse Crowbar vulnerabilities

• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 more In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command... CVE-2022-27239 Fix available 7.8 HighApril 27, 2022
• opensuse factory, leap 15.2, suse arpwatch +3 more +5 more arpwatch: Local privilege escalation from runtime user to root CVE-2021-25321 Fix available 7.8 HighJune 28, 2021
• opensuse factory, leap 15.2, suse cups +4 more +6 more cups: ownership of /var/log/cups allows the lp user to create files as root CVE-2021-25317 Fix available 3.3 LowApril 30, 2021
• opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 more Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2 CVE-2020-8023 Fix available 7.7 HighJuly 6, 2020
• apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 more User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges CVE-2020-8022 Fix available 7.7 HighJune 26, 2020
• suse openstack cloud, openstack cloud crowbar, openstack cloud 7 +4 more +6 more crowbar provision leaks admin password to all nodes in cleartext CVE-2018-17954 9.3 CriticalFebruary 3, 2020
• crowbar project crowbar insecure permissions on files containing confidential data CVE-2012-0433 3.3 LowJune 8, 2018