Suse Linux vulnerabilities

• opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more sdbootutil: world-readable debug log CVE-2026-104618 6.9 MediumOctober 15, 2026
• opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline CVE-2026-104617 Fix available 5.9 MediumOctober 15, 2026
• libxfont2, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 more fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2 CVE-2026-59679 Fix available 9.2 CriticalAugust 5, 2026
• libxfont, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 more fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2 CVE-2026-44950 Fix available 9.5 CriticalAugust 5, 2026
• suse opensuse, linux enterprise +1 more Path Traversal in Plugin Loading in libzypp CVE-2026-44933 Fix available 8.5 HighMay 20, 2026
• suse container suse/sle-micro-rancher/5.3:latest, container suse/sle-micro-rancher/5.4:latest, container suse/sle-micro/5.5:latest +31 more +33 more Missing exit out of permission check in haveged could lead to root exploit CVE-2026-41054 Fix available 7.8 HighMay 19, 2026
• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• suse linux enterprise server nftables disabled due to incorrect kernel backport CVE-2026-25702 Fix available 7.3 HighMarch 5, 2026
• suse container suse/manager/4.3/proxy-httpd:latest, container suse/manager/5.0/x86 64/proxy-httpd:latest, container suse/multi-linux-manager/5.1/x86 64/proxy-httpd:latest +1 more +3 more susemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversal CVE-2025-53880 Fix available 8.7 HighOctober 28, 2025
• sudo, canonical ubuntu linux, debian linux +5 more +7 more Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... CVE-2025-32463 In KEVPublic exploitFix available EPSS 56.3% 9.3 CriticalJune 30, 2025
• suse linux enterprise desktop 15 sp6, linux enterprise high performance computing 15 sp6, linux enterprise micro 5.3 +5 more +7 more Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen CVE-2025-46802 Fix available 5.3 MediumMay 8, 2025
• samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync CVE-2024-12087 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +13 more +15 more Rsync: rsync server leaks arbitrary client files CVE-2024-12086 Fix available 6.1 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data... CVE-2024-46956 Fix available 7.8 HighOctober 5, 2024
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of... CVE-2024-46955 Fix available 5.5 MediumOctober 5, 2024
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer... CVE-2024-46953 Fix available 7.8 HighOctober 5, 2024
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked... CVE-2024-46951 Fix available 7.8 HighOctober 5, 2024
• suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +13 more +15 more Crafted projects can overwrite special files in the .osc config directory CVE-2024-22034 Fix available 5.5 MediumAugust 19, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• suse container suse/manager/5.0/x86 64/server:5.0.0-beta1.2.122, opensuse leap 15.5, opensuse tumbleweed +20 more +22 more tomcat packaging allows for escalation to root from tomcat user CVE-2024-22029 Fix available 7.8 HighFebruary 14, 2024
• relax-and-recover, fedoraproject fedora, redhat enterprise linux +1 more +3 more Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y... CVE-2024-23301 Fix available 5.5 MediumJanuary 12, 2024
• opensuse leap, suse linux enterprise high performance computing, opensuse leap 15.5 +3 more +5 more A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux... CVE-2023-32182 Fix available 5.9 MediumAugust 23, 2023
• debian linux, linux kernel, suse linux enterprise +2 more An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16... CVE-2023-34256 Fix availableDisputed 5.5 MediumMay 31, 2023
• service location protocol project location protocol, ietf service location protocol (slp), netapp smi-s provider +3 more +5 more The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to... CVE-2023-29552 In KEV EPSS 64.0% 7.5 HighApril 24, 2023
• linux kernel, suse linux enterprise server +1 more In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return... CVE-2023-23005 Fix availableDisputed 5.5 MediumMarch 1, 2023
• opensuse supportutils, suse linux enterprise server 12, linux enterprise server 15 +1 more +3 more supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh CVE-2022-45154 Fix available 4.4 MediumFebruary 15, 2023
• opensuse libzypp-plugin-appdata, leap 15.4, suse linux enterprise server for sap 15-sp3 +2 more libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls CVE-2023-22643 Fix available 6.3 MediumJanuary 17, 2023
• opensuse leap 15.3, leap 15.4, rmt-server +3 more +5 more rmt-server-pubcloud allows to escalate from user _rmt to root CVE-2022-31254 Fix available 7.8 HighJanuary 3, 2023
• opensuse leap, leap 15.4, suse linux enterprise module for sap applications +3 more +5 more saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls CVE-2022-45153 Fix available 7.0 HighJanuary 2, 2023
• suse manager server, linux enterprise module for suse manager server 4.2, linux enterprise module for suse manager server 4.3 +2 more +4 more SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do CVE-2022-43754 Fix available 2.6 LowNovember 4, 2022
• suse manager server, linux enterprise module for suse manager server 4.2, linux enterprise module for suse manager server 4.3 +2 more +4 more SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload CVE-2022-43753 Fix available 4.3 MediumNovember 4, 2022
• suse manager server, linux enterprise module for suse manager server 4.2, linux enterprise module for suse manager server 4.3 +2 more +4 more SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction CVE-2022-31255 Fix available 4.3 MediumNovember 4, 2022
• opensuse leap, leap micro, leap 15.3 +4 more +6 more permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() CVE-2022-31252 Fix available 4.4 MediumSeptember 19, 2022
• samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 more In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command... CVE-2022-27239 Fix available 7.8 HighApril 27, 2022
• gnu grub2, suse opensuse factory, linux enterprise server 15 sp4 +2 more grub2-once uses fixed file name in /var/tmp CVE-2021-46705 Fix available 5.1 MediumMarch 16, 2022
• cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 more Command Injection in Cobbler CVE-2021-45082 Fix available 7.8 HighFebruary 18, 2022
• linux kernel, suse linux enterprise +1 more A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed... CVE-2021-4028 Fix available 7.8 HighFebruary 1, 2022
• polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... CVE-2021-4034 In KEVPublic exploitFix available EPSS 94.9% 7.8 HighJanuary 25, 2022
• vim, vim vim/vim, apple mac os x +6 more +8 more Out-of-bounds Read in vim/vim CVE-2021-4166 Fix available 7.1 HighDecember 25, 2021
• ruby-lang cgi, ruby, debian linux +6 more +8 more Cookie Prefix Spoofing in CGI::Cookie.parse CVE-2021-41819 Fix available 7.5 HighDecember 23, 2021
• ruby-lang date, ruby, debian linux +6 more +8 more Regular expression denial of service vulnerability (ReDoS) in date CVE-2021-41817 Fix available 7.5 HighNovember 16, 2021
• balasys dheater, f5 big-ip access policy manager, big-ip advanced firewall manager +27 more +29 more The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send... CVE-2002-20001 Public exploitFix available EPSS 24.6% 7.5 HighNovember 11, 2021
• opensuse factory, suse linux enterprise server, opensuse factory +2 more +4 more clone-master-clean-up: dangerous file system operations CVE-2021-32000 Fix available 3.2 LowJuly 28, 2021
• rancher, rancher suse linux enterprise server 15, suse linux enterprise server 15 +2 more Rancher: Privilege escalation vulnerability via malicious Connection header CVE-2021-31999 Fix available 8.8 HighJuly 15, 2021
• opensuse factory, leap 15.2, suse arpwatch +3 more +5 more arpwatch: Local privilege escalation from runtime user to root CVE-2021-25321 Fix available 7.8 HighJune 28, 2021
• opensuse cryptctl, suse linux enterprise server for sap 12-sp5, manager server 4.0 +2 more cryptctl: client side password hashing is equivalent to clear text password storage CVE-2019-18906 Fix available 9.8 CriticalJune 23, 2021
• opensuse inn, backports sle-15-sp2, leap 15.2 +1 more +3 more inn: %post calls user owned file allowing local privilege escalation to root CVE-2021-31998 Fix available 6.8 MediumJune 3, 2021
• opensuse factory, leap 15.2, suse cups +4 more +6 more cups: ownership of /var/log/cups allows the lp user to create files as root CVE-2021-25317 Fix available 3.3 LowApril 30, 2021
• suse hawk2, linux enterprise high availability 12-sp3, linux enterprise high availability 12-sp5 +1 more +3 more hawk: Insecure file permissions CVE-2021-25314 Fix available 7.8 HighMarch 24, 2021
• Show olderLoading…