Skip to contentSuse Linux vulnerabilities
- libarchive, canonical ubuntu linux, debian linux +3 more +5 moreThe compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before...CVE-2015-8932Fix available5.5 Medium
- libarchive, canonical ubuntu linux, debian linux +3 more +5 moreMultiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in...CVE-2015-8931Fix available7.8 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 morebsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite...CVE-2015-8930Fix available7.5 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0...CVE-2015-8928Fix available5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive...CVE-2015-8926Fix available5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows...CVE-2015-8925Fix available5.5 Medium
- linux kernel, suse linux enterprise real time extension +1 moreThe fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local...CVE-2015-8785Fix available6.2 Medium
- ntp, novell suse openstack cloud, opensuse leap +6 more +8 moreThe ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77...CVE-2015-7976Fix available4.3 Medium
- adobe air, air sdk, flash player +14 more +16 moreInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on...CVE-2015-8651In KEVFix availableEPSS 67.7%8.8 High
- debian linux, linux kernel, opensuse +5 more +7 moreThe PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x...CVE-2015-8551Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreMemory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory...CVE-2015-8567Fix available7.7 High
- openssl, apple mac os x, canonical ubuntu linux +21 more +23 moreThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...CVE-2015-3195Public exploitFix availableEPSS 38.7%5.3 Medium
- ibm java 2 sdk, java sdk, redhat enterprise linux desktop +6 more +8 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3...CVE-2015-50062.1 Low
- libpng, apple mac os x, canonical ubuntu linux +16 more +18 moreMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before...CVE-2015-8126Fix availableEPSS 10.3%7.5 High
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 moreThe build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1...CVE-2015-2697Fix available4.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +5 more +7 morelib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate...CVE-2015-2696Fix available7.1 High
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 morelib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an...CVE-2015-2695Fix available5.0 Medium
- ntp, canonical ubuntu linux, debian linux +16 more +18 moreThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the...CVE-2015-5300Fix available7.5 High
- oracle java se, opensuse leap, opensuse +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to...CVE-2015-4902In KEVEPSS 13.6%5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4830Fix available4.0 Medium
- adobe flash player, opensuse evergreen, opensuse +7 more +9 moreAdobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11...CVE-2015-7645In KEVPublic exploitFix availableEPSS 65.3%7.8 High
- qemu, arista eos, canonical ubuntu linux +4 more +6 morehw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which...CVE-2015-6855Fix available7.5 High
- qemu, arista eos, canonical ubuntu linux +5 more +7 moreInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...CVE-2015-5239Fix available6.5 Medium
- gnome networkmanager, canonical ubuntu linux, oracle linux +6 more +8 moreGNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic...CVE-2015-0272Fix available5.0 Medium
- ntp, canonical ubuntu linux, debian linux +13 more +15 moreThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions...CVE-2015-5219Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +10 more +12 moreThe log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote...CVE-2015-5194Fix available7.5 High
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreInteger overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x...CVE-2015-5707Fix available4.6 Medium
- freeradius, suse linux enterprise server, linux enterprise software development kit +2 moreFreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of...CVE-2015-4680Fix available7.5 High
- ibm java sdk, redhat enterprise linux desktop, enterprise linux eus +5 more +7 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before...CVE-2015-19315.5 Medium
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...CVE-2015-5477In KEVPublic exploitFix availableEPSS 99.6%7.8 High
- google chrome, canonical ubuntu linux, debian linux +10 more +12 moreMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...CVE-2015-1283Fix availableEPSS 18.3%6.8 Medium
- qemu, xen, fedoraproject fedora +4 more +6 moreHeap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when...CVE-2015-5154Fix available7.2 High
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...CVE-2015-2590In KEVFix availableEPSS 25.5%9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation...CVE-2015-5123In KEVFix availableEPSS 18.8%9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)...CVE-2015-5122In KEVPublic exploitFix availableEPSS 87.0%9.8 Critical
- adobe flash player, opensuse evergreen, opensuse +8 more +10 moreUse-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in...CVE-2015-5119In KEVPublic exploitFix availableEPSS 98.6%9.8 Critical
- haproxy, canonical ubuntu linux, debian linux +9 more +11 moreThe buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly...CVE-2015-3281Fix available5.0 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 High
- qemu, canonical ubuntu linux, citrix xenserver +5 more +7 moreQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...CVE-2015-4106Fix available4.6 Medium
- proftpd, debian linux, fedoraproject fedora +2 more +4 moreThe mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files...CVE-2015-3306In KEVPublic exploitFix availableEPSS 99.5%10.0 High
- gnu glibc, canonical ubuntu linux, debian linux +3 more +5 moreBuffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library ...CVE-2015-1781Fix available6.8 Medium
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreGoogle Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation...CVE-2015-1241Fix available4.3 Medium
- mysql, debian linux, suse linux enterprise desktop +2 more +4 moreImproper Access Control in MySQL Connectors JavaCVE-2015-2575Fix available4.9 Medium
- debian linux, gstreamer, mozilla firefox +11 more +13 moreGStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and...CVE-2015-0797Fix available6.8 Medium
- gnu glibc, canonical ubuntu linux, suse linux enterprise desktop +1 more +3 moreDB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc...CVE-2014-8121Fix available5.0 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +3 more +5 morecoders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application...CVE-2014-9854Fix available7.5 High
- Show moreLoading…