Skip to contentSuse Linux vulnerabilities
- suse s390-tools, linux enterprise server 12-sp5, linux enterprise server 15-sp2 +2 moreLocal DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-toolsCVE-2021-25316Fix available3.3 Low
- opensuse tumbleweed, saltstack salt, suse linux enterprise server 15 sp 3 +2 moresalt-api unauthenticated remote code executionCVE-2021-25315Fix available9.8 Critical
- opensuse openldap2, leap 15.1, leap 15.2 +2 more +4 moreopenldap uses fixed paths in /tmpCVE-2020-8027Fix available7.3 High
- suse salt-netapi-client, linux enterprise module for suse manager server 4.1, manager server 3.2 +1 more +3 moresalt-api is accessible to every user on SUSE Manager ServerCVE-2020-8028Fix available9.3 Critical
- opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 moreoutdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesCVE-2020-8025Fix available6.1 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shimCVE-2020-15705Fix available6.4 Medium
- debian linux, gnu grub2, canonical ubuntu linux +13 more +15 moreGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.CVE-2020-15707Fix available5.7 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.CVE-2020-15706Fix available6.4 Medium
- opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 moreLocal privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2CVE-2020-8023Fix available7.7 High
- apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 moreUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviligesCVE-2020-8022Fix available7.7 High
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreAn integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context...CVE-2020-14147Fix available7.7 High
- opensuse factory, leap 15.1, osc +4 more +6 moreosc: stores downloaded (supposed) RPM in network-controlled filesystem pathsCVE-2019-3681Fix available7.5 High
- oneidentity syslog-ng, opensuse backports sle-15-sp1, leap 15.1 +6 more +8 moresyslog-ng: Local privilege escalation from new to root in %postCVE-2020-8019Fix available7.7 High
- suse linux enterprise server 15 sp1, linux enterprise desktop +1 moreUser owned /etc in SLES15-SP1-CHOST-BYOSCVE-2020-80188.4 High
- opensuse autoyast2, suse linux enterprise server 12, linux enterprise server 15 +2 moreDeprecated functionality in autoyast2 automatically imports gpg keys without checking themCVE-2019-18905Fix available4.8 Medium
- opensuse leap, leap 15.1, texlive-filesystem +3 more +5 morerace condition on texlive-filesystem cron job allows for the deletion of unintended filesCVE-2020-80176.2 Medium
- opensuse leap 15.1, texlive-filesystem, suse linux enterprise module for desktop applications 15-sp1 +2 more +4 morerace condition in the packaging of texlive-filesystenCVE-2020-80164.9 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6429Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6428Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6427Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote...CVE-2020-6426Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6424Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6422Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6449Fix available8.8 High
- opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 moreLocal privilege escalation from user salt to rootCVE-2019-188978.4 High
- suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 morepermissions: chkstat sets unintended setuid/capabilities for mrsh and wodimCVE-2020-8013Fix available2.2 Low
- nagios, opensuse factory, suse linux enterprise server 11 +3 more +5 morenagios cron job allows privilege escalation from user nagios to rootCVE-2019-36985.7 Medium
- suse linux enterprise server, linux enterprise server 12, linux enterprise server 15 +1 more +3 moremysql-systemd-helper allows setting 640 permissions of arbitrary filesCVE-2019-189015.1 Medium
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to root through migrate_tempdirsCVE-2019-36968.4 High
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to rootCVE-2019-36958.4 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 IA_PD optionCVE-2019-189037.5 High
- hackerone nextcloud server, nextcloud server, opensuse backports +1 more +3 moreImproper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs...CVE-2019-156244.9 Medium
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 client optionsCVE-2019-189027.5 High
- opensuse leap 15.1, rmt-server, suse linux enterprise high performance computing 15-espos +6 more +8 moreMigrations requests can cause DoS on rmtCVE-2019-18904Fix available6.5 Medium
- gnome networkmanager, opensuse, suse linux enterprise desktop +1 more +3 moreNetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication...CVE-2006-7246Fix available6.8 Medium
- opensuse factory, leap, leap 15.1 +3 more +5 moreLocal privilege escalation from user news to root in the packaging of innCVE-2019-3692Fix available7.7 High
- suse linux enterprise server"easy" permission profile allows everyone execute dumpcap and read all network trafficCVE-2019-36874.0 Medium
- opensuse libzypp, suse caas platform 3.0, linux enterprise server 12 +1 more +3 morelibzypp stores cookies world readableCVE-2019-18900Fix available4.0 Medium
- phpmyadmin, debian linux, suse linux enterprise server +2 morephpMyAdmin SQL injection in user accounts pageCVE-2020-5504Public exploitFix availableEPSS 28.0%8.8 High
- obs-server, suse linux enterprise server +1 moreobs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api...CVE-2010-37828.8 High
- opensuse factory, suse linux enterprise server 15 sp1, trousers +1 more +3 moretrousers: Local privilege escalation from tss to rootCVE-2019-18898Fix available7.7 High
- opensuse factory, munge, suse linux enterprise server 15 +2 moreLocal privilege escalation from user munge to rootCVE-2019-3691Fix available7.7 High
- canonical cloud-init, debian linux, suse linux enterprise server +2 moreAn privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an...CVE-2012-6639Fix available8.8 High
- opensuse leap 15.1, suse mailman, linux enterprise server 11 +2 more +4 moreLocal privilege escalation from user wwwrun to root in the packaging of mailmanCVE-2019-3693Fix available7.7 High
- suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 moresquid: /usr/sbin/pinger packaged with wrong permissionCVE-2019-36885.1 Medium
- linux-nfs nfs-utils, suse linux enterprise server 12, linux enterprise server 15 +2 morenfs-utils: root-owned files stored in insecure /var/lib/nfs directoryCVE-2019-3689Fix available5.1 Medium
- libgd, php, canonical ubuntu linux +10 more +12 moreUninitialized read in gdImageCreateFromXbmCVE-2019-11038Fix available3.1 Low
- hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 moreyast2-rmt exposes CA private key passhrase in log-fileCVE-2018-20105Fix available4.0 Medium
- opensuse factory, suse linux enterprise server 15, obs-service-tar scm +2 moreobs-service-extract_file's outfilename parameter allows to write files outside of package directoryCVE-2018-124764.3 Medium
- [unknown] golang, golang go, debian linux +3 more +5 moreIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory...CVE-2018-16874Fix available6.8 Medium
- Show moreLoading…