Suse Linux Enterprise vulnerabilities

• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• suse linux enterprise server nftables disabled due to incorrect kernel backport CVE-2026-25702 Fix available 7.3 HighMarch 5, 2026
• sudo, canonical ubuntu linux, debian linux +5 more +7 more Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... CVE-2025-32463 In KEVPublic exploitFix available EPSS 56.3% 9.3 CriticalJune 30, 2025
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data... CVE-2024-46956 Fix available 7.8 HighOctober 5, 2024
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of... CVE-2024-46955 Fix available 5.5 MediumOctober 5, 2024
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer... CVE-2024-46953 Fix available 7.8 HighOctober 5, 2024
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked... CVE-2024-46951 Fix available 7.8 HighOctober 5, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• relax-and-recover, fedoraproject fedora, redhat enterprise linux +1 more +3 more Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y... CVE-2024-23301 Fix available 5.5 MediumJanuary 12, 2024
• opensuse leap, suse linux enterprise high performance computing, opensuse leap 15.5 +3 more +5 more A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux... CVE-2023-32182 Fix available 5.9 MediumAugust 23, 2023
• debian linux, linux kernel, suse linux enterprise +2 more An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16... CVE-2023-34256 Fix availableDisputed 5.5 MediumMay 31, 2023
• service location protocol project location protocol, ietf service location protocol (slp), netapp smi-s provider +3 more +5 more The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to... CVE-2023-29552 In KEV EPSS 64.0% 7.5 HighApril 24, 2023
• linux kernel, suse linux enterprise server +1 more In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return... CVE-2023-23005 Fix availableDisputed 5.5 MediumMarch 1, 2023
• opensuse leap, leap 15.4, suse linux enterprise module for sap applications +3 more +5 more saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls CVE-2022-45153 Fix available 7.0 HighJanuary 2, 2023
• opensuse leap, leap micro, leap 15.3 +4 more +6 more permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() CVE-2022-31252 Fix available 4.4 MediumSeptember 19, 2022
• samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 more In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command... CVE-2022-27239 Fix available 7.8 HighApril 27, 2022
• cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 more Command Injection in Cobbler CVE-2021-45082 Fix available 7.8 HighFebruary 18, 2022
• linux kernel, suse linux enterprise +1 more A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed... CVE-2021-4028 Fix available 7.8 HighFebruary 1, 2022
• polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... CVE-2021-4034 In KEVPublic exploitFix available EPSS 94.9% 7.8 HighJanuary 25, 2022
• vim, vim vim/vim, apple mac os x +6 more +8 more Out-of-bounds Read in vim/vim CVE-2021-4166 Fix available 7.1 HighDecember 25, 2021
• ruby-lang cgi, ruby, debian linux +6 more +8 more Cookie Prefix Spoofing in CGI::Cookie.parse CVE-2021-41819 Fix available 7.5 HighDecember 23, 2021
• ruby-lang date, ruby, debian linux +6 more +8 more Regular expression denial of service vulnerability (ReDoS) in date CVE-2021-41817 Fix available 7.5 HighNovember 16, 2021
• balasys dheater, f5 big-ip access policy manager, big-ip advanced firewall manager +27 more +29 more The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send... CVE-2002-20001 Public exploitFix available EPSS 24.6% 7.5 HighNovember 11, 2021
• opensuse factory, suse linux enterprise server, opensuse factory +2 more +4 more clone-master-clean-up: dangerous file system operations CVE-2021-32000 Fix available 3.2 LowJuly 28, 2021
• opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 more outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues CVE-2020-8025 Fix available 6.1 MediumAugust 7, 2020
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim CVE-2020-15705 Fix available 6.4 MediumJuly 29, 2020
• debian linux, gnu grub2, canonical ubuntu linux +13 more +15 more GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. CVE-2020-15707 Fix available 5.7 MediumJuly 29, 2020
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. CVE-2020-15706 Fix available 6.4 MediumJuly 29, 2020
• redislabs redis, debian linux, oracle communications operations monitor +1 more +3 more An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context... CVE-2020-14147 Fix available 7.7 HighJune 15, 2020
• suse linux enterprise server 15 sp1, linux enterprise desktop +1 more User owned /etc in SLES15-SP1-CHOST-BYOS CVE-2020-8018 8.4 HighMay 4, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6429 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6428 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6427 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote... CVE-2020-6426 Fix available 6.5 MediumMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6424 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6422 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6449 Fix available 8.8 HighMarch 20, 2020
• opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 more Local privilege escalation from user salt to root CVE-2019-18897 8.4 HighMarch 2, 2020
• suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 more permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim CVE-2020-8013 Fix available 2.2 LowFebruary 28, 2020
• suse linux enterprise server, linux enterprise server 12, linux enterprise server 15 +1 more +3 more mysql-systemd-helper allows setting 640 permissions of arbitrary files CVE-2019-18901 5.1 MediumFebruary 26, 2020
• opensuse factory, leap, leap 15.1 +3 more +5 more wicked: Use-after-free when receiving invalid DHCP6 IA_PD option CVE-2019-18903 7.5 HighFebruary 6, 2020
• hackerone nextcloud server, nextcloud server, opensuse backports +1 more +3 more Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs... CVE-2019-15624 4.9 MediumFebruary 4, 2020
• opensuse factory, leap, leap 15.1 +3 more +5 more wicked: Use-after-free when receiving invalid DHCP6 client options CVE-2019-18902 7.5 HighJanuary 30, 2020
• gnome networkmanager, opensuse, suse linux enterprise desktop +1 more +3 more NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication... CVE-2006-7246 Fix available 6.8 MediumJanuary 27, 2020
• suse linux enterprise server "easy" permission profile allows everyone execute dumpcap and read all network traffic CVE-2019-3687 4.0 MediumJanuary 24, 2020
• phpmyadmin, debian linux, suse linux enterprise server +2 more phpMyAdmin SQL injection in user accounts page CVE-2020-5504 Public exploitFix available EPSS 28.0% 8.8 HighJanuary 8, 2020
• obs-server, suse linux enterprise server +1 more obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api... CVE-2010-3782 8.8 HighJanuary 2, 2020
• canonical cloud-init, debian linux, suse linux enterprise server +2 more An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an... CVE-2012-6639 Fix available 8.8 HighNovember 25, 2019
• suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 more squid: /usr/sbin/pinger packaged with wrong permission CVE-2019-3688 5.1 MediumOctober 7, 2019
• libgd, php, canonical ubuntu linux +10 more +12 more Uninitialized read in gdImageCreateFromXbm CVE-2019-11038 Fix available 3.1 LowJune 11, 2019
• Show olderLoading…