Skip to contentSuse Linux Enterprise vulnerabilities
- hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 moreyast2-rmt exposes CA private key passhrase in log-fileCVE-2018-20105Fix available4.0 Medium
- [unknown] golang, golang go, debian linux +3 more +5 moreIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory...CVE-2018-16874Fix available6.8 Medium
- [unknown] golang, golang go, debian linux +3 more +5 moreIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code...CVE-2018-16873Fix availableEPSS 66.3%7.5 High
- dcraw project dcraw, suse linux enterprise desktop, linux enterprise server +2 moreA stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in...CVE-2018-19655Fix available8.8 High
- node.js, suse enterprise storage, linux enterprise server +1 more +3 moreNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...CVE-2018-12122Fix availableEPSS 41.3%7.5 High
- node.js, suse enterprise storage, linux enterprise server +1 more +3 moreNode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...CVE-2018-12116Fix available7.5 High
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the...CVE-2018-195437.8 High
- jasper project jasper, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...CVE-2018-19542Fix available6.5 Medium
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900...CVE-2018-195418.8 High
- jasper project jasper, debian linux, suse linux enterprise desktop +1 more +3 moreAn issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900...CVE-2018-195408.8 High
- jasper project jasper, debian linux, opensuse leap +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is an access violation in the function...CVE-2018-195396.5 Medium
- libwpd project libwpd, redhat enterprise linux, suse linux enterprise server +2 moreIn libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener:...CVE-2018-19208Fix available6.5 Medium
- lighttpd, debian linux, opensuse backports sle +2 more +4 moreAn issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50....CVE-2018-19052Public exploitFix availableEPSS 13.7%7.5 High
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...CVE-2018-18873Fix available5.5 Medium
- kyzer libmspack, canonical ubuntu linux, debian linux +5 more +7 morechmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0'...CVE-2018-18585Fix available4.3 Medium
- cabextract project cabextract, libmspack project libmspack, canonical ubuntu linux +4 more +6 moreIn mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input...CVE-2018-18584Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...CVE-2018-17962Fix available7.5 High
- pidgin, suse linux enterprise server +1 morePidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to...CVE-2016-1000030Fix available9.8 Critical
- linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 moreThe lxc-user-nic component of LXC allows unprivileged users to open arbitrary filesCVE-2018-6556Fix available3.3 Low
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to out of bound read when samplerate > 50kHzCVE-2018-14523Fix available8.8 High
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to denial of service via aubio_pitch_set_unit functionCVE-2018-14522Fix available8.8 High
- suse kdump, linux enterprise desktop, linux enterprise server +2 moreMissing verification of host key for kdump serverCVE-2011-41905.9 Medium
- suse linux enterprise, linux enterprise server +1 moreunix2_chkpwd do not check for a valid accountCVE-2011-3172Fix available5.4 Medium
- lrzsz project lrzsz, debian linux, suse linux enterprise debuginfo +2 more +4 morelrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect...CVE-2018-10195Fix available7.1 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write...CVE-2018-7566Fix available7.8 High
- libtiff, opensuse leap, suse linux enterprise desktop +2 more +4 more** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to...CVE-2017-16232Fix availableDisputed7.5 High
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 Medium
- debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that...CVE-2017-17806Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero...CVE-2017-17805Fix available7.8 High
- linux kernel, suse linux enterprise server +1 moreThe usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in...CVE-2017-17558Fix available6.6 Medium
- suse build, opensuse leap, suse linux enterprise software development kit +2 morepackage builds could use directory traversal to write outside of target areaCVE-2017-14804Fix available9.9 Critical
- postgresql, suse postgresql-init, linux enterprise server +2 morelocal privilege escalation in SUSE postgresql init scriptCVE-2017-14798Public exploitFix available7.3 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check...CVE-2017-15115Fix available7.8 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity...CVE-2017-13088Fix available5.3 Medium
- canonical ubuntu linux, debian linux, freebsd +9 more +11 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group...CVE-2017-13087Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ...CVE-2017-13086Fix available6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the...CVE-2017-13082Fix available8.1 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13081Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13080Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13079Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13078Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)...CVE-2017-13077Fix available6.8 Medium
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 Critical
- gnu glibc, debian linux, mcafee web gateway +17 more +19 moreglibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate...CVE-2017-1000366Public exploitFix available7.8 High
- qemu, suse linux enterprise desktop, linux enterprise server +2 more +4 moreInteger overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick...CVE-2017-5898Fix available5.5 Medium
- jasper project jasper, fedoraproject fedora, opensuse leap +3 more +5 moreThe jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to...CVE-2016-93987.5 High
- game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 moregame-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.CVE-2016-9959Fix available7.8 High
- game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 moregame-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.CVE-2016-9958Fix available7.8 High
- Show moreLoading…