Suse Linux Enterprise Debuginfo vulnerabilities

• libgd, php, canonical ubuntu linux +10 more +12 more Uninitialized read in gdImageCreateFromXbm CVE-2019-11038 Fix available 3.1 LowJune 11, 2019
• lrzsz project lrzsz, debian linux, suse linux enterprise debuginfo +2 more +4 more lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect... CVE-2018-10195 Fix available 7.1 HighApril 24, 2018
• debian linux, linux kernel, arista eos +26 more +28 more The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,... CVE-2017-18017 Fix available EPSS 52.8% 9.8 CriticalJanuary 3, 2018
• thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 more Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of... CVE-2017-14491 Public exploitFix available EPSS 86.5% 9.8 CriticalOctober 2, 2017
• php, debian linux, opensuse leap +4 more +6 more Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension... CVE-2016-5772 Fix available 9.8 CriticalJune 24, 2016
• linux kernel, fedoraproject fedora, redhat enterprise linux +7 more +9 more The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not... CVE-2016-5244 Fix available 7.5 HighJune 16, 2016
• graphicsmagick, imagemagick, canonical ubuntu linux +10 more +12 more The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote... CVE-2016-5118 Fix available EPSS 50.0% 9.8 CriticalMay 30, 2016
• graphicsmagick, debian linux, opensuse leap +4 more +6 more GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer... CVE-2016-2318 Fix available 5.5 MediumMay 21, 2016
• graphicsmagick, debian linux, opensuse leap +4 more +6 more Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of... CVE-2016-2317 Fix available 5.5 MediumMay 21, 2016
• graphicsmagick, fedoraproject fedora, suse linux enterprise debuginfo +2 more +4 more The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to... CVE-2015-8808 Fix available 5.5 MediumMay 21, 2016
• apple mac os x, canonical ubuntu linux, debian linux +11 more +13 more Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute... CVE-2016-0718 Fix available EPSS 13.3% 9.8 CriticalMay 17, 2016
• imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow... CVE-2016-3718 In KEVPublic exploitFix available EPSS 75.6% 5.5 MediumMay 5, 2016
• imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers... CVE-2016-3715 In KEVPublic exploitFix available EPSS 75.3% 5.5 MediumMay 5, 2016
• oracle mysql, mariadb, opensuse leap +12 more +14 more Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect... CVE-2016-0651 Fix available 5.5 MediumApril 21, 2016
• oracle mysql, canonical ubuntu linux, debian linux +14 more +16 more Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and... CVE-2016-0642 Fix available 4.7 MediumApril 20, 2016
• mercurial, debian linux, fedoraproject fedora +4 more +6 more Mercurial arbitrary code execution vulnerability CVE-2016-3630 Fix available 8.8 HighApril 5, 2016
• mercurial, debian linux, fedoraproject fedora +11 more +13 more Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository CVE-2016-3069 Fix available 8.8 HighApril 5, 2016
• mercurial, debian linux, fedoraproject fedora +11 more +13 more Mercurial arbitrary code execution via a crafted git ext:: URL CVE-2016-3068 Fix available 8.8 HighApril 5, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers... CVE-2016-2315 Fix available EPSS 17.3% 9.8 CriticalMarch 16, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)... CVE-2016-2324 Fix available EPSS 18.1% 9.8 CriticalMarch 15, 2016
• isc bind, canonical ubuntu linux, debian linux +11 more +13 more named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to... CVE-2016-1286 Fix available EPSS 60.8% 8.6 HighMarch 9, 2016
• isc bind, canonical ubuntu linux, debian linux +11 more +13 more named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME... CVE-2016-1285 Fix available EPSS 57.8% 6.8 MediumMarch 9, 2016
• linux kernel, suse linux enterprise debuginfo, linux enterprise desktop +5 more +7 more The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows... CVE-2016-2782 Public exploitFix available 4.6 MediumFebruary 29, 2016
• gnu glibc, canonical ubuntu linux, debian linux +26 more +28 more Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the... CVE-2015-7547 Public exploitFix available EPSS 92.4% 8.1 HighFebruary 16, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6)... CVE-2015-8779 Fix available 9.8 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent... CVE-2015-8778 Fix available 9.8 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context... CVE-2015-8776 Fix available 9.1 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, fedoraproject fedora +5 more +7 more Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow... CVE-2014-9761 Fix available 9.8 CriticalFebruary 5, 2016
• ntp, novell suse openstack cloud, opensuse leap +6 more +8 more The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77... CVE-2015-7976 Fix available 4.3 MediumDecember 31, 2015
• qemu, canonical ubuntu linux, debian linux +7 more +9 more Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory... CVE-2015-8567 Fix available 7.7 HighDecember 16, 2015
• ntp, canonical ubuntu linux, debian linux +16 more +18 more The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the... CVE-2015-5300 Fix available 7.5 HighOctober 22, 2015
• qemu, arista eos, canonical ubuntu linux +5 more +7 more Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a... CVE-2015-5239 Fix available 6.5 MediumSeptember 3, 2015
• gnome networkmanager, canonical ubuntu linux, oracle linux +6 more +8 more GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic... CVE-2015-0272 Fix available 5.0 MediumSeptember 3, 2015
• ntp, canonical ubuntu linux, debian linux +13 more +15 more The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions... CVE-2015-5219 Fix available 7.5 HighAugust 25, 2015
• ntp, canonical ubuntu linux, debian linux +10 more +12 more The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote... CVE-2015-5194 Fix available 7.5 HighAugust 25, 2015
• xen, arista eos, debian linux +20 more +22 more The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4... CVE-2015-5165 Fix available EPSS 13.3% 9.3 HighAugust 11, 2015
• mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 more The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS... CVE-2015-4495 In KEVPublic exploitFix available EPSS 68.6% 8.8 HighAugust 7, 2015
• isc bind, apple os x server, canonical ubuntu linux +18 more +20 more named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to... CVE-2015-5477 In KEVPublic exploitFix available EPSS 99.6% 7.8 HighJuly 28, 2015
• google chrome, canonical ubuntu linux, debian linux +10 more +12 more Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in... CVE-2015-1283 Fix available EPSS 18.3% 6.8 MediumJuly 22, 2015
• qemu, xen, fedoraproject fedora +4 more +6 more Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when... CVE-2015-5154 Fix available 7.2 HighJuly 17, 2015
• oracle java se, canonical ubuntu linux, debian linux +19 more +21 more Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and... CVE-2015-2590 In KEVFix available EPSS 25.5% 9.8 CriticalJuly 16, 2015
• gnu glibc, canonical ubuntu linux, debian linux +3 more +5 more Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library ... CVE-2015-1781 Fix available 6.8 MediumMay 6, 2015
• imagemagick, canonical ubuntu linux, novell leap +7 more +9 more Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service ... CVE-2014-9853 Fix available 5.5 MediumDecember 31, 2014
• gnu glibc, suse linux enterprise debuginfo, linux enterprise server +2 more Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C... CVE-2013-4458 Fix available 5.0 MediumNovember 22, 2013
• canonical ubuntu linux, debian linux, fujitsu sparc enterprise m3000 firmware +58 more +60 more The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state... CVE-2015-2808 Fix available EPSS 73.9% 5.0 MediumNovember 14, 2013
• qemu, arista eos, canonical ubuntu linux +15 more +17 more Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute... CVE-2015-3209 Fix available 7.5 HighAugust 31, 2012
• adobe acrobat, acrobat and reader, opensuse +2 more +4 more The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and... CVE-2009-3953 In KEVPublic exploit EPSS 83.2% 8.8 HighJanuary 13, 2010
• adobe acrobat, acrobat and reader, acrobat reader +3 more +5 more Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader... CVE-2009-4324 In KEVPublic exploit EPSS 81.9% 7.8 HighDecember 15, 2009
• linux kernel, canonical ubuntu linux, fedoraproject fedora +5 more +7 more The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly... CVE-2009-3620 7.8 HighOctober 22, 2009
• linux kernel, canonical ubuntu linux, fedoraproject fedora +10 more +12 more arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not... CVE-2009-2910 2.1 LowOctober 20, 2009
• Show olderLoading…