Suse Linux Enterprise Desktop vulnerabilities

• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• sudo, canonical ubuntu linux, debian linux +5 more +7 more Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... CVE-2025-32463 In KEVPublic exploitFix available EPSS 56.3% 9.3 CriticalJune 30, 2025
• opensuse leap, suse linux enterprise high performance computing, opensuse leap 15.5 +3 more +5 more A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux... CVE-2023-32182 Fix available 5.9 MediumAugust 23, 2023
• samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 more In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command... CVE-2022-27239 Fix available 7.8 HighApril 27, 2022
• polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... CVE-2021-4034 In KEVPublic exploitFix available EPSS 94.9% 7.8 HighJanuary 25, 2022
• suse linux enterprise server 15 sp1, linux enterprise desktop +1 more User owned /etc in SLES15-SP1-CHOST-BYOS CVE-2020-8018 8.4 HighMay 4, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6429 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6428 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6427 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote... CVE-2020-6426 Fix available 6.5 MediumMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6424 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6422 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6449 Fix available 8.8 HighMarch 20, 2020
• gnome networkmanager, opensuse, suse linux enterprise desktop +1 more +3 more NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication... CVE-2006-7246 Fix available 6.8 MediumJanuary 27, 2020
• libgd, php, canonical ubuntu linux +10 more +12 more Uninitialized read in gdImageCreateFromXbm CVE-2019-11038 Fix available 3.1 LowJune 11, 2019
• dcraw project dcraw, suse linux enterprise desktop, linux enterprise server +2 more A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in... CVE-2018-19655 Fix available 8.8 HighNovember 29, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the... CVE-2018-19543 7.8 HighNovember 26, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +3 more +5 more An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function... CVE-2018-19542 Fix available 6.5 MediumNovember 26, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900... CVE-2018-19541 8.8 HighNovember 26, 2018
• jasper project jasper, debian linux, suse linux enterprise desktop +1 more +3 more An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900... CVE-2018-19540 8.8 HighNovember 26, 2018
• jasper project jasper, debian linux, opensuse leap +2 more +4 more An issue was discovered in JasPer 2.0.14. There is an access violation in the function... CVE-2018-19539 6.5 MediumNovember 26, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function... CVE-2018-18873 Fix available 5.5 MediumOctober 31, 2018
• suse kdump, linux enterprise desktop, linux enterprise server +2 more Missing verification of host key for kdump server CVE-2011-4190 5.9 MediumJune 8, 2018
• lrzsz project lrzsz, debian linux, suse linux enterprise debuginfo +2 more +4 more lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect... CVE-2018-10195 Fix available 7.1 HighApril 24, 2018
• libtiff, opensuse leap, suse linux enterprise desktop +2 more +4 more ** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to... CVE-2017-16232 Fix availableDisputed 7.5 HighJanuary 12, 2018
• arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 more CVE-2017-5753 does not affect BellSoft software CVE-2017-5753 Public exploitFix available EPSS 93.8% 5.6 MediumJanuary 3, 2018
• debian linux, linux kernel, arista eos +26 more +28 more The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,... CVE-2017-18017 Fix available EPSS 52.8% 9.8 CriticalJanuary 3, 2018
• debian linux, linux kernel, canonical ubuntu linux +4 more +6 more The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that... CVE-2017-17806 Fix available 7.8 HighDecember 20, 2017
• debian linux, linux kernel, canonical ubuntu linux +4 more +6 more The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero... CVE-2017-17805 Fix available 7.8 HighDecember 20, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)... CVE-2017-13084 6.8 MediumOctober 17, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity... CVE-2017-13088 Fix available 5.3 MediumOctober 16, 2017
• canonical ubuntu linux, debian linux, freebsd +9 more +11 more Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group... CVE-2017-13087 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ... CVE-2017-13086 Fix available 6.8 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the... CVE-2017-13082 Fix available 8.1 HighOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the... CVE-2017-13081 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)... CVE-2017-13080 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the... CVE-2017-13079 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)... CVE-2017-13078 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)... CVE-2017-13077 Fix available 6.8 MediumOctober 16, 2017
• qemu, suse linux enterprise desktop, linux enterprise server +2 more +4 more Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick... CVE-2017-5898 Fix available 5.5 MediumFebruary 27, 2017
• jasper project jasper, fedoraproject fedora, opensuse leap +3 more +5 more The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to... CVE-2016-9398 7.5 HighJanuary 8, 2017
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. CVE-2016-9959 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. CVE-2016-9958 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more Stack-based buffer overflow in game-music-emu before 0.6.1. CVE-2016-9957 Fix available 7.8 HighDecember 15, 2016
• libarchive, suse linux enterprise desktop, linux enterprise server +1 more +3 more Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive... CVE-2015-8929 Fix available 5.5 MediumJuly 29, 2016
• imagemagick, opensuse leap, opensuse +4 more +6 more distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows... CVE-2014-9852 Fix available 9.8 CriticalJuly 11, 2016
• adobe flash player, opensuse, redhat enterprise linux desktop +4 more +6 more Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to... CVE-2016-4171 In KEVFix available EPSS 20.1% 9.8 CriticalJune 16, 2016
• adobe flash player, flash player desktop runtime, opensuse +5 more +7 more Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe... CVE-2016-4156 8.8 HighJune 16, 2016
• adobe flash player, flash player desktop runtime, opensuse +5 more +7 more Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe... CVE-2016-4155 8.8 HighJune 16, 2016
• adobe flash player, flash player desktop runtime, opensuse +5 more +7 more Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe... CVE-2016-4154 8.8 HighJune 16, 2016
• Show olderLoading…