Suse Linux Enterprise Server vulnerabilities

• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• suse linux enterprise server nftables disabled due to incorrect kernel backport CVE-2026-25702 Fix available 7.3 HighMarch 5, 2026
• sudo, canonical ubuntu linux, debian linux +5 more +7 more Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... CVE-2025-32463 In KEVPublic exploitFix available EPSS 56.3% 9.3 CriticalJune 30, 2025
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data... CVE-2024-46956 Fix available 7.8 HighOctober 5, 2024
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of... CVE-2024-46955 Fix available 5.5 MediumOctober 5, 2024
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer... CVE-2024-46953 Fix available 7.8 HighOctober 5, 2024
• artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 more An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked... CVE-2024-46951 Fix available 7.8 HighOctober 5, 2024
• service location protocol project location protocol, ietf service location protocol (slp), netapp smi-s provider +3 more +5 more The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to... CVE-2023-29552 In KEV EPSS 64.0% 7.5 HighApril 24, 2023
• linux kernel, suse linux enterprise server +1 more In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return... CVE-2023-23005 Fix availableDisputed 5.5 MediumMarch 1, 2023
• opensuse leap, leap 15.4, suse linux enterprise module for sap applications +3 more +5 more saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls CVE-2022-45153 Fix available 7.0 HighJanuary 2, 2023
• opensuse leap, leap micro, leap 15.3 +4 more +6 more permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() CVE-2022-31252 Fix available 4.4 MediumSeptember 19, 2022
• samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 more In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command... CVE-2022-27239 Fix available 7.8 HighApril 27, 2022
• cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 more Command Injection in Cobbler CVE-2021-45082 Fix available 7.8 HighFebruary 18, 2022
• polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... CVE-2021-4034 In KEVPublic exploitFix available EPSS 94.9% 7.8 HighJanuary 25, 2022
• balasys dheater, f5 big-ip access policy manager, big-ip advanced firewall manager +27 more +29 more The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send... CVE-2002-20001 Public exploitFix available EPSS 24.6% 7.5 HighNovember 11, 2021
• opensuse factory, suse linux enterprise server, opensuse factory +2 more +4 more clone-master-clean-up: dangerous file system operations CVE-2021-32000 Fix available 3.2 LowJuly 28, 2021
• opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 more outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues CVE-2020-8025 Fix available 6.1 MediumAugust 7, 2020
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim CVE-2020-15705 Fix available 6.4 MediumJuly 29, 2020
• debian linux, gnu grub2, canonical ubuntu linux +13 more +15 more GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. CVE-2020-15707 Fix available 5.7 MediumJuly 29, 2020
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. CVE-2020-15706 Fix available 6.4 MediumJuly 29, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6429 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6428 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6427 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote... CVE-2020-6426 Fix available 6.5 MediumMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6424 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6422 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6449 Fix available 8.8 HighMarch 20, 2020
• opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 more Local privilege escalation from user salt to root CVE-2019-18897 8.4 HighMarch 2, 2020
• suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 more permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim CVE-2020-8013 Fix available 2.2 LowFebruary 28, 2020
• suse linux enterprise server, linux enterprise server 12, linux enterprise server 15 +1 more +3 more mysql-systemd-helper allows setting 640 permissions of arbitrary files CVE-2019-18901 5.1 MediumFebruary 26, 2020
• opensuse factory, leap, leap 15.1 +3 more +5 more wicked: Use-after-free when receiving invalid DHCP6 IA_PD option CVE-2019-18903 7.5 HighFebruary 6, 2020
• hackerone nextcloud server, nextcloud server, opensuse backports +1 more +3 more Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs... CVE-2019-15624 4.9 MediumFebruary 4, 2020
• opensuse factory, leap, leap 15.1 +3 more +5 more wicked: Use-after-free when receiving invalid DHCP6 client options CVE-2019-18902 7.5 HighJanuary 30, 2020
• gnome networkmanager, opensuse, suse linux enterprise desktop +1 more +3 more NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication... CVE-2006-7246 Fix available 6.8 MediumJanuary 27, 2020
• suse linux enterprise server "easy" permission profile allows everyone execute dumpcap and read all network traffic CVE-2019-3687 4.0 MediumJanuary 24, 2020
• phpmyadmin, debian linux, suse linux enterprise server +2 more phpMyAdmin SQL injection in user accounts page CVE-2020-5504 Public exploitFix available EPSS 28.0% 8.8 HighJanuary 8, 2020
• obs-server, suse linux enterprise server +1 more obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api... CVE-2010-3782 8.8 HighJanuary 2, 2020
• canonical cloud-init, debian linux, suse linux enterprise server +2 more An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an... CVE-2012-6639 Fix available 8.8 HighNovember 25, 2019
• suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 more squid: /usr/sbin/pinger packaged with wrong permission CVE-2019-3688 5.1 MediumOctober 7, 2019
• libgd, php, canonical ubuntu linux +10 more +12 more Uninitialized read in gdImageCreateFromXbm CVE-2019-11038 Fix available 3.1 LowJune 11, 2019
• hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 more yast2-rmt exposes CA private key passhrase in log-file CVE-2018-20105 Fix available 4.0 MediumMarch 18, 2019
• [unknown] golang, golang go, debian linux +3 more +5 more In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory... CVE-2018-16874 Fix available 6.8 MediumDecember 14, 2018
• [unknown] golang, golang go, debian linux +3 more +5 more In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code... CVE-2018-16873 Fix available EPSS 66.3% 7.5 HighDecember 14, 2018
• dcraw project dcraw, suse linux enterprise desktop, linux enterprise server +2 more A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in... CVE-2018-19655 Fix available 8.8 HighNovember 29, 2018
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... CVE-2018-12122 Fix available EPSS 41.3% 7.5 HighNovember 28, 2018
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... CVE-2018-12116 Fix available 7.5 HighNovember 28, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the... CVE-2018-19543 7.8 HighNovember 26, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +3 more +5 more An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function... CVE-2018-19542 Fix available 6.5 MediumNovember 26, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900... CVE-2018-19541 8.8 HighNovember 26, 2018
• jasper project jasper, debian linux, suse linux enterprise desktop +1 more +3 more An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900... CVE-2018-19540 8.8 HighNovember 26, 2018
• Show olderLoading…