Skip to contentSuse Linux Enterprise Server vulnerabilities
- jasper project jasper, debian linux, opensuse leap +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is an access violation in the function...CVE-2018-195396.5 Medium
- libwpd project libwpd, redhat enterprise linux, suse linux enterprise server +2 moreIn libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener:...CVE-2018-19208Fix available6.5 Medium
- lighttpd, debian linux, opensuse backports sle +2 more +4 moreAn issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50....CVE-2018-19052Public exploitFix availableEPSS 13.7%7.5 High
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...CVE-2018-18873Fix available5.5 Medium
- kyzer libmspack, canonical ubuntu linux, debian linux +5 more +7 morechmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0'...CVE-2018-18585Fix available4.3 Medium
- cabextract project cabextract, libmspack project libmspack, canonical ubuntu linux +4 more +6 moreIn mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input...CVE-2018-18584Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...CVE-2018-17962Fix available7.5 High
- pidgin, suse linux enterprise server +1 morePidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to...CVE-2016-1000030Fix available9.8 Critical
- linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 moreThe lxc-user-nic component of LXC allows unprivileged users to open arbitrary filesCVE-2018-6556Fix available3.3 Low
- suse kdump, linux enterprise desktop, linux enterprise server +2 moreMissing verification of host key for kdump serverCVE-2011-41905.9 Medium
- suse linux enterprise, linux enterprise server +1 moreunix2_chkpwd do not check for a valid accountCVE-2011-3172Fix available5.4 Medium
- lrzsz project lrzsz, debian linux, suse linux enterprise debuginfo +2 more +4 morelrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect...CVE-2018-10195Fix available7.1 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write...CVE-2018-7566Fix available7.8 High
- libtiff, opensuse leap, suse linux enterprise desktop +2 more +4 more** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to...CVE-2017-16232Fix availableDisputed7.5 High
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 Medium
- debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that...CVE-2017-17806Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero...CVE-2017-17805Fix available7.8 High
- linux kernel, suse linux enterprise server +1 moreThe usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in...CVE-2017-17558Fix available6.6 Medium
- postgresql, suse postgresql-init, linux enterprise server +2 morelocal privilege escalation in SUSE postgresql init scriptCVE-2017-14798Public exploitFix available7.3 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check...CVE-2017-15115Fix available7.8 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity...CVE-2017-13088Fix available5.3 Medium
- canonical ubuntu linux, debian linux, freebsd +9 more +11 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group...CVE-2017-13087Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ...CVE-2017-13086Fix available6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the...CVE-2017-13082Fix available8.1 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13081Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13080Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13079Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13078Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)...CVE-2017-13077Fix available6.8 Medium
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 Critical
- gnu glibc, debian linux, mcafee web gateway +17 more +19 moreglibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate...CVE-2017-1000366Public exploitFix available7.8 High
- qemu, suse linux enterprise desktop, linux enterprise server +2 more +4 moreInteger overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick...CVE-2017-5898Fix available5.5 Medium
- jasper project jasper, fedoraproject fedora, opensuse leap +3 more +5 moreThe jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to...CVE-2016-93987.5 High
- game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 moregame-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.CVE-2016-9959Fix available7.8 High
- game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 moregame-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.CVE-2016-9958Fix available7.8 High
- game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 moreStack-based buffer overflow in game-music-emu before 0.6.1.CVE-2016-9957Fix available7.8 High
- mozilla network security services, avaya aura application enablement services, aura application server 5300 +25 more +27 moreNull pointer dereference vulnerability exists in K11_SignWithSymKey /...CVE-2016-5285Fix available7.5 High
- libarchive, suse linux enterprise desktop, linux enterprise server +1 more +3 moreMemory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive...CVE-2015-8929Fix available5.5 Medium
- imagemagick, opensuse leap, opensuse +4 more +6 moredistribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows...CVE-2014-9852Fix available9.8 Critical
- php, debian linux, opensuse leap +4 more +6 moreDouble free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension...CVE-2016-5772Fix available9.8 Critical
- linux kernel, fedoraproject fedora, redhat enterprise linux +7 more +9 moreThe rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not...CVE-2016-5244Fix available7.5 High
- ntp, novell suse manager, opensuse leap +6 more +8 morentpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash)...CVE-2016-4957Fix availableEPSS 44.9%7.5 High
- ntp, opensuse leap, opensuse +9 more +11 morentpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral...CVE-2016-4953Fix availableEPSS 17.2%7.5 High
- ntp, novell suse manager, opensuse leap +7 more +9 morentpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved...CVE-2016-4956Fix availableEPSS 16.4%5.3 Medium
- ntp, novell suse manager, opensuse leap +7 more +9 morentpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a...CVE-2016-4955Fix available5.9 Medium
- ntp, opensuse leap, opensuse +9 more +11 moreThe process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote...CVE-2016-4954Fix availableEPSS 13.3%7.5 High
- suse linux enterprise desktop, linux enterprise server +1 moreA code injection in the supportconfig data collection tool in supportutils in SUSE Linux...CVE-2016-1602Fix available7.8 High
- graphicsmagick, imagemagick, canonical ubuntu linux +10 more +12 moreThe OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote...CVE-2016-5118Fix availableEPSS 50.0%9.8 Critical
- Show moreLoading…