Suse Linux Enterprise Software Development Kit vulnerabilities

• samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 more In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command... CVE-2022-27239 Fix available 7.8 HighApril 27, 2022
• opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 more outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues CVE-2020-8025 Fix available 6.1 MediumAugust 7, 2020
• libgd, php, canonical ubuntu linux +10 more +12 more Uninitialized read in gdImageCreateFromXbm CVE-2019-11038 Fix available 3.1 LowJune 11, 2019
• libtiff, opensuse leap, suse linux enterprise desktop +2 more +4 more ** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to... CVE-2017-16232 Fix availableDisputed 7.5 HighJanuary 12, 2018
• arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 more CVE-2017-5753 does not affect BellSoft software CVE-2017-5753 Public exploitFix available EPSS 93.8% 5.6 MediumJanuary 3, 2018
• debian linux, linux kernel, arista eos +26 more +28 more The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,... CVE-2017-18017 Fix available EPSS 52.8% 9.8 CriticalJanuary 3, 2018
• suse build, opensuse leap, suse linux enterprise software development kit +2 more package builds could use directory traversal to write outside of target area CVE-2017-14804 Fix available 9.9 CriticalDecember 8, 2017
• gnu glibc, debian linux, mcafee web gateway +17 more +19 more glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate... CVE-2017-1000366 Public exploitFix available 7.8 HighJune 19, 2017
• qemu, suse linux enterprise desktop, linux enterprise server +2 more +4 more Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick... CVE-2017-5898 Fix available 5.5 MediumFebruary 27, 2017
• jasper project jasper, fedoraproject fedora, opensuse leap +3 more +5 more The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to... CVE-2016-9398 7.5 HighJanuary 8, 2017
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. CVE-2016-9959 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. CVE-2016-9958 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more Stack-based buffer overflow in game-music-emu before 0.6.1. CVE-2016-9957 Fix available 7.8 HighDecember 15, 2016
• clusterlabs pacemaker, opensuse leap, redhat enterprise linux high availability +3 more +5 more Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a... CVE-2016-7797 Fix available 7.5 HighNovember 22, 2016
• php, suse linux enterprise module for web scripting, linux enterprise software development kit +2 more /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.... CVE-2016-4473 9.8 CriticalSeptember 18, 2016
• libarchive, suse linux enterprise desktop, linux enterprise server +1 more +3 more Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive... CVE-2015-8929 Fix available 5.5 MediumJuly 29, 2016
• imagemagick, opensuse leap, opensuse +4 more +6 more distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows... CVE-2014-9852 Fix available 9.8 CriticalJuly 11, 2016
• php, debian linux, opensuse leap +4 more +6 more Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension... CVE-2016-5772 Fix available 9.8 CriticalJune 24, 2016
• linux kernel, fedoraproject fedora, redhat enterprise linux +7 more +9 more The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not... CVE-2016-5244 Fix available 7.5 HighJune 16, 2016
• graphicsmagick, imagemagick, canonical ubuntu linux +10 more +12 more The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote... CVE-2016-5118 Fix available EPSS 50.0% 9.8 CriticalMay 30, 2016
• graphicsmagick, debian linux, opensuse leap +4 more +6 more GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer... CVE-2016-2318 Fix available 5.5 MediumMay 21, 2016
• graphicsmagick, debian linux, opensuse leap +4 more +6 more Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of... CVE-2016-2317 Fix available 5.5 MediumMay 21, 2016
• graphicsmagick, fedoraproject fedora, suse linux enterprise debuginfo +2 more +4 more The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to... CVE-2015-8808 Fix available 5.5 MediumMay 21, 2016
• apple mac os x, canonical ubuntu linux, debian linux +11 more +13 more Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute... CVE-2016-0718 Fix available EPSS 13.3% 9.8 CriticalMay 17, 2016
• ibm java sdk, redhat enterprise linux desktop, enterprise linux hpc node supplementary +9 more +11 more Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before... CVE-2016-0264 5.6 MediumMay 13, 2016
• php, canonical ubuntu linux, opensuse leap +3 more +5 more ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not... CVE-2015-8866 Fix available 9.6 CriticalMay 11, 2016
• imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow... CVE-2016-3718 In KEVPublic exploitFix available EPSS 75.6% 5.5 MediumMay 5, 2016
• imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers... CVE-2016-3715 In KEVPublic exploitFix available EPSS 75.3% 5.5 MediumMay 5, 2016
• linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +7 more +9 more Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows... CVE-2016-3951 Fix available 4.6 MediumMay 2, 2016
• linux kernel, novell suse linux enterprise desktop, suse linux enterprise server +5 more +7 more The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1... CVE-2015-8845 Fix available 5.5 MediumApril 27, 2016
• oracle mysql, mariadb, opensuse leap +12 more +14 more Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect... CVE-2016-0651 Fix available 5.5 MediumApril 21, 2016
• oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 more Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and... CVE-2016-3427 In KEVFix available EPSS 92.3% 9.8 CriticalApril 21, 2016
• mariadb, oracle mysql, canonical ubuntu linux +7 more +9 more Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB... CVE-2016-0668 Fix available 4.1 MediumApril 20, 2016
• oracle mysql, canonical ubuntu linux, debian linux +14 more +16 more Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and... CVE-2016-0642 Fix available 4.7 MediumApril 20, 2016
• mercurial, debian linux, fedoraproject fedora +4 more +6 more Mercurial arbitrary code execution vulnerability CVE-2016-3630 Fix available 8.8 HighApril 5, 2016
• mercurial, debian linux, fedoraproject fedora +11 more +13 more Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository CVE-2016-3069 Fix available 8.8 HighApril 5, 2016
• mercurial, debian linux, fedoraproject fedora +11 more +13 more Mercurial arbitrary code execution via a crafted git ext:: URL CVE-2016-3068 Fix available 8.8 HighApril 5, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers... CVE-2016-2315 Fix available EPSS 17.3% 9.8 CriticalMarch 16, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)... CVE-2016-2324 Fix available EPSS 18.1% 9.8 CriticalMarch 15, 2016
• isc bind, canonical ubuntu linux, debian linux +11 more +13 more named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to... CVE-2016-1286 Fix available EPSS 60.8% 8.6 HighMarch 9, 2016
• isc bind, canonical ubuntu linux, debian linux +11 more +13 more named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME... CVE-2016-1285 Fix available EPSS 57.8% 6.8 MediumMarch 9, 2016
• linux kernel, suse linux enterprise debuginfo, linux enterprise desktop +5 more +7 more The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows... CVE-2016-2782 Public exploitFix available 4.6 MediumFebruary 29, 2016
• gnu glibc, canonical ubuntu linux, debian linux +26 more +28 more Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the... CVE-2015-7547 Public exploitFix available EPSS 92.4% 8.1 HighFebruary 16, 2016
• ibm java sdk, websphere application server, redhat satellite +2 more +4 more The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before... CVE-2015-5041 9.1 CriticalFebruary 9, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6)... CVE-2015-8779 Fix available 9.8 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent... CVE-2015-8778 Fix available 9.8 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context... CVE-2015-8776 Fix available 9.1 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, fedoraproject fedora +5 more +7 more Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow... CVE-2014-9761 Fix available 9.8 CriticalFebruary 5, 2016
• opensuse leap, opensuse, suse linux enterprise desktop +3 more +5 more The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in... CVE-2015-5969 6.2 MediumFebruary 1, 2016
• libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 more The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and... CVE-2015-8934 Fix available 5.5 MediumDecember 31, 2015
• Show olderLoading…