Skip to contentSuse Linux Enterprise Server vulnerabilities
- opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 moresdbootutil: world-readable debug logCVE-2026-1046186.9 Medium
- opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 moresdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdlineCVE-2026-104617Fix available5.9 Medium
- libxfont2, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 morefs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2CVE-2026-59679Fix available9.2 Critical
- libxfont, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 morefs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2CVE-2026-44950Fix available9.5 Critical
- suse container suse/sle-micro-rancher/5.3:latest, container suse/sle-micro-rancher/5.4:latest, container suse/sle-micro/5.5:latest +31 more +33 moreMissing exit out of permission check in haveged could lead to root exploitCVE-2026-41054Fix available7.8 High
- suse linux enterprise servernftables disabled due to incorrect kernel backportCVE-2026-25702Fix available7.3 High
- suse linux enterprise desktop 15 sp6, linux enterprise high performance computing 15 sp6, linux enterprise micro 5.3 +5 more +7 moreTemporary chown() of users' TTY to mode 0666 allows PTY hijacking in screenCVE-2025-46802Fix available5.3 Medium
- suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +13 more +15 moreCrafted projects can overwrite special files in the .osc config directoryCVE-2024-22034Fix available5.5 Medium
- suse container suse/manager/5.0/x86 64/server:5.0.0-beta1.2.122, opensuse leap 15.5, opensuse tumbleweed +20 more +22 moretomcat packaging allows for escalation to root from tomcat userCVE-2024-22029Fix available7.8 High
- opensuse supportutils, suse linux enterprise server 12, linux enterprise server 15 +1 more +3 moresupportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.shCVE-2022-45154Fix available4.4 Medium
- opensuse libzypp-plugin-appdata, leap 15.4, suse linux enterprise server for sap 15-sp3 +2 morelibzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` callsCVE-2023-22643Fix available6.3 Medium
- opensuse leap 15.3, leap 15.4, rmt-server +3 more +5 morermt-server-pubcloud allows to escalate from user _rmt to rootCVE-2022-31254Fix available7.8 High
- opensuse leap, leap 15.4, suse linux enterprise module for sap applications +3 more +5 moresaphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.slsCVE-2022-45153Fix available7.0 High
- opensuse leap, leap micro, leap 15.3 +4 more +6 morepermissions: chkstat does not check for group-writable parent directories or target files in safeOpen()CVE-2022-31252Fix available4.4 Medium
- gnu grub2, suse opensuse factory, linux enterprise server 15 sp4 +2 moregrub2-once uses fixed file name in /var/tmpCVE-2021-46705Fix available5.1 Medium
- opensuse factory, suse linux enterprise server, opensuse factory +2 more +4 moreclone-master-clean-up: dangerous file system operationsCVE-2021-32000Fix available3.2 Low
- rancher, rancher suse linux enterprise server 15, suse linux enterprise server 15 +2 moreRancher: Privilege escalation vulnerability via malicious Connection headerCVE-2021-31999Fix available8.8 High
- opensuse factory, leap 15.2, suse arpwatch +3 more +5 morearpwatch: Local privilege escalation from runtime user to rootCVE-2021-25321Fix available7.8 High
- opensuse cryptctl, suse linux enterprise server for sap 12-sp5, manager server 4.0 +2 morecryptctl: client side password hashing is equivalent to clear text password storageCVE-2019-18906Fix available9.8 Critical
- opensuse inn, backports sle-15-sp2, leap 15.2 +1 more +3 moreinn: %post calls user owned file allowing local privilege escalation to rootCVE-2021-31998Fix available6.8 Medium
- opensuse factory, leap 15.2, suse cups +4 more +6 morecups: ownership of /var/log/cups allows the lp user to create files as rootCVE-2021-25317Fix available3.3 Low
- suse s390-tools, linux enterprise server 12-sp5, linux enterprise server 15-sp2 +2 moreLocal DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-toolsCVE-2021-25316Fix available3.3 Low
- opensuse tumbleweed, saltstack salt, suse linux enterprise server 15 sp 3 +2 moresalt-api unauthenticated remote code executionCVE-2021-25315Fix available9.8 Critical
- opensuse openldap2, leap 15.1, leap 15.2 +2 more +4 moreopenldap uses fixed paths in /tmpCVE-2020-8027Fix available7.3 High
- opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 moreoutdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesCVE-2020-8025Fix available6.1 Medium
- opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 moreLocal privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2CVE-2020-8023Fix available7.7 High
- apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 moreUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviligesCVE-2020-8022Fix available7.7 High
- oneidentity syslog-ng, opensuse backports sle-15-sp1, leap 15.1 +6 more +8 moresyslog-ng: Local privilege escalation from new to root in %postCVE-2020-8019Fix available7.7 High
- suse linux enterprise server 15 sp1, linux enterprise desktop +1 moreUser owned /etc in SLES15-SP1-CHOST-BYOSCVE-2020-80188.4 High
- opensuse autoyast2, suse linux enterprise server 12, linux enterprise server 15 +2 moreDeprecated functionality in autoyast2 automatically imports gpg keys without checking themCVE-2019-18905Fix available4.8 Medium
- opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 moreLocal privilege escalation from user salt to rootCVE-2019-188978.4 High
- suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 morepermissions: chkstat sets unintended setuid/capabilities for mrsh and wodimCVE-2020-8013Fix available2.2 Low
- nagios, opensuse factory, suse linux enterprise server 11 +3 more +5 morenagios cron job allows privilege escalation from user nagios to rootCVE-2019-36985.7 Medium
- suse linux enterprise server, linux enterprise server 12, linux enterprise server 15 +1 more +3 moremysql-systemd-helper allows setting 640 permissions of arbitrary filesCVE-2019-189015.1 Medium
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to root through migrate_tempdirsCVE-2019-36968.4 High
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to rootCVE-2019-36958.4 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 IA_PD optionCVE-2019-189037.5 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 client optionsCVE-2019-189027.5 High
- opensuse leap 15.1, rmt-server, suse linux enterprise high performance computing 15-espos +6 more +8 moreMigrations requests can cause DoS on rmtCVE-2019-18904Fix available6.5 Medium
- opensuse factory, leap, leap 15.1 +3 more +5 moreLocal privilege escalation from user news to root in the packaging of innCVE-2019-3692Fix available7.7 High
- suse linux enterprise server"easy" permission profile allows everyone execute dumpcap and read all network trafficCVE-2019-36874.0 Medium
- opensuse libzypp, suse caas platform 3.0, linux enterprise server 12 +1 more +3 morelibzypp stores cookies world readableCVE-2019-18900Fix available4.0 Medium
- opensuse factory, suse linux enterprise server 15 sp1, trousers +1 more +3 moretrousers: Local privilege escalation from tss to rootCVE-2019-18898Fix available7.7 High
- opensuse factory, munge, suse linux enterprise server 15 +2 moreLocal privilege escalation from user munge to rootCVE-2019-3691Fix available7.7 High
- opensuse leap 15.1, suse mailman, linux enterprise server 11 +2 more +4 moreLocal privilege escalation from user wwwrun to root in the packaging of mailmanCVE-2019-3693Fix available7.7 High
- suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 moresquid: /usr/sbin/pinger packaged with wrong permissionCVE-2019-36885.1 Medium
- linux-nfs nfs-utils, suse linux enterprise server 12, linux enterprise server 15 +2 morenfs-utils: root-owned files stored in insecure /var/lib/nfs directoryCVE-2019-3689Fix available5.1 Medium
- hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 moreyast2-rmt exposes CA private key passhrase in log-fileCVE-2018-20105Fix available4.0 Medium
- opensuse factory, suse linux enterprise server 15, obs-service-tar scm +2 moreobs-service-extract_file's outfilename parameter allows to write files outside of package directoryCVE-2018-124764.3 Medium