Skip to contentSuse Linux Enterprise Server 15 vulnerabilities
- libxfont2, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 morefs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2CVE-2026-59679Fix available9.2 Critical
- libxfont, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 morefs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2CVE-2026-44950Fix available9.5 Critical
- suse container suse/sle-micro-rancher/5.3:latest, container suse/sle-micro-rancher/5.4:latest, container suse/sle-micro/5.5:latest +31 more +33 moreMissing exit out of permission check in haveged could lead to root exploitCVE-2026-41054Fix available7.8 High
- suse linux enterprise desktop 15 sp6, linux enterprise high performance computing 15 sp6, linux enterprise micro 5.3 +5 more +7 moreTemporary chown() of users' TTY to mode 0666 allows PTY hijacking in screenCVE-2025-46802Fix available5.3 Medium
- suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +13 more +15 moreCrafted projects can overwrite special files in the .osc config directoryCVE-2024-22034Fix available5.5 Medium
- suse container suse/manager/5.0/x86 64/server:5.0.0-beta1.2.122, opensuse leap 15.5, opensuse tumbleweed +20 more +22 moretomcat packaging allows for escalation to root from tomcat userCVE-2024-22029Fix available7.8 High
- opensuse supportutils, suse linux enterprise server 12, linux enterprise server 15 +1 more +3 moresupportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.shCVE-2022-45154Fix available4.4 Medium
- gnu grub2, suse opensuse factory, linux enterprise server 15 sp4 +2 moregrub2-once uses fixed file name in /var/tmpCVE-2021-46705Fix available5.1 Medium
- opensuse factory, suse linux enterprise server, opensuse factory +2 more +4 moreclone-master-clean-up: dangerous file system operationsCVE-2021-32000Fix available3.2 Low
- rancher, rancher suse linux enterprise server 15, suse linux enterprise server 15 +2 moreRancher: Privilege escalation vulnerability via malicious Connection headerCVE-2021-31999Fix available8.8 High
- suse s390-tools, linux enterprise server 12-sp5, linux enterprise server 15-sp2 +2 moreLocal DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-toolsCVE-2021-25316Fix available3.3 Low
- opensuse tumbleweed, saltstack salt, suse linux enterprise server 15 sp 3 +2 moresalt-api unauthenticated remote code executionCVE-2021-25315Fix available9.8 Critical
- opensuse openldap2, leap 15.1, leap 15.2 +2 more +4 moreopenldap uses fixed paths in /tmpCVE-2020-8027Fix available7.3 High
- opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 moreoutdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesCVE-2020-8025Fix available6.1 Medium
- opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 moreLocal privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2CVE-2020-8023Fix available7.7 High
- apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 moreUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviligesCVE-2020-8022Fix available7.7 High
- suse linux enterprise server 15 sp1, linux enterprise desktop +1 moreUser owned /etc in SLES15-SP1-CHOST-BYOSCVE-2020-80188.4 High
- opensuse autoyast2, suse linux enterprise server 12, linux enterprise server 15 +2 moreDeprecated functionality in autoyast2 automatically imports gpg keys without checking themCVE-2019-18905Fix available4.8 Medium
- opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 moreLocal privilege escalation from user salt to rootCVE-2019-188978.4 High
- suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 morepermissions: chkstat sets unintended setuid/capabilities for mrsh and wodimCVE-2020-8013Fix available2.2 Low
- suse linux enterprise server, linux enterprise server 12, linux enterprise server 15 +1 more +3 moremysql-systemd-helper allows setting 640 permissions of arbitrary filesCVE-2019-189015.1 Medium
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to root through migrate_tempdirsCVE-2019-36968.4 High
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to rootCVE-2019-36958.4 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 IA_PD optionCVE-2019-189037.5 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 client optionsCVE-2019-189027.5 High
- opensuse leap 15.1, rmt-server, suse linux enterprise high performance computing 15-espos +6 more +8 moreMigrations requests can cause DoS on rmtCVE-2019-18904Fix available6.5 Medium
- opensuse libzypp, suse caas platform 3.0, linux enterprise server 12 +1 more +3 morelibzypp stores cookies world readableCVE-2019-18900Fix available4.0 Medium
- opensuse factory, suse linux enterprise server 15 sp1, trousers +1 more +3 moretrousers: Local privilege escalation from tss to rootCVE-2019-18898Fix available7.7 High
- opensuse factory, munge, suse linux enterprise server 15 +2 moreLocal privilege escalation from user munge to rootCVE-2019-3691Fix available7.7 High
- suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 moresquid: /usr/sbin/pinger packaged with wrong permissionCVE-2019-36885.1 Medium
- linux-nfs nfs-utils, suse linux enterprise server 12, linux enterprise server 15 +2 morenfs-utils: root-owned files stored in insecure /var/lib/nfs directoryCVE-2019-3689Fix available5.1 Medium
- hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 moreyast2-rmt exposes CA private key passhrase in log-fileCVE-2018-20105Fix available4.0 Medium
- opensuse factory, suse linux enterprise server 15, obs-service-tar scm +2 moreobs-service-extract_file's outfilename parameter allows to write files outside of package directoryCVE-2018-124764.3 Medium