Suse Linux vulnerabilities

• samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync CVE-2024-12087 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +13 more +15 more Rsync: rsync server leaks arbitrary client files CVE-2024-12086 Fix available 6.1 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• opensuse leap, suse linux enterprise high performance computing, opensuse leap 15.5 +3 more +5 more A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux... CVE-2023-32182 Fix available 5.9 MediumAugust 23, 2023
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim CVE-2020-15705 Fix available 6.4 MediumJuly 29, 2020
• debian linux, gnu grub2, canonical ubuntu linux +13 more +15 more GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. CVE-2020-15707 Fix available 5.7 MediumJuly 29, 2020
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. CVE-2020-15706 Fix available 6.4 MediumJuly 29, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6429 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6428 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6427 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote... CVE-2020-6426 Fix available 6.5 MediumMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6424 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6422 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6449 Fix available 8.8 HighMarch 20, 2020
• hackerone nextcloud server, nextcloud server, opensuse backports +1 more +3 more Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs... CVE-2019-15624 4.9 MediumFebruary 4, 2020
• phpmyadmin, debian linux, suse linux enterprise server +2 more phpMyAdmin SQL injection in user accounts page CVE-2020-5504 Public exploitFix available EPSS 28.0% 8.8 HighJanuary 8, 2020
• suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 more squid: /usr/sbin/pinger packaged with wrong permission CVE-2019-3688 5.1 MediumOctober 7, 2019
• hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 more yast2-rmt exposes CA private key passhrase in log-file CVE-2018-20105 Fix available 4.0 MediumMarch 18, 2019
• dcraw project dcraw, suse linux enterprise desktop, linux enterprise server +2 more A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in... CVE-2018-19655 Fix available 8.8 HighNovember 29, 2018
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... CVE-2018-12122 Fix available EPSS 41.3% 7.5 HighNovember 28, 2018
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... CVE-2018-12116 Fix available 7.5 HighNovember 28, 2018
• libwpd project libwpd, redhat enterprise linux, suse linux enterprise server +2 more In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener:... CVE-2018-19208 Fix available 6.5 MediumNovember 12, 2018
• lighttpd, debian linux, opensuse backports sle +2 more +4 more An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50.... CVE-2018-19052 Public exploitFix available EPSS 13.7% 7.5 HighNovember 7, 2018
• linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 more The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files CVE-2018-6556 Fix available 3.3 LowAugust 6, 2018
• open shortest path first (ospf) protocol, quagga, suse opensuse +2 more +4 more Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages) CVE-2017-3224 8.2 HighJuly 24, 2018
• suse kdump, linux enterprise desktop, linux enterprise server +2 more Missing verification of host key for kdump server CVE-2011-4190 5.9 MediumJune 8, 2018
• suse linux enterprise, linux enterprise server +1 more unix2_chkpwd do not check for a valid account CVE-2011-3172 Fix available 5.4 MediumJune 8, 2018
• arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 more CVE-2017-5753 does not affect BellSoft software CVE-2017-5753 Public exploitFix available EPSS 93.8% 5.6 MediumJanuary 3, 2018
• postgresql, suse postgresql-init, linux enterprise server +2 more local privilege escalation in SUSE postgresql init script CVE-2017-14798 Public exploitFix available 7.3 HighNovember 27, 2017
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. CVE-2016-9959 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. CVE-2016-9958 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more Stack-based buffer overflow in game-music-emu before 0.6.1. CVE-2016-9957 Fix available 7.8 HighDecember 15, 2016
• linux kernel, fedoraproject fedora, redhat enterprise linux +7 more +9 more The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not... CVE-2016-5244 Fix available 7.5 HighJune 16, 2016
• suse linux enterprise desktop, linux enterprise server +1 more A code injection in the supportconfig data collection tool in supportutils in SUSE Linux... CVE-2016-1602 Fix available 7.8 HighJune 7, 2016
• ibm java sdk, redhat enterprise linux desktop, enterprise linux hpc node supplementary +9 more +11 more Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before... CVE-2016-0264 5.6 MediumMay 13, 2016
• imagemagick, canonical ubuntu linux, debian linux +3 more +5 more The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders... CVE-2016-3714 In KEVPublic exploitFix available EPSS 97.5% 8.4 HighMay 5, 2016
• linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +7 more +9 more Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows... CVE-2016-3951 Fix available 4.6 MediumMay 2, 2016
• linux kernel, novell suse linux enterprise desktop, suse linux enterprise server +5 more +7 more The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1... CVE-2015-8845 Fix available 5.5 MediumApril 27, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers... CVE-2016-2315 Fix available EPSS 17.3% 9.8 CriticalMarch 16, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)... CVE-2016-2324 Fix available EPSS 18.1% 9.8 CriticalMarch 15, 2016
• gnu glibc, canonical ubuntu linux, debian linux +26 more +28 more Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the... CVE-2015-7547 Public exploitFix available EPSS 92.4% 8.1 HighFebruary 16, 2016
• ibm java sdk, websphere application server, redhat satellite +2 more +4 more The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before... CVE-2015-5041 9.1 CriticalFebruary 9, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6)... CVE-2015-8779 Fix available 9.8 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent... CVE-2015-8778 Fix available 9.8 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context... CVE-2015-8776 Fix available 9.1 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, fedoraproject fedora +5 more +7 more Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow... CVE-2014-9761 Fix available 9.8 CriticalFebruary 5, 2016
• ntp, novell suse openstack cloud, opensuse leap +6 more +8 more The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77... CVE-2015-7976 Fix available 4.3 MediumDecember 31, 2015
• ntp, canonical ubuntu linux, debian linux +16 more +18 more The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the... CVE-2015-5300 Fix available 7.5 HighOctober 22, 2015
• debian linux, linux kernel, canonical ubuntu linux +2 more +4 more Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x... CVE-2015-5707 Fix available 4.6 MediumAugust 3, 2015
• qemu, xen, fedoraproject fedora +4 more +6 more Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when... CVE-2015-5154 Fix available 7.2 HighJuly 17, 2015
• Show olderLoading…