Suse Linux Enterprise Server vulnerabilities

• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim CVE-2020-15705 Fix available 6.4 MediumJuly 29, 2020
• debian linux, gnu grub2, canonical ubuntu linux +13 more +15 more GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. CVE-2020-15707 Fix available 5.7 MediumJuly 29, 2020
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. CVE-2020-15706 Fix available 6.4 MediumJuly 29, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6429 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6428 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6427 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote... CVE-2020-6426 Fix available 6.5 MediumMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6424 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6422 Fix available 8.8 HighMarch 20, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to... CVE-2020-6449 Fix available 8.8 HighMarch 20, 2020
• hackerone nextcloud server, nextcloud server, opensuse backports +1 more +3 more Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs... CVE-2019-15624 4.9 MediumFebruary 4, 2020
• phpmyadmin, debian linux, suse linux enterprise server +2 more phpMyAdmin SQL injection in user accounts page CVE-2020-5504 Public exploitFix available EPSS 28.0% 8.8 HighJanuary 8, 2020
• suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 more squid: /usr/sbin/pinger packaged with wrong permission CVE-2019-3688 5.1 MediumOctober 7, 2019
• hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 more yast2-rmt exposes CA private key passhrase in log-file CVE-2018-20105 Fix available 4.0 MediumMarch 18, 2019
• dcraw project dcraw, suse linux enterprise desktop, linux enterprise server +2 more A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in... CVE-2018-19655 Fix available 8.8 HighNovember 29, 2018
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... CVE-2018-12122 Fix available EPSS 41.3% 7.5 HighNovember 28, 2018
• node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... CVE-2018-12116 Fix available 7.5 HighNovember 28, 2018
• libwpd project libwpd, redhat enterprise linux, suse linux enterprise server +2 more In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener:... CVE-2018-19208 Fix available 6.5 MediumNovember 12, 2018
• lighttpd, debian linux, opensuse backports sle +2 more +4 more An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50.... CVE-2018-19052 Public exploitFix available EPSS 13.7% 7.5 HighNovember 7, 2018
• linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 more The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files CVE-2018-6556 Fix available 3.3 LowAugust 6, 2018
• suse kdump, linux enterprise desktop, linux enterprise server +2 more Missing verification of host key for kdump server CVE-2011-4190 5.9 MediumJune 8, 2018
• suse linux enterprise, linux enterprise server +1 more unix2_chkpwd do not check for a valid account CVE-2011-3172 Fix available 5.4 MediumJune 8, 2018
• arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 more CVE-2017-5753 does not affect BellSoft software CVE-2017-5753 Public exploitFix available EPSS 93.8% 5.6 MediumJanuary 3, 2018
• postgresql, suse postgresql-init, linux enterprise server +2 more local privilege escalation in SUSE postgresql init script CVE-2017-14798 Public exploitFix available 7.3 HighNovember 27, 2017
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. CVE-2016-9959 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. CVE-2016-9958 Fix available 7.8 HighDecember 15, 2016
• game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 more Stack-based buffer overflow in game-music-emu before 0.6.1. CVE-2016-9957 Fix available 7.8 HighDecember 15, 2016
• linux kernel, fedoraproject fedora, redhat enterprise linux +7 more +9 more The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not... CVE-2016-5244 Fix available 7.5 HighJune 16, 2016
• suse linux enterprise desktop, linux enterprise server +1 more A code injection in the supportconfig data collection tool in supportutils in SUSE Linux... CVE-2016-1602 Fix available 7.8 HighJune 7, 2016
• ibm java sdk, redhat enterprise linux desktop, enterprise linux hpc node supplementary +9 more +11 more Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before... CVE-2016-0264 5.6 MediumMay 13, 2016
• imagemagick, canonical ubuntu linux, debian linux +3 more +5 more The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders... CVE-2016-3714 In KEVPublic exploitFix available EPSS 97.5% 8.4 HighMay 5, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers... CVE-2016-2315 Fix available EPSS 17.3% 9.8 CriticalMarch 16, 2016
• git-scm git, opensuse leap, opensuse +4 more +6 more Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)... CVE-2016-2324 Fix available EPSS 18.1% 9.8 CriticalMarch 15, 2016
• gnu glibc, canonical ubuntu linux, debian linux +26 more +28 more Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the... CVE-2015-7547 Public exploitFix available EPSS 92.4% 8.1 HighFebruary 16, 2016
• ibm java sdk, websphere application server, redhat satellite +2 more +4 more The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before... CVE-2015-5041 9.1 CriticalFebruary 9, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6)... CVE-2015-8779 Fix available 9.8 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent... CVE-2015-8778 Fix available 9.8 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, debian linux +6 more +8 more The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context... CVE-2015-8776 Fix available 9.1 CriticalFebruary 5, 2016
• gnu glibc, canonical ubuntu linux, fedoraproject fedora +5 more +7 more Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow... CVE-2014-9761 Fix available 9.8 CriticalFebruary 5, 2016
• ntp, novell suse openstack cloud, opensuse leap +6 more +8 more The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77... CVE-2015-7976 Fix available 4.3 MediumDecember 31, 2015
• ntp, canonical ubuntu linux, debian linux +16 more +18 more The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the... CVE-2015-5300 Fix available 7.5 HighOctober 22, 2015
• debian linux, linux kernel, canonical ubuntu linux +2 more +4 more Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x... CVE-2015-5707 Fix available 4.6 MediumAugust 3, 2015
• qemu, xen, fedoraproject fedora +4 more +6 more Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when... CVE-2015-5154 Fix available 7.2 HighJuly 17, 2015
• mozilla firefox, firefox esr, thunderbird +6 more +8 more The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in... CVE-2015-2738 Fix available 10.0 HighJuly 4, 2015
• mozilla firefox, firefox esr, thunderbird +6 more +8 more The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before... CVE-2015-2737 Fix available 10.0 HighJuly 4, 2015
• mozilla firefox, firefox esr, thunderbird +6 more +8 more The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla... CVE-2015-2734 Fix available 10.0 HighJuly 4, 2015
• gnu glibc, canonical ubuntu linux, suse linux enterprise desktop +1 more +3 more DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc... CVE-2014-8121 Fix available 5.0 MediumMarch 27, 2015
• imagemagick, canonical ubuntu linux, opensuse leap +3 more +5 more coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application... CVE-2014-9854 Fix available 7.5 HighDecember 31, 2014
• canonical ubuntu linux, oracle jdk, jre +1 more +3 more Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity... CVE-2015-0413 Fix available 1.9 LowOctober 24, 2014
• debian linux, linux kernel, suse linux enterprise server +2 more net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl... CVE-2015-2041 Fix available 4.6 MediumSeptember 24, 2014
• Show olderLoading…