Linux

🟡 Medium   ⏱ 10–30 min  Last verified: 10 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2009-3894 Upstream summary: Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-1616 Upstream summary: Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 3 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1626-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4419 CVE-2013-2124 Upstream summary: The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the –remote or –listen option, does not properly check the […]

🔴 Critical   ⏱ 15–90 min  Last verified: 29 November 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1211-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-0578 CVE-2015-3114 CVE-2015-3115 CVE-2015-3116 CVE-2015-3117 CVE-2015-3118 CVE-2015-3119 CVE-2015-3120  +12 more Upstream summary: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 November 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0746-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1841 Upstream summary: Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 November 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2635-1 (see also SUSE bugzilla) Related CVEs: CVE-2010-2322 Upstream summary: Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files […]

🟠 High   ⏱ 15–60 min  Last verified: 25 November 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2011:0898-1 (see also SUSE bugzilla) Related CVEs: CVE-2011-1831 CVE-2011-1832 CVE-2011-1834 CVE-2011-1835 CVE-2011-1837 CVE-2011-1833 CVE-2014-9687 CVE-2015-8946  +3 more Upstream summary: utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 November 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:010 (see also SUSE bugzilla) Related CVEs: CVE-2011-1098 CVE-2011-1154 CVE-2011-1155 Upstream summary: Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 November 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2006:005 (see also SUSE bugzilla) Related CVEs: CVE-2006-0855 CVE-2007-1669 Upstream summary: Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda […]