SLES 12

🟠 High   ⏱ 15–60 min  Last verified: 30 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:15017 (see also SUSE bugzilla) Related CVEs: CVE-2025-8067 CVE-2021-3802 CVE-2014-0004 Upstream summary: A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:2500 (see also SUSE bugzilla) Related CVEs: CVE-2025-26595 Upstream summary: A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and […]

🔴 Critical   ⏱ 15–90 min  Last verified: 16 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3044-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3781 CVE-2025-27832 CVE-2025-27835 CVE-2025-27836 CVE-2024-46951 CVE-2024-46953 CVE-2024-46956 CVE-2024-33871  +12 more Upstream summary: A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in […]

🟠 High   ⏱ 15–60 min  Last verified: 4 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14728-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 CVE-2021-3500 CVE-2021-3630 CVE-2021-32490 CVE-2025-53367 CVE-2021-46312  +6 more Upstream summary: A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function […]

🟠 High   ⏱ 15–60 min  Last verified: 2 August 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:14177 (see also SUSE bugzilla) Related CVEs: CVE-2025-48976 CVE-2013-2186 CVE-2016-1000031 Upstream summary: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 July 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0665-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-61103 CVE-2025-61104 CVE-2025-61106 CVE-2025-61107 CVE-2025-61099 CVE-2025-61100 CVE-2025-61101 CVE-2025-61102  +2 more Upstream summary: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference […]

🟠 High   ⏱ 15–60 min  Last verified: 23 July 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2025:20479-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-6018 CVE-2020-16125 CVE-2011-1709 CVE-2018-14424 Upstream summary: A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw […]

🟠 High   ⏱ 15–60 min  Last verified: 16 July 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0765-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25126 CVE-2024-26141 CVE-2015-3225 CVE-2024-26146 Upstream summary: Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack's media type parser […]

🔴 Critical   ⏱ 15–90 min  Last verified: 16 July 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1637-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-4041 CVE-2015-4042 CVE-2025-5278 CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 Upstream summary: The keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a […]

🟠 High   ⏱ 15–60 min  Last verified: 7 July 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:3963-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-11759 CVE-2024-46544 CVE-2023-41081 CVE-2007-0774 CVE-2008-5519 Upstream summary: The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker […]