SLES 12

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0368-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-69277 CVE-2025-15444 Upstream summary: libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 June 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0821-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0633 CVE-2023-33461 Upstream summary: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory Table of contents Symptom & […]

🟠 High   ⏱ 15–60 min  Last verified: 3 June 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:2871-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-13089 CVE-2017-13090 CVE-2019-5953 CVE-2024-10524 CVE-2021-31879 CVE-2024-38428 CVE-2010-2252 CVE-2014-4877  +5 more Upstream summary: The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 May 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1017-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-0786 CVE-2014-8119 CVE-2025-2588 CVE-2017-7555 Upstream summary: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1024-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-0547 CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2024-5594 CVE-2024-28882 CVE-2020-15078 CVE-2014-8104  +5 more Upstream summary: OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication […]

🔴 Critical   ⏱ 15–90 min  Last verified: 15 May 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03603-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-10230 CVE-2020-1472 CVE-2021-44142 CVE-2009-1886 CVE-2023-34966 CVE-2021-20251 CVE-2022-37966 CVE-2022-38023  +12 more Upstream summary: A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 May 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10585 (see also SUSE bugzilla) Related CVEs: CVE-2025-48060 CVE-2024-23337 CVE-2025-9403 Upstream summary: jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` […]

🟠 High   ⏱ 15–60 min  Last verified: 3 May 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1572-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-34069 CVE-2023-25577 CVE-2019-14806 Upstream summary: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to […]

🔴 Critical   ⏱ 15–90 min  Last verified: 2 May 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:721-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-7864 CVE-2025-27363 CVE-2017-8287 CVE-2020-15999 CVE-2025-23022 CVE-2009-0946 CVE-2010-2497 CVE-2010-2805  +12 more Upstream summary: FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer […]