SLES 12

🟠 High   ⏱ 15–60 min  Last verified: 28 April 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2151-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-37535 Upstream summary: GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a […]

🔴 Critical   ⏱ 15–90 min  Last verified: 26 April 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0960-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-6438 CVE-2016-10030 CVE-2020-27745 CVE-2022-29500 CVE-2022-29501 CVE-2022-29502 CVE-2024-48936 CVE-2017-15566  +10 more Upstream summary: SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems. Table of […]

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1396-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-31744 CVE-2020-27828 CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-8654 CVE-2016-9262 CVE-2016-9560  +12 more Upstream summary: In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, […]

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01985-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-45339 Upstream summary: When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and […]

🔴 Critical   ⏱ 15–90 min  Last verified: 13 April 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2918-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33193 CVE-2021-44790 CVE-2010-0425 CVE-2025-49812 CVE-2025-23048 CVE-2025-49630 CVE-2023-45802 CVE-2024-40725  +12 more Upstream summary: A crafted method sent through HTTP/2 will bypass validation and be forwarded by […]

🔴 Critical   ⏱ 15–90 min  Last verified: 12 April 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1338-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1996 CVE-2024-25621 CVE-2025-64329 CVE-2024-40635 CVE-2023-25153 CVE-2023-25173 CVE-2022-23471 Upstream summary: Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0. Table of contents Symptom […]

🟠 High   ⏱ 15–60 min  Last verified: 4 April 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:1019-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-24049 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

🟠 High   ⏱ 15–60 min  Last verified: 3 April 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0800-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785 CVE-2024-24791 CVE-2024-24789 CVE-2024-24790  +2 more Upstream summary: When following an HTTP redirect to a domain which is not a subdomain […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 March 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:9114 (see also SUSE bugzilla) Related CVEs: CVE-2024-36472 CVE-2010-4000 CVE-2017-8288 CVE-2019-3820 Upstream summary: In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses […]