SLES 12

🟡 Medium   ⏱ 10–30 min  Last verified: 15 March 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2969-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-42353 Upstream summary: WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 March 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:23479 (see also SUSE bugzilla) Related CVEs: CVE-2025-61985 Upstream summary: ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is […]

🔴 Critical   ⏱ 15–90 min  Last verified: 13 March 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0455-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-5379 CVE-2017-15865 CVE-2022-37032 CVE-2024-44070 CVE-2023-38802 CVE-2023-41358 CVE-2018-5381 CVE-2018-5378  +8 more Upstream summary: The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when […]

🟠 High   ⏱ 15–60 min  Last verified: 10 March 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:4267 (see also SUSE bugzilla) Related CVEs: CVE-2024-25081 CVE-2024-25082 CVE-2020-25690 CVE-2020-5395 CVE-2020-5496 CVE-2017-11568 CVE-2017-11569 CVE-2017-11570  +7 more Upstream summary: Splinefont in FontForge through 20230101 allows command injection via crafted filenames. Table of […]

🔴 Critical   ⏱ 15–90 min  Last verified: 27 February 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2352-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24882 CVE-2024-32658 CVE-2024-32659 CVE-2024-32039 CVE-2024-32460 CVE-2024-22211 CVE-2021-41159 CVE-2022-24883  +12 more Upstream summary: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 February 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:4435-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-66004 CVE-2016-5104 Upstream summary: A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 24 February 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1375-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-2961 CVE-2024-33599 CVE-2024-33600 CVE-2020-1751 CVE-2020-1752 CVE-2020-29573 CVE-2021-3999 CVE-2015-5180  +12 more Upstream summary: The iconv() function in the GNU C Library versions 2.39 and older may […]

🟠 High   ⏱ 15–60 min  Last verified: 19 February 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2092-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-3138 CVE-2020-14363 CVE-2021-31535 CVE-2018-14600 CVE-2025-26597 CVE-2023-43785 CVE-2023-43786 CVE-2023-43787  +12 more Upstream summary: A vulnerability was found in libX11. The security flaw occurs because the functions […]

🟠 High   ⏱ 15–60 min  Last verified: 19 February 2025 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:14130 (see also SUSE bugzilla) Related CVEs: CVE-2025-5914 CVE-2024-20696 CVE-2025-5916 CVE-2025-5917 CVE-2021-31566 CVE-2021-23177 CVE-2018-1000878 CVE-2019-18408  +12 more Upstream summary: A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() […]