SLES 12

🟠 High   ⏱ 15–60 min  Last verified: 13 July 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2669-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-36978 CVE-2017-11624 CVE-2017-11625 CVE-2017-11627 CVE-2022-34503 CVE-2017-9208 CVE-2017-9209 CVE-2017-9210  +3 more Upstream summary: QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow […]

🟠 High   ⏱ 15–60 min  Last verified: 12 July 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0140-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-0486 CVE-2023-36661 CVE-2018-0489 CVE-2019-9628 Upstream summary: Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 July 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3016-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-34623 Upstream summary: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object […]

🟠 High   ⏱ 15–60 min  Last verified: 7 July 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1007-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1271 Upstream summary: An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 June 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0851-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-51441 CVE-2012-5784 CVE-2014-3596 CVE-2018-8032 Upstream summary: ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin […]

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3865-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40284 CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-35266 CVE-2021-35267 CVE-2021-35268  +12 more Upstream summary: A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an […]

🟠 High   ⏱ 15–60 min  Last verified: 17 June 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3447-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-44487 CVE-2023-30581 CVE-2022-25881 CVE-2023-23920 CVE-2023-38552 CVE-2023-32006 CVE-2023-32559 CVE-2023-32002  +3 more Upstream summary: The HTTP/2 protocol allows a denial of service (server resource consumption) because request […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 June 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1498-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-48303 CVE-2021-20193 CVE-2010-0624 CVE-2016-6321 CVE-2023-39804 CVE-2018-20482 CVE-2019-9923 Upstream summary: GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 June 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3924-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-46316 Upstream summary: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. Table of contents Symptom & […]

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0940-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7747 CVE-2018-17095 CVE-2019-13147 CVE-2022-24599 CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830  +10 more Upstream summary: Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File […]