SLES 12

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:007 Related CVEs: CVE-2011-0460 Upstream summary: The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map. Table of contents Symptom […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 June 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2010:002 (see also SUSE bugzilla) Related CVEs: CVE-2009-4012 Upstream summary: Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-3355 Upstream summary: (1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2012:1077-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-2944 Upstream summary: Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2015:1730-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-0259 Upstream summary: OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-0240 CVE-2013-1799 Upstream summary: Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts […]

🟠 High   ⏱ 15–60 min  Last verified: 19 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2012:0147-1 (see also SUSE bugzilla) Related CVEs: CVE-2011-4815 CVE-2009-4492 CVE-2010-0541 CVE-2011-1004 CVE-2011-1005 Upstream summary: Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0515-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-7300 Upstream summary: GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2010:019 (see also SUSE bugzilla) Related CVEs: CVE-2010-2522 CVE-2010-2523 Upstream summary: The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0467-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6401 Upstream summary: Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a […]