SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 28 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:1438-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-18009 CVE-2019-14491 CVE-2019-14492 CVE-2019-15939 Upstream summary: In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp. Table of contents Symptom & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2015-0838 CVE-2017-16228 Upstream summary: Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2626 Upstream summary: It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0417-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-1419 Upstream summary: Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2009-5030 CVE-2012-3358 CVE-2012-3535 CVE-2013-1447 CVE-2013-4289 CVE-2013-4290 CVE-2013-6045 CVE-2013-6052  +4 more Upstream summary: The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-1345 Upstream summary: The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read […]

🟠 High   ⏱ 15–60 min  Last verified: 16 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:723-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-17833 CVE-2010-3609 CVE-2016-4912 CVE-2016-7567 Upstream summary: OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself […]