SLES 15

🟡 Medium   ⏱ 10–30 min  Last verified: 6 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:17558 (see also SUSE bugzilla) Related CVEs: CVE-2025-48964 CVE-2025-47268 Upstream summary: ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via […]

🟠 High   ⏱ 15–60 min  Last verified: 1 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:17428 (see also SUSE bugzilla) Related CVEs: CVE-2025-41244 CVE-2023-34058 CVE-2023-34059 CVE-2023-20900 CVE-2022-31676 CVE-2025-22247 CVE-2023-20867 CVE-2015-5191 Upstream summary: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local […]

🟠 High   ⏱ 15–60 min  Last verified: 24 December 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:21200-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-59777 CVE-2025-62689 CVE-2023-27371 CVE-2013-7038 CVE-2013-7039 Upstream summary: NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 December 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03025-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-7962 Upstream summary: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 December 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3210-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7256 CVE-2024-8006 CVE-2019-15161 CVE-2019-15162 CVE-2019-15163 CVE-2019-15164 CVE-2019-15165 CVE-2025-11961 Upstream summary: In affected libpcap versions during the setup of a remote packet capture the internal function […]

🟠 High   ⏱ 15–60 min  Last verified: 8 December 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02749-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-54351 CVE-2023-38403 CVE-2025-54349 CVE-2025-54350 CVE-2024-53580 CVE-2024-26306 Upstream summary: In iperf before 3.19.1, net.c has a buffer overflow when –skip-rx-copy is used (for MSG_TRUNC in recv). […]

🟠 High   ⏱ 15–60 min  Last verified: 23 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01751-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-43904 CVE-2023-49936 CVE-2023-49937 CVE-2023-41914 CVE-2021-31215 CVE-2020-27745 CVE-2023-49933 CVE-2023-49935  +3 more Upstream summary: In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow […]

🟠 High   ⏱ 15–60 min  Last verified: 23 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10796 (see also SUSE bugzilla) Related CVEs: CVE-2025-6019 Upstream summary: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to […]

🟠 High   ⏱ 15–60 min  Last verified: 23 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0858-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-69227 CVE-2025-69228 CVE-2025-69229 CVE-2025-69223 CVE-2024-30251 CVE-2021-21330 CVE-2025-69225 CVE-2025-69224  +6 more Upstream summary: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 […]