SLES 15

🔴 Critical   ⏱ 15–90 min  Last verified: 17 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-202507:15303-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38824 CVE-2020-11651 CVE-2020-11652 CVE-2020-16846 CVE-2020-25592 CVE-2020-28972 CVE-2020-35662 CVE-2021-25281  +12 more Upstream summary: Directory traversal vulnerability in recv_file method allows arbitrary files to be written to […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:6963 (see also SUSE bugzilla) Related CVEs: CVE-2024-6655 Upstream summary: A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0979-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-2176 CVE-2025-2177 CVE-2025-2173 CVE-2025-2174 CVE-2025-2175 Upstream summary: A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:8037 (see also SUSE bugzilla) Related CVEs: CVE-2024-42934 Upstream summary: OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with […]

🟠 High   ⏱ 15–60 min  Last verified: 13 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:1915 (see also SUSE bugzilla) Related CVEs: CVE-2025-1244 CVE-2024-53920 CVE-2024-39331 CVE-2022-48337 CVE-2022-48339 CVE-2022-48338 CVE-2022-45939 CVE-2024-30203  +9 more Upstream summary: A command injection flaw was found in the text editor Emacs. It could […]

🟠 High   ⏱ 15–60 min  Last verified: 9 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:12447 (see also SUSE bugzilla) Related CVEs: CVE-2025-7425 CVE-2025-49794 CVE-2025-49795 CVE-2025-49796 CVE-2025-6021 CVE-2024-56171 CVE-2022-49043 CVE-2024-40896  +12 more Upstream summary: A flaw was found in libxslt where the attribute type, atype, flags are […]

🔴 Critical   ⏱ 15–90 min  Last verified: 6 May 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:4187-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23266 CVE-2024-0135 CVE-2024-0136 CVE-2025-23359 CVE-2025-23267 CVE-2024-0137 CVE-2024-0134 Upstream summary: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the […]

🟠 High   ⏱ 15–60 min  Last verified: 30 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2283-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5564 CVE-2016-3698 Upstream summary: A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:9306 (see also SUSE bugzilla) Related CVEs: CVE-2024-24795 Upstream summary: HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications […]

🟠 High   ⏱ 15–60 min  Last verified: 20 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:2871-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-13089 CVE-2017-13090 CVE-2019-5953 CVE-2021-31879 CVE-2024-10524 CVE-2024-38428 CVE-2010-2252 CVE-2014-4877  +5 more Upstream summary: The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. […]