SLES 15

🟡 Medium   ⏱ 10–30 min  Last verified: 20 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-26916 Upstream summary: libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c. Table of contents […]

🔴 Critical   ⏱ 15–90 min  Last verified: 15 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1963-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-29402 CVE-2023-29404 CVE-2023-29405 CVE-2023-29409 CVE-2023-29403 CVE-2023-24539 CVE-2023-29400 CVE-2023-24534  +8 more Upstream summary: The go command may generate unexpected code at build time when using cgo. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-26303 Upstream summary: Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted […]

🟠 High   ⏱ 15–60 min  Last verified: 9 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1347-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-24476 CVE-2024-2955 CVE-2024-0207 CVE-2024-0210 CVE-2024-0211 CVE-2024-0208 CVE-2024-0209 CVE-2023-2859  +12 more Upstream summary: A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 7 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:10978 (see also SUSE bugzilla) Related CVEs: CVE-2024-12254 CVE-2024-4030 CVE-2023-6507 Upstream summary: Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer […]

🟠 High   ⏱ 15–60 min  Last verified: 4 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:6184 (see also SUSE bugzilla) Related CVEs: CVE-2024-40897 Upstream summary: Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially […]

🟠 High   ⏱ 15–60 min  Last verified: 3 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:254-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33560 CVE-2015-5738 CVE-2021-3345 CVE-2024-2236 CVE-2021-40528 CVE-2013-4242 CVE-2014-3591 CVE-2015-0837  +6 more Upstream summary: Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks […]

🟠 High   ⏱ 15–60 min  Last verified: 3 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:0210 (see also SUSE bugzilla) Related CVEs: CVE-2024-11614 CVE-2022-2132 CVE-2022-28199 CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14377 CVE-2020-14378  +10 more Upstream summary: An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2023:602-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-26112 Upstream summary: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** […]

🟠 High   ⏱ 15–60 min  Last verified: 28 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4288-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-46136 CVE-2024-49767 Upstream summary: Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x […]