SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 7 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2024:0560-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-37460 Upstream summary: Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 April 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2970-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-29824 CVE-2023-25399 Upstream summary: A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that […]

🟠 High   ⏱ 15–60 min  Last verified: 27 April 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1572-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-34069 CVE-2023-25577 CVE-2019-14806 Upstream summary: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to […]

🟠 High   ⏱ 15–60 min  Last verified: 18 April 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2895-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25713 CVE-2017-18926 CVE-2024-57822 CVE-2024-57823 CVE-2012-0037 Upstream summary: A malformed input file can lead to a segfault due to an out of bounds array access in […]

🟠 High   ⏱ 15–60 min  Last verified: 18 April 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2975-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-40724 Upstream summary: Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially […]

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2823-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-35789 CVE-2019-18609 Upstream summary: An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 April 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:9424 (see also SUSE bugzilla) Related CVEs: CVE-2024-29038 CVE-2024-29039 CVE-2021-3565 CVE-2017-7524 Upstream summary: tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote […]

🟠 High   ⏱ 15–60 min  Last verified: 13 April 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3770-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-36474 CVE-2024-42415 Upstream summary: An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library […]

🔴 Critical   ⏱ 15–90 min  Last verified: 12 April 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3330-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12321 CVE-2023-31315 CVE-2021-26345 CVE-2021-46766 CVE-2021-46774 CVE-2022-23820 CVE-2022-23830 CVE-2023-20519  +12 more Upstream summary: Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may […]

🟠 High   ⏱ 15–60 min  Last verified: 10 April 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:6757 (see also SUSE bugzilla) Related CVEs: CVE-2024-7383 CVE-2022-0485 CVE-2023-5215 CVE-2023-5871 CVE-2021-20286 Upstream summary: A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when […]