SLES 15

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:4501-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-47466 CVE-2018-11439 Upstream summary: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2025:1150-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47554 CVE-2021-29425 Upstream summary: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 March 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2768-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4156 Upstream summary: A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could […]

🔴 Critical   ⏱ 15–90 min  Last verified: 23 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0323-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-21646 CVE-2024-27099 CVE-2024-25110 Upstream summary: Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to […]

🟠 High   ⏱ 15–60 min  Last verified: 20 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0158-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7101 Upstream summary: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability […]

🟠 High   ⏱ 15–60 min  Last verified: 20 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0573-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33953 CVE-2022-3171 CVE-2021-22569 Upstream summary: gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in […]

🟠 High   ⏱ 15–60 min  Last verified: 19 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4218-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-43361 CVE-2014-9638 CVE-2014-9639 CVE-2014-9640 CVE-2015-6749 Upstream summary: Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3727-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-39976 Upstream summary: log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. Table of […]

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:4104-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-39326 CVE-2023-39325 CVE-2023-39323 CVE-2023-45285 CVE-2023-45283 CVE-2023-45284 CVE-2023-39318 CVE-2023-39319 Upstream summary: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a […]

🟠 High   ⏱ 15–60 min  Last verified: 17 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3289-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-50186 Upstream summary: GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected […]