SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 10 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:1824-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-26768 CVE-2023-26767 CVE-2023-26769 CVE-2022-26981 CVE-2022-31783 CVE-2017-13738 CVE-2017-13739 CVE-2017-13740  +12 more Upstream summary: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:8830 (see also SUSE bugzilla) Related CVEs: CVE-2024-2313 Upstream summary: If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use […]

🟠 High   ⏱ 15–60 min  Last verified: 9 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2030-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5171 CVE-2021-30474 CVE-2021-30475 CVE-2021-30473 CVE-2020-0470 CVE-2020-36129 CVE-2020-36130 CVE-2020-36131  +1 more Upstream summary: Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. […]

🟠 High   ⏱ 15–60 min  Last verified: 6 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0442-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22792 CVE-2023-22795 CVE-2021-22904 CVE-2021-22885 CVE-2024-47887 CVE-2023-28362 CVE-2022-23633 Upstream summary: A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3345-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-35255 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:740-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10903 CVE-2020-36242 CVE-2023-49083 CVE-2023-23931 CVE-2020-25659 Upstream summary: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a […]

🟠 High   ⏱ 15–60 min  Last verified: 23 January 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1767-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-4340 CVE-2021-32839 Upstream summary: Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. Table of contents Symptom & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02591-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-45751 Upstream summary: tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 January 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1494-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30630 Upstream summary: Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo […]