SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:518-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25219 CVE-2020-26154 CVE-2012-4504 Upstream summary: url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3944-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13645 Upstream summary: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to […]

🟠 High   ⏱ 15–60 min  Last verified: 23 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2443-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3570 Upstream summary: A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between […]

🟠 High   ⏱ 15–60 min  Last verified: 20 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2022:1093-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19203 CVE-2019-19204 CVE-2019-19246 CVE-2019-13225 CVE-2019-13224 CVE-2019-16163 CVE-2020-26159 Upstream summary: An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, […]

🟠 High   ⏱ 15–60 min  Last verified: 15 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13132 CVE-2019-6250 CVE-2020-15166 CVE-2014-7202 CVE-2014-7203 CVE-2014-9721 Upstream summary: In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting […]

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0732-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-20044 CVE-2021-45444 CVE-2018-0502 CVE-2018-1100 CVE-2018-13259 CVE-2018-1083 CVE-2018-1071 Upstream summary: In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the –no-PRIVILEGED […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0913-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-4048 Upstream summary: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4424-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-40153 CVE-2021-41072 CVE-2015-4645 CVE-2015-4646 CVE-2012-4025 CVE-2012-4024 Upstream summary: squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used […]