SLES 16

🟡 Medium   ⏱ 10–30 min  Last verified: 6 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:2109-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14019 Upstream summary: Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20170-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-64718 Upstream summary: js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-2142 Upstream summary: userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-18198 CVE-2017-18201 CVE-2017-18199 Upstream summary: print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) […]

🟠 High   ⏱ 15–60 min  Last verified: 4 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:3107-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-14798 Upstream summary: A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:8876 (see also SUSE bugzilla) Related CVEs: CVE-2024-24790 Upstream summary: The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would […]

🟠 High   ⏱ 15–60 min  Last verified: 4 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0102-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-0341 Upstream summary: A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the […]

🟠 High   ⏱ 15–60 min  Last verified: 2 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1658-1 (see also SUSE bugzilla) Related CVEs: CVE-2004-2771 CVE-2014-7844 Upstream summary: The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to […]

🟠 High   ⏱ 15–60 min  Last verified: 2 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0143-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2126 CVE-2023-5217 CVE-2024-5197 CVE-2016-1621 CVE-2016-2464 CVE-2017-0641 CVE-2017-13194 CVE-2019-9232  +4 more Upstream summary: In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a […]

🟠 High   ⏱ 15–60 min  Last verified: 2 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1465-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-46146 CVE-2019-10215 CVE-2021-29622 Upstream summary: Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access […]