SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2014-0021 CVE-2012-4502 CVE-2012-4503 CVE-2020-14367 CVE-2016-1567 Upstream summary: Chrony before 1.29.1 has traffic amplification in cmdmon protocol Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🔴 Critical   ⏱ 15–90 min  Last verified: 4 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3807-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-5869 CVE-2026-2007 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2025-12818 CVE-2020-25695 CVE-2020-25696  +12 more Upstream summary: A flaw was found in PostgreSQL that allows authenticated database users to execute […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2134-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 Upstream summary: UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use […]

🟠 High   ⏱ 15–60 min  Last verified: 3 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20923-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-26623 CVE-2021-29457 CVE-2023-44398 CVE-2025-54080 CVE-2025-55304 CVE-2026-25884 CVE-2026-27596 CVE-2026-27631  +12 more Upstream summary: Exiv2 is a C++ library and a command-line utility to read, write, delete […]

🟠 High   ⏱ 15–60 min  Last verified: 2 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2439-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12083 CVE-2020-1967 CVE-2018-1000622 Upstream summary: The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:20468-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-54159 Upstream summary: stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack. Table of contents […]

🟠 High   ⏱ 15–60 min  Last verified: 1 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:496-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24761 CVE-2024-49768 CVE-2024-49769 CVE-2022-31015 Upstream summary: Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:110-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3687 CVE-2019-3690 CVE-2020-8013 CVE-2022-31252 CVE-2019-3688 Upstream summary: The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" […]

🟠 High   ⏱ 15–60 min  Last verified: 1 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:21038 (see also SUSE bugzilla) Related CVEs: CVE-2025-11232 CVE-2026-3608 CVE-2025-40779 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803 Upstream summary: To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the […]