SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1926-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7183 CVE-2014-1545 Upstream summary: Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x […]

🟠 High   ⏱ 15–60 min  Last verified: 19 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02809-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-32650 CVE-2025-58266 CVE-2023-26964 Upstream summary: Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0172-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-7488 Upstream summary: perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-2451 Upstream summary: The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via […]

🟠 High   ⏱ 15–60 min  Last verified: 19 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-33980 CVE-2024-29131 CVE-2024-29133 Upstream summary: Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is […]

🔴 Critical   ⏱ 15–90 min  Last verified: 19 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-26463 CVE-2026-35328 CVE-2026-35329 CVE-2026-35330 CVE-2026-35332 CVE-2026-35333 CVE-2026-35334 CVE-2026-25075  +12 more Upstream summary: strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a […]

🟠 High   ⏱ 15–60 min  Last verified: 18 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:6309 (see also SUSE bugzilla) Related CVEs: CVE-2024-6345 Upstream summary: A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-3700 Upstream summary: A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3016-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-34623 Upstream summary: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 January 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1329-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-3386 Upstream summary: The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces […]