🟠 High ⏱ 15–60 min Last verified: 19 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1301-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-27983 CVE-2024-22019 CVE-2023-32067 CVE-2023-24807 CVE-2023-23919 CVE-2022-35255 CVE-2024-27982 CVE-2024-30261 +12 more Upstream summary: An attacker can make the Node.js HTTP/2 server completely unavailable by sending a […]
🟠 High ⏱ 15–60 min Last verified: 15 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:3919-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-7783 CVE-2024-21892 CVE-2025-22150 CVE-2025-23085 CVE-2024-21538 CVE-2024-22020 CVE-2024-36138 CVE-2024-27980 Upstream summary: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 13 June 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:16116 (see also SUSE bugzilla) Related CVEs: CVE-2025-32988 CVE-2022-2509 CVE-2014-0092 CVE-2016-8610 CVE-2020-11501 CVE-2020-13777 CVE-2021-20231 CVE-2021-20232 +12 more Upstream summary: A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due […]
🟡 Medium ⏱ 10–30 min Last verified: 9 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0726-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-1379 CVE-2024-54661 CVE-2013-3571 CVE-2014-0019 Upstream summary: The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service […]
🟠 High ⏱ 15–60 min Last verified: 8 June 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1274-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1270 CVE-2025-32460 CVE-2025-27795 Upstream summary: In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 6 June 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2105-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-29158 CVE-2024-29161 CVE-2024-29166 CVE-2024-32608 CVE-2024-32610 CVE-2024-32614 CVE-2024-32619 CVE-2024-32620 +5 more Upstream summary: HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the […]
🟡 Medium ⏱ 10–30 min Last verified: 6 June 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0965-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0911 CVE-2023-40305 Upstream summary: A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a […]
🟡 Medium ⏱ 10–30 min Last verified: 6 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0368-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-69277 CVE-2025-15444 Upstream summary: libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0821-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0633 CVE-2023-33461 Upstream summary: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:2871-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-13089 CVE-2017-13090 CVE-2019-5953 CVE-2024-10524 CVE-2021-31879 CVE-2024-38428 CVE-2010-2252 CVE-2014-4877 +5 more Upstream summary: The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. […]
