🟡 Medium ⏱ 10–30 min Last verified: 1 June 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:01884-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-2467 Upstream summary: A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style […]
🟡 Medium ⏱ 10–30 min Last verified: 1 June 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03199-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-57804 Upstream summary: h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 28 May 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1017-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-0786 CVE-2014-8119 CVE-2025-2588 CVE-2017-7555 Upstream summary: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive […]
🟡 Medium ⏱ 10–30 min Last verified: 27 May 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:10631 (see also SUSE bugzilla) Related CVEs: CVE-2025-5024 Upstream summary: A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash […]
🟡 Medium ⏱ 10–30 min Last verified: 24 May 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2925-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-39134 CVE-2024-39133 CVE-2020-18442 CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5977 CVE-2017-5978 +11 more Upstream summary: A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1418-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-58251 Upstream summary: In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, […]
🟠 High ⏱ 15–60 min Last verified: 21 May 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:1019-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-24049 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]
🔴 Critical ⏱ 15–90 min Last verified: 17 May 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-202507:15303-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38824 CVE-2020-11651 CVE-2020-11652 CVE-2020-16846 CVE-2020-25592 CVE-2020-28972 CVE-2020-35662 CVE-2021-25281 +12 more Upstream summary: Directory traversal vulnerability in recv_file method allows arbitrary files to be written to […]
🟠 High ⏱ 15–60 min Last verified: 15 May 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1024-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-0547 CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2024-5594 CVE-2024-28882 CVE-2020-15078 CVE-2014-8104 +5 more Upstream summary: OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication […]
🟠 High ⏱ 15–60 min Last verified: 15 May 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2024:6963 (see also SUSE bugzilla) Related CVEs: CVE-2024-6655 Upstream summary: A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a […]
