🟠 High ⏱ 15–60 min Last verified: 3 June 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:0210 (see also SUSE bugzilla) Related CVEs: CVE-2024-11614 CVE-2022-2132 CVE-2022-28199 CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14377 CVE-2020-14378 +10 more Upstream summary: An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2023:602-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-26112 Upstream summary: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** […]
🟠 High ⏱ 15–60 min Last verified: 28 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4288-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-46136 CVE-2024-49767 Upstream summary: Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x […]
🟠 High ⏱ 15–60 min Last verified: 27 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3813-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-23913 CVE-2022-27777 Upstream summary: There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0851-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-51441 CVE-2012-5784 CVE-2014-3596 CVE-2018-8032 Upstream summary: ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin […]
🟡 Medium ⏱ 10–30 min Last verified: 22 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2023:577-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33460 CVE-2022-24795 Upstream summary: There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash. […]
🟠 High ⏱ 15–60 min Last verified: 22 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2151-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-37535 Upstream summary: GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a […]
🟠 High ⏱ 15–60 min Last verified: 22 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02809-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-32650 CVE-2022-31394 Upstream summary: Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:0308 (see also SUSE bugzilla) Related CVEs: CVE-2024-56201 Upstream summary: Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows […]
🟡 Medium ⏱ 10–30 min Last verified: 18 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-36660 Upstream summary: The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption. Table of contents Symptom & Impact Environment & Reproduction […]
