🟠 High ⏱ 15–60 min Last verified: 17 February 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3289-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-50186 Upstream summary: GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:1824-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-26768 CVE-2023-26767 CVE-2023-26769 CVE-2022-26981 CVE-2022-31783 CVE-2017-13738 CVE-2017-13739 CVE-2017-13740 +12 more Upstream summary: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8830 (see also SUSE bugzilla) Related CVEs: CVE-2024-2313 Upstream summary: If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use […]
🟠 High ⏱ 15–60 min Last verified: 9 February 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2030-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5171 CVE-2021-30474 CVE-2021-30475 CVE-2021-30473 CVE-2020-0470 CVE-2020-36129 CVE-2020-36130 CVE-2020-36131 +1 more Upstream summary: Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. […]
🟠 High ⏱ 15–60 min Last verified: 6 February 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:0442-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22792 CVE-2023-22795 CVE-2021-22904 CVE-2021-22885 CVE-2024-47887 CVE-2023-28362 CVE-2022-23633 Upstream summary: A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, […]
🟡 Medium ⏱ 10–30 min Last verified: 2 February 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3345-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-35255 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]
🟠 High ⏱ 15–60 min Last verified: 2 February 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2023:3413-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-0950 CVE-2023-2255 Upstream summary: Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a […]
🟠 High ⏱ 15–60 min Last verified: 31 January 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:740-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10903 CVE-2020-36242 CVE-2023-49083 CVE-2023-23931 CVE-2020-25659 Upstream summary: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:6966 (see also SUSE bugzilla) Related CVEs: CVE-2024-46711 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after multiple re-creations 'local_addr_used' and […]
🟠 High ⏱ 15–60 min Last verified: 23 January 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1767-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-4340 CVE-2021-32839 Upstream summary: Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. Table of contents Symptom & […]
