🟠 High ⏱ 15–60 min Last verified: 8 November 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:283-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-38185 CVE-2023-7207 CVE-2019-14866 CVE-2014-9112 CVE-2016-2037 Upstream summary: GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a […]
🟠 High ⏱ 15–60 min Last verified: 2 November 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4089-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-40660 CVE-2021-42781 CVE-2021-42782 CVE-2023-5992 CVE-2023-40661 CVE-2023-2977 CVE-2021-42779 CVE-2019-19481 +12 more Upstream summary: A flaw was found in OpenSC packages that allow a potential PIN bypass. […]
🟠 High ⏱ 15–60 min Last verified: 28 October 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:283-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-38185 CVE-2023-7207 CVE-2014-9112 CVE-2016-2037 CVE-2019-14866 CVE-2015-1197 Upstream summary: GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of […]
🟡 Medium ⏱ 10–30 min Last verified: 19 October 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:1451-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-39929 Upstream summary: Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation […]
🟠 High ⏱ 15–60 min Last verified: 19 October 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory ESSA-2025:0001 (see also SUSE bugzilla) Related CVEs: CVE-2023-40547 CVE-2022-28737 CVE-2020-10713 CVE-2023-40546 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551 +4 more Upstream summary: A remote code execution vulnerability was found in Shim. The Shim boot support […]
🟡 Medium ⏱ 10–30 min Last verified: 14 October 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0014-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4255 CVE-2022-38223 CVE-2010-2074 CVE-2012-4929 CVE-2016-9434 CVE-2016-9435 CVE-2016-9436 CVE-2016-9437 +12 more Upstream summary: An out-of-bounds write issue has been discovered in the backspace handling of the […]
🟠 High ⏱ 15–60 min Last verified: 13 October 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2409-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-44488 Upstream summary: VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 6 October 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1196-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-45920 CVE-2009-1962 CVE-2009-4227 Upstream summary: Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is […]
🟡 Medium ⏱ 10–30 min Last verified: 5 October 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:3924-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-46316 Upstream summary: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. Table of contents Symptom & […]
🔴 Critical ⏱ 15–90 min Last verified: 26 September 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2824-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22940 CVE-2022-25881 CVE-2023-23920 CVE-2022-43548 CVE-2022-32212 CVE-2021-22931 CVE-2021-3672 CVE-2020-1971 +12 more Upstream summary: Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free […]
