🟠 High ⏱ 15–60 min Last verified: 24 September 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:1567-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-24607 CVE-2020-0569 CVE-2020-24741 CVE-2023-33285 CVE-2018-19872 CVE-2018-19870 Upstream summary: Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver […]
🟡 Medium ⏱ 10–30 min Last verified: 16 September 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4948-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-40889 CVE-2023-40890 Upstream summary: A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure […]
🟡 Medium ⏱ 10–30 min Last verified: 13 September 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:1451-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-39929 Upstream summary: Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation […]
🟠 High ⏱ 15–60 min Last verified: 7 September 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:1787-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-31215 CVE-2023-41914 CVE-2023-49936 CVE-2023-49937 CVE-2023-49933 CVE-2023-49938 Upstream summary: SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because […]
🟡 Medium ⏱ 10–30 min Last verified: 1 September 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3198-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22656 CVE-2023-45221 CVE-2023-47169 CVE-2023-47282 CVE-2023-48368 Upstream summary: Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated […]
🟡 Medium ⏱ 10–30 min Last verified: 31 August 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3428-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-49582 CVE-2011-0419 CVE-2017-12613 CVE-2011-1928 Upstream summary: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to […]
🔴 Critical ⏱ 15–90 min Last verified: 30 August 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:2561-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33733 CVE-2019-19450 CVE-2019-17626 CVE-2020-28463 Upstream summary: Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 August 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2023:3413-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-0950 CVE-2023-2255 Upstream summary: Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a […]
🟠 High ⏱ 15–60 min Last verified: 19 August 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:263-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-35512 CVE-2012-3524 CVE-2023-34969 CVE-2022-42011 CVE-2022-42012 CVE-2019-12749 CVE-2020-12049 CVE-2010-1172 +12 more Upstream summary: A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable […]
🟡 Medium ⏱ 10–30 min Last verified: 15 August 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:3021-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4039 CVE-2019-14250 CVE-2019-15847 CVE-2020-13844 Upstream summary: **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing […]
