🟡 Medium ⏱ 10–30 min Last verified: 11 August 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3691-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-28736 CVE-2023-28938 Upstream summary: Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of […]
🟠 High ⏱ 15–60 min Last verified: 10 August 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2024:9413 (see also SUSE bugzilla) Related CVEs: CVE-2023-27349 CVE-2022-39176 CVE-2019-8921 CVE-2019-8922 CVE-2023-45866 CVE-2021-41229 CVE-2022-39177 CVE-2020-0556 +12 more Upstream summary: BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. […]
🟠 High ⏱ 15–60 min Last verified: 2 August 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:3033-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-17407 CVE-2020-8016 CVE-2020-8017 CVE-2023-46048 Upstream summary: An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in […]
🟢 Low ⏱ 5–15 min Last verified: 30 July 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2768-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4156 Upstream summary: A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could […]
🟠 High ⏱ 15–60 min Last verified: 26 July 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:0275-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22796 Upstream summary: A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can […]
🟡 Medium ⏱ 10–30 min Last verified: 26 July 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4496-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-1183 Upstream summary: A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command […]
🟡 Medium ⏱ 10–30 min Last verified: 24 July 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:1834-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22486 Upstream summary: cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a […]
🟠 High ⏱ 15–60 min Last verified: 19 July 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3898-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31256 CVE-2023-51765 Upstream summary: A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE […]
🟠 High ⏱ 15–60 min Last verified: 13 July 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:2669-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-36978 CVE-2017-11624 CVE-2017-11625 CVE-2017-11627 CVE-2022-34503 CVE-2017-9208 CVE-2017-9209 CVE-2017-9210 +3 more Upstream summary: QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow […]
🟠 High ⏱ 15–60 min Last verified: 12 July 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:0140-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-0486 CVE-2023-36661 CVE-2018-0489 CVE-2019-9628 Upstream summary: Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital […]
