SLES

🟠 High   ⏱ 15–60 min  Last verified: 17 September 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1465-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-46146 Upstream summary: Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a […]

🔴 Critical   ⏱ 15–90 min  Last verified: 17 September 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14645-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-30595 CVE-2020-35653 CVE-2020-35655 CVE-2021-25291 CVE-2014-3589 CVE-2014-3598 CVE-2016-0740 CVE-2016-0775  +3 more Upstream summary: libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 September 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3372-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2255 Upstream summary: A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 12 September 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3341-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2132 CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14377 CVE-2020-14378 CVE-2019-14818 CVE-2020-10722  +7 more Upstream summary: A permissive list of allowed inputs flaw was found in DPDK. This issue […]

🟠 High   ⏱ 15–60 min  Last verified: 8 September 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0489-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8597 CVE-2022-4603 CVE-2014-3158 CVE-2015-3310 Upstream summary: eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. […]

🟠 High   ⏱ 15–60 min  Last verified: 4 September 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2022:632-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24903 CVE-2014-3634 CVE-2019-17041 CVE-2019-17042 CVE-2011-3200 CVE-2013-4758 CVE-2013-6370 CVE-2013-6371  +2 more Upstream summary: Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 August 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2022:1047-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29869 CVE-2022-27239 CVE-2020-14342 CVE-2021-20208 CVE-2012-1586 Upstream summary: cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) […]

🟠 High   ⏱ 15–60 min  Last verified: 22 August 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0940-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7747 CVE-2018-17095 CVE-2019-13147 CVE-2022-24599 CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830  +10 more Upstream summary: Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File […]

🔴 Critical   ⏱ 15–90 min  Last verified: 19 August 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-42889 CVE-2021-37533 Upstream summary: Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", […]