SLES

🟠 High   ⏱ 15–60 min  Last verified: 14 August 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2741-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-10696 CVE-2022-2990 CVE-2022-27651 Upstream summary: A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 August 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:15097-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-0329 Upstream summary: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in […]

🔴 Critical   ⏱ 15–90 min  Last verified: 5 August 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2824-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22940 CVE-2022-43548 CVE-2022-32212 CVE-2022-2097 CVE-2020-8172 CVE-2020-8277 CVE-2021-37701 CVE-2021-37712  +12 more Upstream summary: Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free […]

🟠 High   ⏱ 15–60 min  Last verified: 2 August 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0186-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-35738 CVE-2022-2476 CVE-2018-19840 CVE-2016-10169 CVE-2016-10170 CVE-2016-10171 CVE-2016-10172 Upstream summary: WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in […]

🟠 High   ⏱ 15–60 min  Last verified: 1 August 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1626-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4419 CVE-2022-2211 CVE-2013-2124 Upstream summary: The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the –remote or –listen option, does not properly check […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0319-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4806 CVE-2022-48064 CVE-2019-1010180 CVE-2017-16829 CVE-2018-7208 Upstream summary: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. Table of contents Symptom & Impact […]

🔴 Critical   ⏱ 15–90 min  Last verified: 23 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29599 CVE-2021-26291 CVE-2020-13956 Upstream summary: In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell […]

🟠 High   ⏱ 15–60 min  Last verified: 21 July 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3179-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-44840 CVE-2022-45703 CVE-2022-47673 CVE-2022-47695 CVE-2022-47696 CVE-2020-19726 CVE-2021-20294 CVE-2022-35206  +12 more Upstream summary: Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in […]

🟠 High   ⏱ 15–60 min  Last verified: 18 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0478-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-0135 CVE-2019-18389 CVE-2019-18391 CVE-2022-0175 CVE-2016-10214 CVE-2017-5937 CVE-2017-5957 CVE-2019-18388  +4 more Upstream summary: An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). […]

🟠 High   ⏱ 15–60 min  Last verified: 17 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3103-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31799 CVE-2016-9964 CVE-2020-28473 Upstream summary: Bottle before 0.12.20 mishandles errors during early request binding. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]