SLES

🟠 High   ⏱ 15–60 min  Last verified: 17 July 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0145-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45417 Upstream summary: AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), […]

🔴 Critical   ⏱ 15–90 min  Last verified: 16 July 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0754-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-30498 CVE-2021-30499 CVE-2021-3410 CVE-2022-0856 CVE-2018-20547 CVE-2018-20544 CVE-2018-20545 CVE-2018-20546  +2 more Upstream summary: A flaw was found in libcaca. A heap buffer overflow in export.c in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1102-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4899 CVE-2021-24031 CVE-2021-24032 CVE-2019-11922 Upstream summary: A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:108-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-4122 CVE-2020-14382 Upstream summary: It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0691-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-37501 CVE-2018-13867 CVE-2018-17439 CVE-2021-45830 CVE-2021-45833 CVE-2021-46242 CVE-2018-11205 CVE-2018-14031  +4 more Upstream summary: Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 11 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2669-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-36978 CVE-2017-11624 CVE-2017-11625 CVE-2017-11627 CVE-2022-34503 CVE-2017-9208 CVE-2017-9209 CVE-2017-9210  +2 more Upstream summary: QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow […]

🟠 High   ⏱ 15–60 min  Last verified: 9 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1897-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41724 CVE-2022-41717 CVE-2022-41720 CVE-2022-2879 CVE-2022-2880 CVE-2022-41725 CVE-2022-41716 CVE-2022-27536 Upstream summary: Large handshake records may cause panics in crypto/tls. Both clients and servers may send large […]

🔴 Critical   ⏱ 15–90 min  Last verified: 9 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0088-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-35458 CVE-2021-25314 Upstream summary: An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id […]

🔴 Critical   ⏱ 15–90 min  Last verified: 7 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0754-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-30498 CVE-2021-30499 CVE-2022-0856 CVE-2021-3410 CVE-2018-20547 CVE-2018-20544 CVE-2018-20545 CVE-2018-20546  +2 more Upstream summary: A flaw was found in libcaca. A heap buffer overflow in export.c in […]

🟠 High   ⏱ 15–60 min  Last verified: 6 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:233-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18397 CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 Upstream summary: A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause […]