SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 6 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0492-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-44566 CVE-2021-22880 Upstream summary: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3015-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45710 CVE-2018-25023 Upstream summary: An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances […]

🟠 High   ⏱ 15–60 min  Last verified: 25 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1926-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7183 CVE-2020-15673 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678 CVE-2020-15683 CVE-2020-15969 CVE-2021-23981  +4 more Upstream summary: Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla […]

🟠 High   ⏱ 15–60 min  Last verified: 24 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2125-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22191 CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421 CVE-2020-26422 CVE-2021-22173 CVE-2021-22174  +1 more Upstream summary: Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could […]

🔴 Critical   ⏱ 15–90 min  Last verified: 24 June 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:64-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11651 CVE-2020-11652 CVE-2020-16846 CVE-2020-25592 CVE-2020-28972 CVE-2020-35662 CVE-2021-25281 CVE-2021-25282  +12 more Upstream summary: An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3027-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-36033 Upstream summary: jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 June 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3174-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45154 CVE-2016-1602 Upstream summary: A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE […]

🟠 High   ⏱ 15–60 min  Last verified: 16 June 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3331-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40320 Upstream summary: cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🔴 Critical   ⏱ 15–90 min  Last verified: 15 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0174-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000805 CVE-2018-7750 CVE-2022-24302 Upstream summary: Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can […]

🔴 Critical   ⏱ 15–90 min  Last verified: 15 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0019-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-44640 CVE-2009-1886 CVE-2020-17049 CVE-2010-3069 CVE-2012-0870 CVE-2012-1182 CVE-2013-4408 CVE-2015-8467  +12 more Upstream summary: Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an […]