SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 25 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1338-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13636 CVE-2010-4651 CVE-2015-1196 CVE-2016-10713 CVE-2018-1000156 CVE-2021-45261 CVE-2019-20633 CVE-2018-6952  +1 more Upstream summary: In GNU patch through 2.7.6, the following of symlinks is mishandled in certain […]

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3397-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 CVE-2017-18640 CVE-2022-25857 Upstream summary: Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If […]

🔴 Critical   ⏱ 15–90 min  Last verified: 22 April 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1091-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-11365 CVE-2021-41054 CVE-2019-11366 CVE-2021-46671 Upstream summary: An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a […]

🟠 High   ⏱ 15–60 min  Last verified: 20 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3875-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-23926 Upstream summary: The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious […]

🟠 High   ⏱ 15–60 min  Last verified: 19 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33813 Upstream summary: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. […]

🟠 High   ⏱ 15–60 min  Last verified: 19 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:69-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3139 Upstream summary: In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to […]

🔴 Critical   ⏱ 15–90 min  Last verified: 16 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-1283 CVE-2022-1586 CVE-2019-20838 CVE-2017-6004 CVE-2020-14155 CVE-2014-8964 CVE-2015-3217 CVE-2017-7186  +4 more Upstream summary: The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and […]

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1276-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-26495 CVE-2022-26496 Upstream summary: In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-0907 Upstream summary: Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3473-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1708 CVE-2021-3602 CVE-2021-20291 CVE-2021-4024 CVE-2020-15157 CVE-2020-14370 CVE-2020-1726 CVE-2021-20199 Upstream summary: A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the […]