SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 10 April 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2345-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31252 CVE-2019-3690 CVE-2020-8013 CVE-2019-3688 Upstream summary: A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE […]

🟠 High   ⏱ 15–60 min  Last verified: 10 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24839 CVE-2022-28366 Upstream summary: org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when […]

🟠 High   ⏱ 15–60 min  Last verified: 8 April 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8118 CVE-2017-7500 CVE-2017-7501 CVE-2021-3421 CVE-2013-6435 CVE-2021-20266 CVE-2021-20271 Upstream summary: Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a […]

🔴 Critical   ⏱ 15–90 min  Last verified: 8 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-7753 CVE-2020-6817 CVE-2020-6802 CVE-2020-6816 CVE-2021-23980 Upstream summary: An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-13748 CVE-2017-13750 CVE-2017-13751 CVE-2022-40755 Upstream summary: There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead […]

🟠 High   ⏱ 15–60 min  Last verified: 6 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3707-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41973 CVE-2022-41974 Upstream summary: multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users […]

🟠 High   ⏱ 15–60 min  Last verified: 6 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:314-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33430 CVE-2021-41495 CVE-2021-41496 CVE-2017-12852 CVE-2019-6446 Upstream summary: A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of […]

🟠 High   ⏱ 15–60 min  Last verified: 4 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0489-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8597 CVE-2022-4603 CVE-2014-3158 CVE-2015-3310 Upstream summary: eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. […]

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14759-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-25321 Upstream summary: A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud […]

🟠 High   ⏱ 15–60 min  Last verified: 27 March 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4148-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-44638 Upstream summary: In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow […]