SLES

🟠 High   ⏱ 15–60 min  Last verified: 8 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3368-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-28362 CVE-2020-28366 CVE-2020-28367 CVE-2021-3115 CVE-2020-24553 CVE-2021-3114 Upstream summary: Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. Table of contents Symptom & Impact […]

🟠 High   ⏱ 15–60 min  Last verified: 5 June 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2024:1448-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25657 Upstream summary: A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3734-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-18651 CVE-2017-18234 CVE-2017-18233 CVE-2017-18236 CVE-2017-18238 CVE-2018-7728 CVE-2018-7730 Upstream summary: Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:197-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14343 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 May 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0776-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-25316 Upstream summary: A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to […]

🟠 High   ⏱ 15–60 min  Last verified: 30 May 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3355-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27023 CVE-2020-7942 CVE-2011-3848 CVE-2011-3872 CVE-2012-3864 CVE-2012-3865 CVE-2012-3866 CVE-2013-3567  +6 more Upstream summary: A flaw was discovered in Puppet Agent and Puppet Server that may result […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 May 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-8002 CVE-2020-8003 CVE-2019-18392 Upstream summary: A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 May 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1760-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3504 CVE-2021-3622 Upstream summary: A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds […]

🟠 High   ⏱ 15–60 min  Last verified: 20 May 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2025-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-46828 Upstream summary: In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are […]

🟠 High   ⏱ 15–60 min  Last verified: 19 May 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:127-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-20305 CVE-2021-3580 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-6489 Upstream summary: A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST […]