SLES

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:276-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3200 CVE-2019-20387 Upstream summary: Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, […]

🟠 High   ⏱ 15–60 min  Last verified: 14 May 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0405-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-5208 Upstream summary: It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, […]

🟠 High   ⏱ 15–60 min  Last verified: 12 May 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3320-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3618 CVE-2015-1419 Upstream summary: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as […]

🟠 High   ⏱ 15–60 min  Last verified: 12 May 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:494-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-3702 CVE-2021-3752 CVE-2021-3744 CVE-2021-3764 CVE-2021-40490 CVE-2021-3669 Upstream summary: u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper […]

🔴 Critical   ⏱ 15–90 min  Last verified: 11 May 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-41945 Upstream summary: Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 May 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:3392-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-14608 CVE-2021-3624 CVE-2018-19566 CVE-2018-19568 CVE-2018-5805 CVE-2018-5806 CVE-2017-13735 CVE-2018-19655  +3 more Upstream summary: In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 May 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:2086-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13867 Upstream summary: Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target (and for the backup directory and backup files). Table of contents Symptom & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 April 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4424-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-4645 CVE-2015-4646 CVE-2021-40153 CVE-2021-41072 CVE-2012-4025 CVE-2012-4024 Upstream summary: Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 29 April 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1678-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-28491 CVE-2020-36518 CVE-2020-25649 Upstream summary: This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 April 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1256-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-47154 Upstream summary: The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, […]