SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 24 April 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0885-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14928 CVE-2020-16117 Upstream summary: evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" […]

🟠 High   ⏱ 15–60 min  Last verified: 18 April 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2020-0256 CVE-2021-0308 Upstream summary: In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of […]

🟠 High   ⏱ 15–60 min  Last verified: 16 April 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3933-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-0487 CVE-2020-22219 CVE-2021-0561 CVE-2020-0499 CVE-2017-6888 Upstream summary: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none […]

🔴 Critical   ⏱ 15–90 min  Last verified: 14 April 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1534-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13112 CVE-2020-0452 CVE-2019-9278 CVE-2020-13113 CVE-2020-0181 CVE-2020-0198 CVE-2020-0093 CVE-2020-12767  +11 more Upstream summary: An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 April 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2912-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3639 Upstream summary: A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 10 April 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:14510-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-7490 CVE-2019-20919 CVE-2020-14392 CVE-2020-14393 CVE-2014-10401 CVE-2014-10402 Upstream summary: An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods […]

🟠 High   ⏱ 15–60 min  Last verified: 9 April 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0157-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-28021 CVE-2021-42716 CVE-2021-42715 Upstream summary: Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file. Table of contents Symptom […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 April 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:236-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11078 CVE-2021-21240 Upstream summary: In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send […]

🟠 High   ⏱ 15–60 min  Last verified: 5 April 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0772-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-20230 CVE-2013-1762 CVE-2011-2940 CVE-2014-0016 CVE-2015-3644 Upstream summary: A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured […]

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-10699 CVE-2020-13867 Upstream summary: A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If […]