SLES

🟠 High   ⏱ 15–60 min  Last verified: 10 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3065-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 CVE-2017-6318 Upstream summary: A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to […]

🟠 High   ⏱ 15–60 min  Last verified: 10 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:2969-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25637 CVE-2021-4147 CVE-2013-4296 CVE-2017-1000256 CVE-2019-10132 CVE-2019-10161 CVE-2019-10166 CVE-2019-10167  +12 more Upstream summary: A double free memory issue was found to occur in the libvirt API, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:605-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8130 Upstream summary: There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0913-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-4048 Upstream summary: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4424-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-40153 CVE-2021-41072 CVE-2015-4645 CVE-2015-4646 CVE-2012-4025 CVE-2012-4024 Upstream summary: squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used […]

🟠 High   ⏱ 15–60 min  Last verified: 6 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3814-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27291 Upstream summary: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0032-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36314 CVE-2019-16680 CVE-2020-11736 Upstream summary: fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because […]

🟠 High   ⏱ 15–60 min  Last verified: 3 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2014-0021 CVE-2020-14367 CVE-2012-4502 CVE-2012-4503 CVE-2016-1567 Upstream summary: Chrony before 1.29.1 has traffic amplification in cmdmon protocol Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1116-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29136 CVE-2021-41190 Upstream summary: Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal […]