SLES

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1158-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12059 CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-7262 CVE-2016-5009 CVE-2020-10753 CVE-2020-1760  +4 more Upstream summary: An issue was discovered in Ceph through 13.2.9. A POST request with an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:611-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8927 Upstream summary: A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" […]

🔴 Critical   ⏱ 15–90 min  Last verified: 20 January 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0001-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-17631 CVE-2020-27221 CVE-2012-0497 CVE-2012-1533 CVE-2012-1682 CVE-2012-1713 CVE-2012-1716 CVE-2012-1723  +12 more Upstream summary: From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing […]

🟠 High   ⏱ 15–60 min  Last verified: 19 January 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:1037-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1100 CVE-2019-20044 CVE-2021-45444 CVE-2018-0502 CVE-2018-13259 CVE-2014-10070 CVE-2017-18206 CVE-2014-10071  +6 more Upstream summary: zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the […]

🟠 High   ⏱ 15–60 min  Last verified: 9 January 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-7098 CVE-2012-6128 CVE-2019-16239 CVE-2020-12105 CVE-2020-12823 CVE-2018-20319 CVE-2012-3291 Upstream summary: OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 January 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:611-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8927 Upstream summary: A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 December 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1513-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-29362 Upstream summary: An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by […]

🟠 High   ⏱ 15–60 min  Last verified: 22 December 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1621-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11865 CVE-2020-11866 CVE-2020-13999 CVE-2020-11863 CVE-2020-11864 Upstream summary: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access. Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 December 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3858-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-23903 Upstream summary: A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 December 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:697-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-6706 CVE-2020-24370 CVE-2020-24371 Upstream summary: Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker […]