SLES

🟠 High   ⏱ 15–60 min  Last verified: 15 December 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-10370 Upstream summary: Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth […]

🟠 High   ⏱ 15–60 min  Last verified: 13 December 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3268-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25653 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2017-15108 Upstream summary: A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw […]

🟠 High   ⏱ 15–60 min  Last verified: 6 December 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:14510-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-20919 CVE-2020-14392 CVE-2020-14393 CVE-2014-10401 CVE-2014-10402 Upstream summary: An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for […]

🟠 High   ⏱ 15–60 min  Last verified: 1 December 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:599-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-29361 CVE-2020-29363 CVE-2020-29362 Upstream summary: An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in […]

🟠 High   ⏱ 15–60 min  Last verified: 28 November 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-7919 CVE-2020-15586 CVE-2020-14039 CVE-2020-16845 Upstream summary: Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients […]

🟠 High   ⏱ 15–60 min  Last verified: 26 November 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0800-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13936 Upstream summary: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 November 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:601-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13429 Upstream summary: legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) […]

🟠 High   ⏱ 15–60 min  Last verified: 17 November 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3555-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-22218 CVE-2015-1782 CVE-2016-0787 CVE-2019-17498 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858  +5 more Upstream summary: An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to […]

🔴 Critical   ⏱ 15–90 min  Last verified: 12 November 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1568-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8174 CVE-2019-15604 CVE-2019-15605 CVE-2019-15606 CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 CVE-2020-7598  +2 more Upstream summary: napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and […]

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:773-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-10531 CVE-2020-21913 CVE-2014-8146 CVE-2014-8147 CVE-2014-9654 CVE-2016-6293 CVE-2017-14952 CVE-2017-15422  +3 more Upstream summary: An issue was discovered in International Components for Unicode (ICU) for C/C++ through […]