SLES

🔴 Critical   ⏱ 15–90 min  Last verified: 7 October 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2084-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14354 CVE-2018-14360 CVE-2018-14361 CVE-2020-14093 CVE-2020-14154 CVE-2020-14954 CVE-2018-14351 CVE-2018-14357  +12 more Upstream summary: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They […]

🟠 High   ⏱ 15–60 min  Last verified: 6 October 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:108-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12762 Upstream summary: json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 October 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3189-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25697 Upstream summary: A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 September 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3189-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25697 Upstream summary: A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an […]

🟠 High   ⏱ 15–60 min  Last verified: 11 September 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:518-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25219 CVE-2020-26154 CVE-2012-4504 Upstream summary: url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response […]

🟠 High   ⏱ 15–60 min  Last verified: 8 September 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1621-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11865 CVE-2020-11866 CVE-2020-13999 CVE-2020-11863 CVE-2020-11864 Upstream summary: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access. Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 September 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3527-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-35357 Upstream summary: A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 August 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3734-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-18651 CVE-2020-18652 CVE-2018-12648 CVE-2018-7728 CVE-2018-7729 CVE-2018-7730 CVE-2018-7731 Upstream summary: Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 August 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:496-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25658 CVE-2016-1494 Upstream summary: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption […]

🔴 Critical   ⏱ 15–90 min  Last verified: 9 August 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:1504-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-4542 CVE-2016-4543 CVE-2016-4544 CVE-2020-7060 CVE-2015-2787 CVE-2015-3329 CVE-2015-6831 CVE-2015-8879  +12 more Upstream summary: The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and […]