SLES

🟠 High   ⏱ 15–60 min  Last verified: 12 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2926-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36193 Upstream summary: Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-10737 Upstream summary: A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 wherein, during […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2808-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-17362 Upstream summary: In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to […]

🟠 High   ⏱ 15–60 min  Last verified: 5 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1934-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8903 CVE-2020-8907 CVE-2020-8933 Upstream summary: A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 May 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1220-1 Related CVEs: CVE-2019-3781 Upstream summary: Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to […]

🟠 High   ⏱ 15–60 min  Last verified: 30 May 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14783-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-25051 CVE-2019-17544 Upstream summary: objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list). Table of contents Symptom […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 May 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2213-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-14809 Upstream summary: net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 May 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:741-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-9511 CVE-2019-9513 Upstream summary: Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 May 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1809-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-10153 Upstream summary: A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields […]

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:658-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19977 Upstream summary: libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. Table […]