SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 9 May 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3375-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11879 CVE-2018-15587 Upstream summary: An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=…" parameter, a website (or other source […]

🟠 High   ⏱ 15–60 min  Last verified: 9 May 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2798-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 CVE-2019-18898 Upstream summary: An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 May 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:744-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-14853 CVE-2019-14859 Upstream summary: An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or […]

🟠 High   ⏱ 15–60 min  Last verified: 6 May 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1901-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-1010083 Upstream summary: The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: […]

🟠 High   ⏱ 15–60 min  Last verified: 5 May 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:741-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12825 CVE-2017-7960 CVE-2017-7961 CVE-2017-8834 CVE-2017-8871 Upstream summary: libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption. Table of contents Symptom […]

🟠 High   ⏱ 15–60 min  Last verified: 28 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3268-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25653 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2017-15108 Upstream summary: A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw […]

🔴 Critical   ⏱ 15–90 min  Last verified: 23 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1646-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-18032 CVE-2018-10196 Upstream summary: Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 April 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-20060 CVE-2019-9740 CVE-2016-9015 CVE-2019-11236 CVE-2019-11324 Upstream summary: urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3007-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-9656 CVE-2017-14731 CVE-2017-2816 CVE-2017-2920 Upstream summary: An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 April 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2008-5984 CVE-2019-19451 Upstream summary: Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary […]