SLES

🟠 High   ⏱ 15–60 min  Last verified: 8 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:14141-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-1010006 CVE-2017-1000159 CVE-2010-2640 CVE-2010-2641 CVE-2010-2642 CVE-2010-2643 CVE-2017-1000083 CVE-2019-11459 Upstream summary: Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. […]

🟠 High   ⏱ 15–60 min  Last verified: 7 April 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3065-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 CVE-2017-6318 Upstream summary: A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1826-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12439 Upstream summary: bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:3863-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-0735 CVE-2019-1543 Upstream summary: The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use […]

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:173-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2201 CVE-2020-17541 CVE-2020-35538 CVE-2020-13790 CVE-2014-9092 CVE-2017-15232 CVE-2018-1152 CVE-2018-11813  +1 more Upstream summary: In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due […]

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2020:2072-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-11596 CVE-2009-1494 CVE-2011-4971 CVE-2013-7239 CVE-2016-8704 CVE-2016-8705 CVE-2016-8706 CVE-2017-9951  +6 more Upstream summary: In memcached before 1.5.14, a NULL pointer dereference was found in the "lru […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 March 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:800-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18902 CVE-2019-18903 CVE-2020-7216 CVE-2020-7217 Upstream summary: A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 March 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:386-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-10749 Upstream summary: A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:2966-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-16707 Upstream summary: Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2008-5984 CVE-2019-19451 Upstream summary: Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary […]