SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 16 March 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:3313-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-9853 Upstream summary: LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings, typically execution of macros are […]

🔴 Critical   ⏱ 15–90 min  Last verified: 4 March 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:697-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-5021 Upstream summary: Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 March 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3858-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-23903 Upstream summary: A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service […]

🟠 High   ⏱ 15–60 min  Last verified: 29 February 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:14141-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-1010006 CVE-2010-2640 CVE-2010-2641 CVE-2010-2642 CVE-2010-2643 CVE-2017-1000083 CVE-2019-11459 Upstream summary: Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1791-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12779 Upstream summary: libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and […]

🟠 High   ⏱ 15–60 min  Last verified: 13 February 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:197-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36242 CVE-2020-25659 Upstream summary: In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in […]

🟠 High   ⏱ 15–60 min  Last verified: 9 February 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2958-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19921 Upstream summary: runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be […]

🟠 High   ⏱ 15–60 min  Last verified: 9 February 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:254-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13757 CVE-2020-25658 Upstream summary: Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 February 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:2053-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-16779 Upstream summary: In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by […]