SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 1 February 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2010:018 (see also SUSE bugzilla) Related CVEs: CVE-2010-0405 CVE-2019-12900 CVE-2016-3189 Upstream summary: Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3135-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2708 Upstream summary: Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 […]

🟠 High   ⏱ 15–60 min  Last verified: 28 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1903-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-17234 CVE-2018-17237 CVE-2020-10809 CVE-2018-17233 CVE-2018-17432 CVE-2018-17433 CVE-2018-17436 CVE-2020-10810  +12 more Upstream summary: Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through […]

🟠 High   ⏱ 15–60 min  Last verified: 27 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14763-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-15522 CVE-2019-15523 Upstream summary: An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command […]

🔴 Critical   ⏱ 15–90 min  Last verified: 27 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2136-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18906 CVE-2017-9270 Upstream summary: A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2784-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-27545 Upstream summary: libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted […]

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:744-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3689 Upstream summary: The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:800-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18902 CVE-2019-18903 CVE-2020-7216 CVE-2020-7217 Upstream summary: A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE […]

🔴 Critical   ⏱ 15–90 min  Last verified: 20 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1534-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13112 CVE-2020-0452 CVE-2019-9278 CVE-2020-13113 CVE-2020-0181 CVE-2020-0198 CVE-2012-2812 CVE-2012-2813  +11 more Upstream summary: An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4314 Upstream summary: The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name […]