SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 30 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:0805-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-2278 CVE-2015-2282 Upstream summary: The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server […]

🟠 High   ⏱ 15–60 min  Last verified: 28 December 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1019-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-1396 CVE-2019-13636 CVE-2010-4651 CVE-2015-1196 CVE-2016-10713 CVE-2018-1000156 CVE-2019-20633 CVE-2018-6952  +2 more Upstream summary: A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0580-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6418 Upstream summary: PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1266-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15587 Upstream summary: GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:9517 (see also SUSE bugzilla) Related CVEs: CVE-2011-10007 Upstream summary: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 December 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1765-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-20573 CVE-2018-20574 CVE-2019-6285 CVE-2019-6292 CVE-2017-5950 Upstream summary: The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack […]

🟠 High   ⏱ 15–60 min  Last verified: 22 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3199-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-17956 Upstream summary: In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used […]

🟠 High   ⏱ 15–60 min  Last verified: 20 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2006:027 (see also SUSE bugzilla) Related CVEs: CVE-2006-2607 CVE-2010-0424 CVE-2019-9704 CVE-2019-9705 Upstream summary: do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3135-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2708 Upstream summary: Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 […]