SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 17 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1368-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-5209 CVE-2017-5834 CVE-2017-6435 CVE-2017-6437 CVE-2017-6438 CVE-2017-6439 CVE-2017-6440 CVE-2017-7982  +4 more Upstream summary: The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to […]

🟠 High   ⏱ 15–60 min  Last verified: 16 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1207-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14624 CVE-2014-8105 CVE-2014-8112 CVE-2015-1854 CVE-2015-3230 CVE-2017-15134 CVE-2017-15135 CVE-2018-10850  +1 more Upstream summary: A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2006:005 (see also SUSE bugzilla) Related CVEs: CVE-2006-0855 CVE-2007-1669 Upstream summary: Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:009 (see also SUSE bugzilla) Related CVEs: CVE-2011-0421 CVE-2012-1162 CVE-2012-1163 CVE-2017-12858 CVE-2017-14107 Upstream summary: The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a […]

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1417-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13508 Upstream summary: FreeTDS through 1.1.11 has a Buffer Overflow. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-7685 CVE-2017-9271 CVE-2019-18900 CVE-2017-7435 CVE-2017-7436 CVE-2017-9269 CVE-2018-20532 CVE-2018-20533  +1 more Upstream summary: The decoupled download and installation steps in libzypp before 17.5.0 could lead to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0886-1 (see also SUSE bugzilla) Related CVEs: CVE-2010-2800 CVE-2010-2801 CVE-2014-9556 CVE-2018-18584 CVE-2018-18585 CVE-2018-18586 CVE-2019-1010305 Upstream summary: The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service […]

🟠 High   ⏱ 15–60 min  Last verified: 8 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2997-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12761 Upstream summary: A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1984 CVE-2013-1995 CVE-2013-1998 Upstream summary: Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a […]

🟠 High   ⏱ 15–60 min  Last verified: 7 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14763-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-15522 CVE-2019-15523 Upstream summary: An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command […]