SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 2 November 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3353-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-21232 Upstream summary: re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags. Table of contents Symptom & Impact Environment & Reproduction Root […]

🟠 High   ⏱ 15–60 min  Last verified: 2 November 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14783-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-25051 Upstream summary: objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list). Table of contents Symptom & […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-6131 Upstream summary: The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a […]

🟠 High   ⏱ 15–60 min  Last verified: 27 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2011:016 (see also SUSE bugzilla) Related CVEs: CVE-2011-0465 Upstream summary: xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3125-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-5884 CVE-2017-5885 Upstream summary: gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the […]

🟠 High   ⏱ 15–60 min  Last verified: 22 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2011:0898-1 (see also SUSE bugzilla) Related CVEs: CVE-2011-1831 CVE-2011-1832 CVE-2011-1834 CVE-2011-1835 CVE-2011-1837 CVE-2011-1833 CVE-2014-9687 CVE-2016-1572  +1 more Upstream summary: utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows […]

🟠 High   ⏱ 15–60 min  Last verified: 21 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-10683 CVE-2017-11126 Upstream summary: In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input will lead to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1340-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-20340 Upstream summary: Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1329-1 (see also SUSE bugzilla) Related CVEs: CVE-2009-4029 Upstream summary: The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution […]

🔴 Critical   ⏱ 15–90 min  Last verified: 17 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1874-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-4881 CVE-2016-9840 CVE-2016-9841 CVE-2017-10107 CVE-2017-3289 CVE-2018-12547 CVE-2018-3183 CVE-2019-17631  +12 more Upstream summary: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE […]