SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 15 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-8685 CVE-2016-8686 CVE-2013-7437 CVE-2017-12067 Upstream summary: The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-6590 Upstream summary: An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2014-4362 Upstream summary: The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0338-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-7545 CVE-2018-1063 Upstream summary: SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call. Table of […]

🟠 High   ⏱ 15–60 min  Last verified: 3 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:2188-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-3092 CVE-2016-1000031 Upstream summary: The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x […]

🟠 High   ⏱ 15–60 min  Last verified: 3 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1212-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 CVE-2016-9401 CVE-2014-2524 Upstream summary: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment […]

🟠 High   ⏱ 15–60 min  Last verified: 29 September 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1310-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-20991 Upstream summary: An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 September 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0746-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1841 Upstream summary: Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 September 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-2131 Upstream summary: Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of […]