SLES

🟠 High   ⏱ 15–60 min  Last verified: 20 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-19588 Upstream summary: The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2009:018 (see also SUSE bugzilla) Related CVEs: CVE-2009-2473 CVE-2009-2474 Upstream summary: neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:1329-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-17688 CVE-2017-17689 CVE-2018-12019 CVE-2014-5369 CVE-2019-12269 Upstream summary: The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-4405 Upstream summary: The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1137-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3618 CVE-2017-16844 Upstream summary: Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and […]

🔴 Critical   ⏱ 15–90 min  Last verified: 11 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0060-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15126 CVE-2018-15127 CVE-2018-20749 CVE-2018-20750 CVE-2018-6307 CVE-2017-18922 CVE-2018-20019 CVE-2018-20020  +12 more Upstream summary: LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1992 Upstream summary: Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow […]

🟠 High   ⏱ 15–60 min  Last verified: 8 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:1994-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-3760 Upstream summary: There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests […]

🟠 High   ⏱ 15–60 min  Last verified: 7 August 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13132 CVE-2016-9566 CVE-2019-3698 CVE-2014-7202 CVE-2014-7203 CVE-2014-9721 Upstream summary: In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting […]

🟠 High   ⏱ 15–60 min  Last verified: 5 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-12678 CVE-2012-2396 Upstream summary: In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a […]