SLES

🟠 High   ⏱ 15–60 min  Last verified: 24 June 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2018:4074-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15869 Upstream summary: An Amazon Web Services (AWS) developer who does not specify the –owners flag when describing images via AWS CLI, and therefore not […]

🟠 High   ⏱ 15–60 min  Last verified: 24 June 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2850-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16741 CVE-2008-4936 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 CVE-2018-16745 CVE-2019-1010190 Upstream summary: An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2626 Upstream summary: It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw […]

🔴 Critical   ⏱ 15–90 min  Last verified: 22 June 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:177-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18218 CVE-2012-1571 CVE-2014-3710 CVE-2014-8116 CVE-2014-8117 CVE-2019-8905 CVE-2019-8906 CVE-2019-8907  +4 more Upstream summary: cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0417-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-1419 Upstream summary: Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2009-5030 CVE-2012-3358 CVE-2012-3535 CVE-2013-1447 CVE-2013-4289 CVE-2013-4290 CVE-2013-6045 CVE-2013-6052  +4 more Upstream summary: The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-1345 Upstream summary: The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 June 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2808-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-17362 Upstream summary: In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to […]

🟠 High   ⏱ 15–60 min  Last verified: 17 June 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1558-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-9462 CVE-2019-3902 CVE-2014-9462 CVE-2016-3068 CVE-2016-3069 CVE-2016-3105 CVE-2016-3630 CVE-2017-1000116  +6 more Upstream summary: In Mercurial before 4.1.3, "hg serve –stdio" allows remote authenticated users to launch […]

🟠 High   ⏱ 15–60 min  Last verified: 16 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:723-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-17833 CVE-2010-3609 CVE-2016-4912 CVE-2016-7567 Upstream summary: OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself […]