SLES

🟢 Low   ⏱ 5–15 min  Last verified: 16 June 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0705-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-19871 Upstream summary: An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption. Table of contents Symptom & Impact Environment & […]

🟠 High   ⏱ 15–60 min  Last verified: 16 June 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0983-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-9838 CVE-2015-8869 Upstream summary: The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1020-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8169 Upstream summary: automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1577-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8962 CVE-2014-9028 Upstream summary: Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1095-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1987 Upstream summary: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-1946 Upstream summary: gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid […]

🟠 High   ⏱ 15–60 min  Last verified: 4 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0140-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-0486 CVE-2018-0489 CVE-2019-9628 Upstream summary: Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0629-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-20105 CVE-2018-17957 Upstream summary: A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 May 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:1138-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-1601 Upstream summary: yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an […]

🟠 High   ⏱ 15–60 min  Last verified: 29 May 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3230 Upstream summary: The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server […]