SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3520-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10932 Upstream summary: lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2142-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14348 Upstream summary: libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2485-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10583 CVE-2018-16858 Upstream summary: An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded […]

🟠 High   ⏱ 15–60 min  Last verified: 14 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1765-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16301 CVE-2015-0261 CVE-2015-2153 CVE-2015-2154 CVE-2015-2155 CVE-2016-7922 CVE-2016-7923 CVE-2016-7924  +12 more Upstream summary: The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0172-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-7488 Upstream summary: perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:001 (see also SUSE bugzilla) Related CVEs: CVE-2010-2891 Upstream summary: Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier […]

🟠 High   ⏱ 15–60 min  Last verified: 8 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3782-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-8373 CVE-2017-8372 CVE-2017-8374 Upstream summary: The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-5645 Upstream summary: In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 December 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:005 (see also SUSE bugzilla) Related CVEs: CVE-2011-0541 CVE-2015-3202 CVE-2018-10906 CVE-2009-3297 Upstream summary: fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount […]