SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 26 October 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2012:1673-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-2669 CVE-2012-5532 Upstream summary: The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 October 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1286-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15173 Upstream summary: Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-3602 Upstream summary: Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote […]

🟠 High   ⏱ 15–60 min  Last verified: 24 October 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2010:010 (see also SUSE bugzilla) Related CVEs: CVE-2009-4273 CVE-2010-0412 CVE-2009-2911 CVE-2010-0411 Upstream summary: stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 October 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2006:019 (see also SUSE bugzilla) Related CVEs: CVE-2006-3376 CVE-2016-9011 CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696 Upstream summary: Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 October 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2023:3956-1 (see also SUSE bugzilla) Related CVEs: CVE-2006-0903 CVE-2006-4227 CVE-2007-5969 CVE-2007-6304 CVE-2008-2079 CVE-2006-4226 CVE-2007-6303 Upstream summary: MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 October 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1988 Upstream summary: Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 October 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:1890-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-17042 Upstream summary: lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to […]

🔴 Critical   ⏱ 15–90 min  Last verified: 13 October 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2898-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-12472 CVE-2018-12470 CVE-2018-12471 CVE-2014-3566 Upstream summary: A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. […]

🔴 Critical   ⏱ 15–90 min  Last verified: 9 October 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-16840 CVE-2017-11665 CVE-2015-8216 CVE-2015-8217 CVE-2015-8218 CVE-2015-8219 CVE-2015-8363 CVE-2015-8364  +12 more Upstream summary: The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers […]