SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 11 May 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:3068-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000223 CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Upstream summary: soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that can result in arbitrary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 April 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2142-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14348 CVE-2011-1006 CVE-2011-1022 Upstream summary: libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 April 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0123-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-10672 CVE-2015-3451 Upstream summary: Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1374-2 (see also SUSE bugzilla) Related CVEs: CVE-2018-11439 CVE-2012-2396 Upstream summary: The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 April 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0433-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2016-8568 CVE-2016-8569 CVE-2017-5338 CVE-2017-5339 CVE-2018-10887  +4 more Upstream summary: Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 March 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:2337-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7519 CVE-2017-1000384 CVE-2017-16355 CVE-2018-12029 Upstream summary: agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 March 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:2105-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2810 Upstream summary: An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting […]

🔴 Critical   ⏱ 15–90 min  Last verified: 10 March 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0822-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000140 Upstream summary: rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can […]

🟠 High   ⏱ 15–60 min  Last verified: 28 February 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1123-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14779 CVE-2018-14780 Upstream summary: A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the […]