SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 25 February 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:723-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-7227 CVE-2017-7614 CVE-2017-8395 CVE-2017-8397 CVE-2017-9042 CVE-2014-8484 CVE-2014-8485 CVE-2014-8501  +12 more Upstream summary: GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0637-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-1000024 Upstream summary: Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in […]

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3207-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-0386 Upstream summary: An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 February 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:1076-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-9432 CVE-2017-9433 CVE-2018-1055 CVE-2018-6871 Upstream summary: Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer overflow related to the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 February 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1821-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-8947 CVE-2016-2052 CVE-2016-10327 CVE-2017-7870 CVE-2017-7882 CVE-2017-8358 Upstream summary: hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 January 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1151-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-6507 Upstream summary: An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd […]

🟠 High   ⏱ 15–60 min  Last verified: 15 January 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1122-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-19636 CVE-2018-19637 CVE-2018-19639 CVE-2018-19640 CVE-2018-19638 Upstream summary: Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 January 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1368-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-5209 CVE-2017-5834 CVE-2017-6440 CVE-2017-7982 CVE-2017-5545 CVE-2017-5835 CVE-2017-5836 Upstream summary: The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 December 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-2003 CVE-2015-9262 CVE-2017-16612 Upstream summary: Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer […]

🟠 High   ⏱ 15–60 min  Last verified: 17 December 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1335-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-8422 Upstream summary: KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a […]