SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 2 March 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:2872-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-2087 Upstream summary: Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 February 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:2923-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-15638 Upstream summary: The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 February 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-2673 CVE-2016-9427 Upstream summary: Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 February 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-14062 CVE-2015-8948 CVE-2016-6261 CVE-2016-6262 CVE-2016-6263 Upstream summary: Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 February 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-16611 Upstream summary: In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 January 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0077-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-12172 Upstream summary: PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 January 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0673-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-18201 CVE-2017-18199 Upstream summary: An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0271-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-9622 CVE-2017-18266 Upstream summary: Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 January 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1989-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-5824 CVE-2016-5827 CVE-2016-9584 Upstream summary: libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 January 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1283-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-6272 CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 Upstream summary: Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta […]