SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 22 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-0240 CVE-2013-1799 Upstream summary: Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts […]

🟠 High   ⏱ 15–60 min  Last verified: 19 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2012:0147-1 (see also SUSE bugzilla) Related CVEs: CVE-2011-4815 CVE-2009-4492 CVE-2010-0541 CVE-2011-1004 CVE-2011-1005 Upstream summary: Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0515-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-7300 Upstream summary: GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2010:019 (see also SUSE bugzilla) Related CVEs: CVE-2010-2522 CVE-2010-2523 Upstream summary: The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0467-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6401 Upstream summary: Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1099-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1982 Upstream summary: Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does […]

🔴 Critical   ⏱ 15–90 min  Last verified: 27 April 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2012:0598-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-1823 CVE-2012-2688 CVE-2010-2225 CVE-2010-2950 CVE-2012-0830 CVE-2013-6420 CVE-2006-7243 CVE-2010-3436  +12 more Upstream summary: sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 April 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2011:035 (see also SUSE bugzilla) Related CVEs: CVE-2011-2483 Upstream summary: crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle […]

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3230 Upstream summary: The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server […]