Suse Linux (Novell) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 22 known versions, newest CVE from 2025-01-15. Vendor: Novell.
CVEs of Suse Linux
- CVE-2024-12084 - CVSS 9.8 (critical), 2025-01-15: A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in…
- CVE-2024-12088 - CVSS 7.5 (high), 2025-01-14: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server…
- CVE-2015-2567 - CVSS 3.5 (low), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to…
- CVE-2015-2566 - CVSS 2.8 (low), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via vectors related to DML.
- CVE-2013-4854 - CVSS 7.8 (high), 2013-07-29: The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1…
- CVE-2011-0988 - CVSS 4.4 (medium), 2011-04-18: pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates…
- CVE-2010-3912 - CVSS 10 (critical), 2011-01-13: The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown…
- CVE-2010-3110 - CVSS 7.2 (high), 2010-10-12: Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow local users to gain…
- CVE-2010-1507 - CVSS 5 (medium), 2010-09-03: WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which…
- CVE-2009-1297 - CVSS 4.4 (medium), 2009-10-23: iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local…
- CVE-2007-4432 - CVSS 4.6 (medium), 2007-08-20: Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux…
- CVE-2007-4394 - CVSS 2.1 (low), 2007-08-17: Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before…
- CVE-2007-1285 - CVSS 7.5 (high), 2007-03-06: The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via…
- CVE-2006-0803 - CVSS 5 (medium), 2006-02-23: The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature…
- CVE-2005-4790 - CVSS 6.9 (medium), 2005-12-31: Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to…
- CVE-2005-4791 - CVSS 2.1 (low), 2005-12-31: Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to…
- CVE-2005-3321 - CVSS 4.6 (medium), 2005-10-27: chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory,…
