Suse Linux Enterprise Desktop (Novell) - vulnerabilities (CVEs)

83 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2020-01-31. Vendor: Novell.

CVEs of Suse Linux Enterprise Desktop

CVE-2015-6815 - CVSS 3.5 (low), 2020-01-31: The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which…
CVE-2016-5759 - CVSS 7.8 (high), 2017-09-08: The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
CVE-2017-1000366 - CVSS 7.8 (high), 2017-06-19: glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting…
CVE-2016-9961 - CVSS 9.8 (critical), 2017-06-06: game-music-emu before 0.6.1 mishandles unspecified integer values.
CVE-2016-9960 - CVSS 5.5 (medium), 2017-06-06: game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
CVE-2016-7796 - CVSS 5.5 (medium), 2016-10-13: The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a…
CVE-2015-8924 - CVSS 5.5 (medium), 2016-09-20: The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of…
CVE-2015-8923 - CVSS 6.5 (medium), 2016-09-20: The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of…
CVE-2015-8922 - CVSS 5.5 (medium), 2016-09-20: The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL…
CVE-2015-8921 - CVSS 7.5 (high), 2016-09-20: The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a…
CVE-2015-8920 - CVSS 5.5 (medium), 2016-09-20: The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service…
CVE-2015-8919 - CVSS 7.5 (high), 2016-09-20: The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of…
CVE-2015-8918 - CVSS 7.5 (high), 2016-09-20: The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted…
CVE-2016-4997 - CVSS 7.8 (high), 2016-07-03: The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users…
CVE-2016-1583 - CVSS 7.8 (high), 2016-06-27: The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of…
CVE-2016-2834 - CVSS 8.8 (high), 2016-06-13: Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory…
CVE-2016-2818 - CVSS 8.8 (high), 2016-06-13: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a…
CVE-2016-2815 - CVSS 8.8 (high), 2016-06-13: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory…
CVE-2016-4805 - CVSS 7.8 (high), 2016-05-23: Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory…
CVE-2016-4569 - CVSS 5.5 (medium), 2016-05-23: The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local…
CVE-2016-4486 - CVSS 3.3 (low), 2016-05-23: The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local…
CVE-2016-4482 - CVSS 6.2 (medium), 2016-05-23: The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local…
CVE-2016-3951 - CVSS 4.6 (medium), 2016-05-02: Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service…
CVE-2016-3689 - CVSS 4.6 (medium), 2016-05-02: The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial…
CVE-2016-3140 - CVSS 4.6 (medium), 2016-05-02: The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial…
CVE-2016-3138 - CVSS 4.6 (medium), 2016-05-02: The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service…
CVE-2016-3137 - CVSS 4.6 (medium), 2016-05-02: drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference…
CVE-2016-3136 - CVSS 4.6 (medium), 2016-05-02: The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial…
CVE-2016-2188 - CVSS 4.6 (medium), 2016-05-02: The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of…
CVE-2016-2186 - CVSS 4.6 (medium), 2016-05-02: The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of…
CVE-2016-2185 - CVSS 4.6 (medium), 2016-05-02: The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of…
CVE-2016-3672 - CVSS 7.8 (high), 2016-04-27: The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it…
CVE-2016-3156 - CVSS 5.5 (medium), 2016-04-27: The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service…
CVE-2016-3139 - CVSS 4.6 (medium), 2016-04-27: The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of…
CVE-2016-3134 - CVSS 8.4 (high), 2016-04-27: The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a…
CVE-2016-2847 - CVSS 6.2 (medium), 2016-04-27: fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory…
CVE-2016-2184 - CVSS 4.6 (medium), 2016-04-27: The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate…
CVE-2015-8845 - CVSS 5.5 (medium), 2016-04-27: The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode…
CVE-2015-8816 - CVSS 6.8 (medium), 2016-04-27: The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows…
CVE-2015-2743 - CVSS 7.5 (high), 2015-07-06: PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might…
CVE-2015-2740 - CVSS 10 (critical), 2015-07-06: Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and…
CVE-2015-2739 - CVSS 10 (critical), 2015-07-06: The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1…
CVE-2015-2736 - CVSS 9.3 (critical), 2015-07-06: The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1…
CVE-2015-2735 - CVSS 9.3 (critical), 2015-07-06: nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory…
CVE-2015-2733 - CVSS 10 (critical), 2015-07-06: Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1…
CVE-2015-2730 - CVSS 4.3 (medium), 2015-07-06: Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other…
CVE-2015-2728 - CVSS 7.5 (high), 2015-07-06: The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1…
CVE-2015-2726 - CVSS 10 (critical), 2015-07-06: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory…
CVE-2015-2725 - CVSS 10 (critical), 2015-07-06: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow…
CVE-2015-2724 - CVSS 10 (critical), 2015-07-06: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird…
CVE-2015-2722 - CVSS 10 (critical), 2015-07-06: Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1…
CVE-2015-2721 - CVSS 4.3 (medium), 2015-07-06: Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird…
CVE-2015-2716 - CVSS 7.5 (high), 2015-05-14: Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute…
CVE-2015-2713 - CVSS 6.8 (medium), 2015-05-14: Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote…
CVE-2015-2710 - CVSS 6.8 (medium), 2015-05-14: Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote…
CVE-2015-2709 - CVSS 7.5 (high), 2015-05-14: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory…
CVE-2015-2708 - CVSS 7.5 (high), 2015-05-14: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow…
CVE-2015-0459 - CVSS 10 (critical), 2015-04-16: Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and…
CVE-2015-0458 - CVSS 7.6 (high), 2015-04-16: Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
CVE-2015-0439 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to…
CVE-2015-0438 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to…
CVE-2015-0423 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to…
CVE-2015-0405 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA.
CVE-2015-3044 - CVSS 5 (medium), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass…
CVE-2015-3043 - CVSS 9.8 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0240 - CVSS 10 (critical), 2015-02-24: The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5…
CVE-2015-0437 - CVSS 9.3 (critical), 2015-01-21: Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…
CVE-2015-0421 - CVSS 6.9 (medium), 2015-01-21: Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the…
CVE-2015-0412 - CVSS 7.2 (high), 2015-01-21: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors…
CVE-2015-0410 - CVSS 5 (medium), 2015-01-21: Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6;…
CVE-2015-0408 - CVSS 10 (critical), 2015-01-21: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2015-0406 - CVSS 5.8 (medium), 2015-01-21: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors…
CVE-2015-0403 - CVSS 6.9 (medium), 2015-01-21: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2015-0400 - CVSS 5 (medium), 2015-01-21: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
CVE-2015-0383 - CVSS 5.4 (medium), 2015-01-21: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to…
CVE-2014-6601 - CVSS 10 (critical), 2015-01-21: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
CVE-2014-8559 - CVSS 5.5 (medium), 2014-11-10: The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to…
CVE-2014-3690 - CVSS 5.5 (medium), 2014-11-10: arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register…
CVE-2014-3687 - CVSS 7.5 (high), 2014-11-10: The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to…
CVE-2014-3566 - CVSS 3.4 (low), 2014-10-15: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle…
CVE-2013-3567 - CVSS 7.5 (high), 2013-08-19: Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to…
CVE-2013-1379 - CVSS 10 (critical), 2013-04-10: Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before…
CVE-2008-2931 - CVSS 7.8 (high), 2008-07-09: The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows…