Suse Linux Enterprise Software Development Kit (Novell) - vulnerabilities (CVEs)

64 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2020-01-31. Vendor: Novell.

CVEs of Suse Linux Enterprise Software Development Kit

CVE-2015-6815 - CVSS 3.5 (low), 2020-01-31: The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which…
CVE-2016-9961 - CVSS 9.8 (critical), 2017-06-06: game-music-emu before 0.6.1 mishandles unspecified integer values.
CVE-2016-9960 - CVSS 5.5 (medium), 2017-06-06: game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
CVE-2016-7796 - CVSS 5.5 (medium), 2016-10-13: The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a…
CVE-2015-8924 - CVSS 5.5 (medium), 2016-09-20: The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of…
CVE-2015-8923 - CVSS 6.5 (medium), 2016-09-20: The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of…
CVE-2015-8922 - CVSS 5.5 (medium), 2016-09-20: The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL…
CVE-2015-8921 - CVSS 7.5 (high), 2016-09-20: The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a…
CVE-2015-8920 - CVSS 5.5 (medium), 2016-09-20: The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service…
CVE-2015-8919 - CVSS 7.5 (high), 2016-09-20: The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of…
CVE-2015-8918 - CVSS 7.5 (high), 2016-09-20: The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted…
CVE-2016-4997 - CVSS 7.8 (high), 2016-07-03: The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users…
CVE-2016-1583 - CVSS 7.8 (high), 2016-06-27: The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of…
CVE-2016-2834 - CVSS 8.8 (high), 2016-06-13: Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory…
CVE-2016-2818 - CVSS 8.8 (high), 2016-06-13: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a…
CVE-2016-2815 - CVSS 8.8 (high), 2016-06-13: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory…
CVE-2016-0376 - CVSS 8.1 (high), 2016-06-03: The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before…
CVE-2016-0363 - CVSS 8.1 (high), 2016-06-03: The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9…
CVE-2016-4913 - CVSS 7.8 (high), 2016-05-23: The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters,…
CVE-2016-4805 - CVSS 7.8 (high), 2016-05-23: Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory…
CVE-2016-4569 - CVSS 5.5 (medium), 2016-05-23: The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local…
CVE-2016-4486 - CVSS 3.3 (low), 2016-05-23: The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local…
CVE-2016-4485 - CVSS 7.5 (high), 2016-05-23: The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain…
CVE-2016-4482 - CVSS 6.2 (medium), 2016-05-23: The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local…
CVE-2016-3951 - CVSS 4.6 (medium), 2016-05-02: Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service…
CVE-2016-3689 - CVSS 4.6 (medium), 2016-05-02: The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial…
CVE-2016-3140 - CVSS 4.6 (medium), 2016-05-02: The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial…
CVE-2016-3138 - CVSS 4.6 (medium), 2016-05-02: The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service…
CVE-2016-3137 - CVSS 4.6 (medium), 2016-05-02: drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference…
CVE-2016-3136 - CVSS 4.6 (medium), 2016-05-02: The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial…
CVE-2016-2188 - CVSS 4.6 (medium), 2016-05-02: The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of…
CVE-2016-2187 - CVSS 4.6 (medium), 2016-05-02: The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service…
CVE-2016-2186 - CVSS 4.6 (medium), 2016-05-02: The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of…
CVE-2016-2185 - CVSS 4.6 (medium), 2016-05-02: The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of…
CVE-2016-3672 - CVSS 7.8 (high), 2016-04-27: The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it…
CVE-2016-3156 - CVSS 5.5 (medium), 2016-04-27: The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service…
CVE-2016-3139 - CVSS 4.6 (medium), 2016-04-27: The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of…
CVE-2016-3134 - CVSS 8.4 (high), 2016-04-27: The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a…
CVE-2016-2847 - CVSS 6.2 (medium), 2016-04-27: fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory…
CVE-2016-2184 - CVSS 4.6 (medium), 2016-04-27: The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate…
CVE-2015-8816 - CVSS 6.8 (medium), 2016-04-27: The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows…
CVE-2015-7566 - CVSS 4.6 (medium), 2016-02-08: The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service…
CVE-2015-2743 - CVSS 7.5 (high), 2015-07-06: PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might…
CVE-2015-2740 - CVSS 10 (critical), 2015-07-06: Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and…
CVE-2015-2739 - CVSS 10 (critical), 2015-07-06: The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1…
CVE-2015-2736 - CVSS 9.3 (critical), 2015-07-06: The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1…
CVE-2015-2735 - CVSS 9.3 (critical), 2015-07-06: nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory…
CVE-2015-2730 - CVSS 4.3 (medium), 2015-07-06: Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other…
CVE-2015-2726 - CVSS 10 (critical), 2015-07-06: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory…
CVE-2015-2725 - CVSS 10 (critical), 2015-07-06: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow…
CVE-2015-2724 - CVSS 10 (critical), 2015-07-06: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird…
CVE-2015-2722 - CVSS 10 (critical), 2015-07-06: Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1…
CVE-2015-2721 - CVSS 4.3 (medium), 2015-07-06: Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird…
CVE-2015-2716 - CVSS 7.5 (high), 2015-05-14: Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute…
CVE-2015-2713 - CVSS 6.8 (medium), 2015-05-14: Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote…
CVE-2015-2710 - CVSS 6.8 (medium), 2015-05-14: Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote…
CVE-2015-2709 - CVSS 7.5 (high), 2015-05-14: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory…
CVE-2015-2708 - CVSS 7.5 (high), 2015-05-14: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow…
CVE-2015-0438 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to…
CVE-2015-0423 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to…
CVE-2015-0405 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA.
CVE-2015-0240 - CVSS 10 (critical), 2015-02-24: The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5…
CVE-2014-3566 - CVSS 3.4 (low), 2014-10-15: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle…
CVE-2014-1505 - CVSS 7.5 (high), 2014-03-19: The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote…
CVE-2013-4589 - CVSS 4.3 (medium), 2013-11-23: The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors…