Linux Enterprise Desktop (Suse) - vulnerabilities (CVEs)

462 CVEs, 0 in the last 30 days, 33 known versions, newest CVE from 2026-04-22. Vendor: Suse.

CVEs of Linux Enterprise Desktop

CVE-2026-31431 - CVSS 7.8 (high), 2026-04-22: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit…
CVE-2025-32463 - CVSS 9.3 (critical), 2025-06-30: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVE-2022-27239 - CVSS 7.8 (high), 2022-04-27: In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root…
CVE-2021-4034 - CVSS 7.8 (high), 2022-01-28: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users…
CVE-2018-10195 - CVSS 7.1 (high), 2021-06-02: lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to…
CVE-2020-8018 - CVSS 8.4 (high), 2020-05-04: A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1…
CVE-2014-1947 - CVSS 7.8 (high), 2020-02-17: Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of…
CVE-2006-7246 - CVSS 6.8 (medium), 2020-01-27: NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.
CVE-2015-5239 - CVSS 6.5 (medium), 2020-01-23: Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message,…
CVE-2019-11038 - CVSS 5.3 (medium), 2019-06-19: When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below…
CVE-2017-16232 - CVSS 7.5 (high), 2019-03-21: LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by…
CVE-2018-19539 - CVSS 6.5 (medium), 2018-11-26: An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial…
CVE-2018-19542 - CVSS 6.5 (medium), 2018-11-26: An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of…
CVE-2018-19541 - CVSS 8.8 (high), 2018-11-26: An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19,…
CVE-2018-19540 - CVSS 8.8 (high), 2018-11-26: An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19,…
CVE-2018-19543 - CVSS 7.8 (high), 2018-11-26: An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
CVE-2018-18873 - CVSS 5.5 (medium), 2018-10-31: An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
CVE-2017-18017 - CVSS 9.8 (critical), 2018-01-03: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a…
CVE-2017-17806 - CVSS 7.8 (high), 2017-12-20: The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed,…
CVE-2017-17805 - CVSS 7.8 (high), 2017-12-20: The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the…
CVE-2017-13078 - CVSS 5.3 (medium), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio…
CVE-2017-13081 - CVSS 5.3 (medium), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key…
CVE-2017-13086 - CVSS 6.8 (medium), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an…
CVE-2017-13080 - CVSS 5.3 (medium), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio…
CVE-2017-13084 - CVSS 6.8 (medium), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing…
CVE-2017-13088 - CVSS 5.3 (medium), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network…
CVE-2017-13079 - CVSS 5.3 (medium), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way…
CVE-2017-13082 - CVSS 8.1 (high), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast…
CVE-2017-13087 - CVSS 5.3 (medium), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management…
CVE-2017-13077 - CVSS 6.8 (medium), 2017-10-17: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an…
CVE-2015-5300 - CVSS 7.5 (high), 2017-07-21: The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default,…
CVE-2015-8567 - CVSS 7.7 (high), 2017-04-13: Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
CVE-2016-9957 - CVSS 7.8 (high), 2017-04-12: Stack-based buffer overflow in game-music-emu before 0.6.1.
CVE-2016-9959 - CVSS 7.8 (high), 2017-04-12: game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
CVE-2016-9958 - CVSS 7.8 (high), 2017-04-12: game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
CVE-2016-9398 - CVSS 7.5 (high), 2017-03-23: The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified…
CVE-2016-1602 - CVSS 7.8 (high), 2017-03-23: A code injection in the supportconfig data collection tool in supportutils in SUSE Linux Enterprise Server 12 and 12-SP1 and SUSE Linux Enterprise Desktop 12…
CVE-2014-9852 - CVSS 9.8 (critical), 2017-03-17: distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified…
CVE-2014-9853 - CVSS 5.5 (medium), 2017-03-17: Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.
CVE-2017-5898 - CVSS 5.5 (medium), 2017-03-15: Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device…
CVE-2015-7976 - CVSS 4.3 (medium), 2017-01-30: The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows…
CVE-2015-8934 - CVSS 5.5 (medium), 2016-09-20: The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service…
CVE-2015-8933 - CVSS 5.5 (medium), 2016-09-20: Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause…
CVE-2015-8931 - CVSS 7.8 (high), 2016-09-20: Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow…
CVE-2015-8932 - CVSS 5.5 (medium), 2016-09-20: The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service…
CVE-2015-8930 - CVSS 7.5 (high), 2016-09-20: bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.
CVE-2015-8929 - CVSS 5.5 (medium), 2016-09-20: Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of…
CVE-2015-8928 - CVSS 5.5 (medium), 2016-09-20: The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service…
CVE-2015-8926 - CVSS 5.5 (medium), 2016-09-20: The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of…
CVE-2015-8925 - CVSS 5.5 (medium), 2016-09-20: The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read)…
CVE-2016-4957 - CVSS 7.5 (high), 2016-07-05: ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists…
CVE-2016-4956 - CVSS 5.3 (medium), 2016-07-05: ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast…
CVE-2016-4955 - CVSS 5.9 (medium), 2016-07-05: ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage)…
CVE-2016-4954 - CVSS 7.5 (high), 2016-07-05: The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification)…
CVE-2016-4953 - CVSS 7.5 (high), 2016-07-05: ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK…
CVE-2016-5244 - CVSS 7.5 (high), 2016-06-27: The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote…
CVE-2016-4171 - CVSS 9.8 (critical), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in…
CVE-2016-4156 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4155 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4154 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4153 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4152 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4151 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4150 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4149 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4148 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4147 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4146 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4145 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4144 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4143 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4142 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4141 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4140 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4139 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4138 - CVSS 9.8 (critical), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4137 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4136 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4135 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4134 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4133 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4132 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4131 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4130 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4129 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4128 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4127 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4125 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4124 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4123 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4122 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-5118 - CVSS 9.8 (critical), 2016-06-10: The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at…
CVE-2016-0718 - CVSS 9.8 (critical), 2016-05-26: Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which…
CVE-2016-4117 - CVSS 9.8 (critical), 2016-05-11: Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
CVE-2016-3718 - CVSS 5.5 (medium), 2016-05-05: The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF)…
CVE-2016-3715 - CVSS 5.5 (medium), 2016-05-05: The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2016-2782 - CVSS 4.6 (medium), 2016-04-27: The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL…
CVE-2016-3427 - CVSS 9.8 (critical), 2016-04-21: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect…
CVE-2016-0668 - CVSS 4.1 (medium), 2016-04-21: Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local…
CVE-2016-0651 - CVSS 5.5 (medium), 2016-04-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.