Linux Enterprise Software Development Kit (Suse) - vulnerabilities (CVEs)

297 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2022-09-29. Vendor: Suse.

CVEs of Linux Enterprise Software Development Kit

CVE-2015-1931 - CVSS 5.5 (medium), 2022-09-29: IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before…
CVE-2022-27239 - CVSS 7.8 (high), 2022-04-27: In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root…
CVE-2020-8025 - CVSS 9.3 (critical), 2020-08-07: A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server…
CVE-2014-1947 - CVSS 7.8 (high), 2020-02-17: Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of…
CVE-2015-5239 - CVSS 6.5 (medium), 2020-01-23: Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message,…
CVE-2019-11038 - CVSS 5.3 (medium), 2019-06-19: When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below…
CVE-2017-16232 - CVSS 7.5 (high), 2019-03-21: LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by…
CVE-2017-14804 - CVSS 9.9 (critical), 2018-03-01: The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the…
CVE-2017-18017 - CVSS 9.8 (critical), 2018-01-03: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a…
CVE-2015-5300 - CVSS 7.5 (high), 2017-07-21: The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default,…
CVE-2017-1000366 - CVSS 7.8 (high), 2017-06-19: glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting…
CVE-2016-4473 - CVSS 9.8 (critical), 2017-06-08: /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to…
CVE-2015-8567 - CVSS 7.7 (high), 2017-04-13: Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
CVE-2016-9958 - CVSS 7.8 (high), 2017-04-12: game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
CVE-2016-9957 - CVSS 7.8 (high), 2017-04-12: Stack-based buffer overflow in game-music-emu before 0.6.1.
CVE-2016-9959 - CVSS 7.8 (high), 2017-04-12: game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
CVE-2015-4680 - CVSS 7.5 (high), 2017-04-05: FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
CVE-2016-7797 - CVSS 7.5 (high), 2017-03-24: Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated…
CVE-2016-9398 - CVSS 7.5 (high), 2017-03-23: The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified…
CVE-2014-9853 - CVSS 5.5 (medium), 2017-03-17: Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.
CVE-2014-9852 - CVSS 9.8 (critical), 2017-03-17: distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified…
CVE-2014-9854 - CVSS 7.5 (high), 2017-03-17: coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."
CVE-2017-5898 - CVSS 5.5 (medium), 2017-03-15: Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device…
CVE-2016-2318 - CVSS 5.5 (medium), 2017-02-03: GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage…
CVE-2016-2317 - CVSS 5.5 (medium), 2017-02-03: Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1)…
CVE-2015-8934 - CVSS 5.5 (medium), 2016-09-20: The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service…
CVE-2015-8933 - CVSS 5.5 (medium), 2016-09-20: Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause…
CVE-2015-8932 - CVSS 5.5 (medium), 2016-09-20: The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service…
CVE-2015-8931 - CVSS 7.8 (high), 2016-09-20: Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow…
CVE-2015-8930 - CVSS 7.5 (high), 2016-09-20: bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.
CVE-2015-8929 - CVSS 5.5 (medium), 2016-09-20: Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of…
CVE-2015-8928 - CVSS 5.5 (medium), 2016-09-20: The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service…
CVE-2015-8926 - CVSS 5.5 (medium), 2016-09-20: The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of…
CVE-2015-8925 - CVSS 5.5 (medium), 2016-09-20: The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read)…
CVE-2016-5772 - CVSS 9.8 (critical), 2016-08-07: Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before…
CVE-2015-8808 - CVSS 5.5 (medium), 2016-07-13: The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a…
CVE-2016-5118 - CVSS 9.8 (critical), 2016-06-10: The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at…
CVE-2015-5041 - CVSS 9.1 (critical), 2016-06-06: The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers…
CVE-2016-0718 - CVSS 9.8 (critical), 2016-05-26: Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which…
CVE-2016-0264 - CVSS 5.6 (medium), 2016-05-24: Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7…
CVE-2015-8866 - CVSS 9.6 (critical), 2016-05-22: ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes…
CVE-2016-3718 - CVSS 5.5 (medium), 2016-05-05: The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF)…
CVE-2016-3715 - CVSS 5.5 (medium), 2016-05-05: The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2016-2782 - CVSS 4.6 (medium), 2016-04-27: The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL…
CVE-2016-3427 - CVSS 9.8 (critical), 2016-04-21: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect…
CVE-2016-0668 - CVSS 4.1 (medium), 2016-04-21: Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local…
CVE-2016-0651 - CVSS 5.5 (medium), 2016-04-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
CVE-2016-0642 - CVSS 4.7 (medium), 2016-04-21: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and…
CVE-2015-8779 - CVSS 9.8 (critical), 2016-04-19: Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial…
CVE-2015-8778 - CVSS 9.8 (critical), 2016-04-19: Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or…
CVE-2015-8776 - CVSS 9.1 (critical), 2016-04-19: The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application…
CVE-2014-9761 - CVSS 9.8 (critical), 2016-04-19: Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service…
CVE-2016-3630 - CVSS 8.8 (high), 2016-04-13: The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related…
CVE-2016-3069 - CVSS 8.8 (high), 2016-04-13: Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.
CVE-2016-3068 - CVSS 8.8 (high), 2016-04-13: Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
CVE-2015-8551 - CVSS 6 (medium), 2016-04-13: The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to…
CVE-2015-5969 - CVSS 6.2 (medium), 2016-04-08: The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and…
CVE-2016-2324 - CVSS 9.8 (critical), 2016-04-08: Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a…
CVE-2016-2315 - CVSS 9.8 (critical), 2016-04-08: revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2)…
CVE-2016-1286 - CVSS 8.6 (high), 2016-03-09: named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via…
CVE-2016-1285 - CVSS 6.8 (medium), 2016-03-09: named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows…
CVE-2015-7547 - CVSS 8.1 (high), 2016-02-18: Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before…
CVE-2015-5006 - CVSS 2.1 (low), 2015-12-07: IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before…
CVE-2015-0272 - CVSS 5 (medium), 2015-11-17: GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement…
CVE-2015-2697 - CVSS 4 (medium), 2015-11-09: The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of…
CVE-2015-2696 - CVSS 7.1 (high), 2015-11-09: lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial…
CVE-2015-2695 - CVSS 5 (medium), 2015-11-09: lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a…
CVE-2015-4902 - CVSS 5.3 (medium), 2015-10-22: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVE-2015-4830 - CVSS 4 (medium), 2015-10-21: Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown…
CVE-2015-5154 - CVSS 7.2 (high), 2015-08-12: Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest…
CVE-2015-4495 - CVSS 8.8 (high), 2015-08-08: The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin…
CVE-2015-5477 - CVSS 7.5 (high), 2015-07-29: named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon…
CVE-2015-1283 - CVSS 6.8 (medium), 2015-07-23: Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote…
CVE-2015-2738 - CVSS 10 (critical), 2015-07-06: The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x…
CVE-2015-2737 - CVSS 10 (critical), 2015-07-06: The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and…
CVE-2015-2734 - CVSS 10 (critical), 2015-07-06: The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x…
CVE-2015-0192 - CVSS 9.8 (critical), 2015-07-02: Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10…
CVE-2015-3209 - CVSS 7.5 (high), 2015-06-15: Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set…
CVE-2015-4106 - CVSS 4.6 (medium), 2015-06-03: QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain…
CVE-2015-4000 - CVSS 3.7 (low), 2015-05-21: The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice,…
CVE-2015-0797 - CVSS 6.8 (medium), 2015-05-14: GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to…
CVE-2015-3340 - CVSS 2.9 (low), 2015-04-28: Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1)…
CVE-2015-2576 - CVSS 2.1 (low), 2015-04-16: Unspecified vulnerability in the MySQL Utilities component in Oracle MySQL 1.5.1 and earlier, when running on Windows, allows local users to affect integrity…
CVE-2015-2575 - CVSS 4.9 (medium), 2015-04-16: Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and…
CVE-2015-2573 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via…
CVE-2015-2571 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via…
CVE-2015-2568 - CVSS 5 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown…
CVE-2015-0505 - CVSS 3.5 (low), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via…
CVE-2015-0501 - CVSS 5.7 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via…
CVE-2015-0499 - CVSS 3.5 (low), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via…
CVE-2015-0441 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via…
CVE-2015-0433 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via…
CVE-2015-2808 - CVSS 3.7 (low), 2015-04-01: The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which…
CVE-2014-8160 - CVSS 5 (medium), 2015-03-02: net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets…
CVE-2015-0432 - CVSS 4 (medium), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server :…
CVE-2015-0391 - CVSS 4 (medium), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via…
CVE-2015-0382 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors…
CVE-2015-0381 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors…
CVE-2015-0374 - CVSS 3.5 (low), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via…
CVE-2014-6568 - CVSS 3.5 (low), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via…