Linux Enterprise Workstation Extension (Suse) - vulnerabilities (CVEs)

105 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2026-04-22. Vendor: Suse.

CVEs of Linux Enterprise Workstation Extension

CVE-2026-31431 - CVSS 7.8 (high), 2026-04-22: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit…
CVE-2021-4034 - CVSS 7.8 (high), 2022-01-28: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users…
CVE-2019-11038 - CVSS 5.3 (medium), 2019-06-19: When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below…
CVE-2017-18017 - CVSS 9.8 (critical), 2018-01-03: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a…
CVE-2016-9959 - CVSS 7.8 (high), 2017-04-12: game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
CVE-2016-9958 - CVSS 7.8 (high), 2017-04-12: game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
CVE-2016-9957 - CVSS 7.8 (high), 2017-04-12: Stack-based buffer overflow in game-music-emu before 0.6.1.
CVE-2014-9853 - CVSS 5.5 (medium), 2017-03-17: Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.
CVE-2014-9852 - CVSS 9.8 (critical), 2017-03-17: distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified…
CVE-2016-5244 - CVSS 7.5 (high), 2016-06-27: The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote…
CVE-2016-4171 - CVSS 9.8 (critical), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in…
CVE-2016-4156 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4155 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4154 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4153 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4152 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4151 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4150 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4149 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4148 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4147 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4146 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4145 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4144 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4143 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4142 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4141 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4140 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4139 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4138 - CVSS 9.8 (critical), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4137 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4136 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4135 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4134 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4133 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4132 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4131 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4130 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4129 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4128 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4127 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4125 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4124 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4123 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-4122 - CVSS 8.8 (high), 2016-06-16: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…
CVE-2016-5118 - CVSS 9.8 (critical), 2016-06-10: The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at…
CVE-2016-4117 - CVSS 9.8 (critical), 2016-05-11: Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
CVE-2016-3718 - CVSS 5.5 (medium), 2016-05-05: The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF)…
CVE-2016-3715 - CVSS 5.5 (medium), 2016-05-05: The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2016-2782 - CVSS 4.6 (medium), 2016-04-27: The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL…
CVE-2016-0668 - CVSS 4.1 (medium), 2016-04-21: Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local…
CVE-2016-0651 - CVSS 5.5 (medium), 2016-04-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
CVE-2016-0642 - CVSS 4.7 (medium), 2016-04-21: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and…
CVE-2015-8551 - CVSS 6 (medium), 2016-04-13: The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to…
CVE-2015-5969 - CVSS 6.2 (medium), 2016-04-08: The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and…
CVE-2015-8651 - CVSS 8.8 (high), 2015-12-28: Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR…
CVE-2015-0272 - CVSS 5 (medium), 2015-11-17: GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement…
CVE-2015-7645 - CVSS 7.8 (high), 2015-10-15: Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to…
CVE-2015-5123 - CVSS 9.8 (critical), 2015-07-14: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and…
CVE-2015-5122 - CVSS 9.8 (critical), 2015-07-14: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows…
CVE-2015-5119 - CVSS 9.8 (critical), 2015-07-08: Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through…
CVE-2015-3113 - CVSS 9.8 (critical), 2015-06-23: Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on…
CVE-2014-8160 - CVSS 5 (medium), 2015-03-02: net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets…
CVE-2015-0313 - CVSS 9.8 (critical), 2015-02-02: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on…
CVE-2015-0311 - CVSS 9.8 (critical), 2015-01-23: Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on…
CVE-2015-0432 - CVSS 4 (medium), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server :…
CVE-2015-0391 - CVSS 4 (medium), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via…
CVE-2015-0382 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors…
CVE-2015-0381 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors…
CVE-2015-0374 - CVSS 3.5 (low), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via…
CVE-2014-6568 - CVSS 3.5 (low), 2015-01-21: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via…
CVE-2014-9585 - CVSS 2.1 (low), 2015-01-09: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it…
CVE-2014-9584 - CVSS 2.1 (low), 2015-01-09: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference…
CVE-2014-8559 - CVSS 5.5 (medium), 2014-11-10: The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to…
CVE-2014-3690 - CVSS 5.5 (medium), 2014-11-10: arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register…
CVE-2014-3687 - CVSS 7.5 (high), 2014-11-10: The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to…
CVE-2014-3673 - CVSS 7.5 (high), 2014-11-10: The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk,…
CVE-2014-6559 - CVSS 4.3 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors…
CVE-2014-6555 - CVSS 6.5 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality,…
CVE-2014-6551 - CVSS 2.1 (low), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to…
CVE-2014-6564 - CVSS 4 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to…
CVE-2014-6530 - CVSS 6.5 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality,…
CVE-2014-6505 - CVSS 4 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via…
CVE-2014-6496 - CVSS 4.3 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors…
CVE-2014-6520 - CVSS 4 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL.
CVE-2014-6495 - CVSS 4.3 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors…
CVE-2014-6507 - CVSS 4.3 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality,…
CVE-2014-6494 - CVSS 4.3 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors…
CVE-2014-6474 - CVSS 3.5 (low), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to…
CVE-2014-6469 - CVSS 6.8 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via…
CVE-2014-6484 - CVSS 4 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via…
CVE-2014-6464 - CVSS 4 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via…
CVE-2014-6478 - CVSS 4.3 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related…
CVE-2014-6463 - CVSS 3.3 (low), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via…
CVE-2014-4287 - CVSS 4 (medium), 2014-10-15: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via…
CVE-2014-4260 - CVSS 5.5 (medium), 2014-07-17: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to…
CVE-2014-4258 - CVSS 6.5 (medium), 2014-07-17: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect…
CVE-2014-4207 - CVSS 4 (medium), 2014-07-17: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via…
CVE-2014-2494 - CVSS 4 (medium), 2014-07-17: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via…
CVE-2014-2977 - CVSS 10 (critical), 2014-06-11: Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers…