Opensuse (Suse) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-05-20. Vendor: Suse.

CVEs of Opensuse

• CVE-2026-44933 - CVSS 8.5 (high), 2026-05-20: `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when…
• CVE-2025-62876 - CVSS 5.3 (medium), 2025-11-12: A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects…
• CVE-2017-3224 - CVSS 8.2 (high), 2018-07-24: Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber.…
• CVE-2011-0469 - CVSS 9.8 (critical), 2017-08-17: Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011.
• CVE-2010-0230 - CVSS 7.5 (high), 2010-01-22: SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to…
• CVE-2008-3067 - CVSS 2.1 (low), 2008-07-07: sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin…
• CVE-2007-2654 - CVSS 4.4 (medium), 2007-05-14: xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs…