Opensuse Project - vulnerabilities (CVEs)

54 CVEs in 9 products, 0 in the last 30 days, newest from 2017-12-20.

Products

• Leap - 35 CVEs
• Opensuse - 16 CVEs
• Suse Linux Enterprise Desktop - 13 CVEs
• Suse Linux Enterprise Software Development Kit - 13 CVEs
• Suse Linux Enterprise Server - 12 CVEs
• Suse Linux Enterprise Workstation Extension - 11 CVEs
• Suse Linux Enterprise Debuginfo - 7 CVEs
• Studio Onsite - 1 CVEs
• Suse Linux Enterprise Server For Raspberry Pi - 1 CVEs

Newest CVEs of Opensuse Project

• CVE-2017-17806 - CVSS 7.8 (high), 2017-12-20: The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed,…
• CVE-2017-17805 - CVSS 7.8 (high), 2017-12-20: The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the…
• CVE-2016-1254 - CVSS 7.5 (high), 2017-12-05: Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.
• CVE-2015-3138 - CVSS 7.5 (high), 2017-09-28: print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).
• CVE-2014-4616 - CVSS 5.9 (medium), 2017-08-24: Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to…
• CVE-2015-3405 - CVSS 7.5 (high), 2017-08-09: ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest…
• CVE-2015-5203 - CVSS 5.5 (medium), 2017-08-02: Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted…
• CVE-2015-5221 - CVSS 5.5 (medium), 2017-07-25: Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote…
• CVE-2016-9961 - CVSS 9.8 (critical), 2017-06-06: game-music-emu before 0.6.1 mishandles unspecified integer values.
• CVE-2016-9960 - CVSS 5.5 (medium), 2017-06-06: game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
• CVE-2016-9957 - CVSS 7.8 (high), 2017-04-12: Stack-based buffer overflow in game-music-emu before 0.6.1.
• CVE-2016-9959 - CVSS 7.8 (high), 2017-04-12: game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
• CVE-2016-9958 - CVSS 7.8 (high), 2017-04-12: game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
• CVE-2017-6542 - CVSS 9.8 (critical), 2017-03-27: The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol…
• CVE-2015-8010 - CVSS 6.1 (medium), 2017-03-27: Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to…
• CVE-2016-7797 - CVSS 7.5 (high), 2017-03-24: Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated…
• CVE-2016-9556 - CVSS 5.5 (medium), 2017-03-23: The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read)…
• CVE-2016-10048 - CVSS 7.5 (high), 2017-03-23: Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.
• CVE-2014-9848 - CVSS 7.5 (high), 2017-03-20: Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
• CVE-2014-9851 - CVSS 7.5 (high), 2017-03-20: ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
• CVE-2014-9847 - CVSS 9.8 (critical), 2017-03-20: The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
• CVE-2014-9850 - CVSS 7.5 (high), 2017-03-20: Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
• CVE-2014-9849 - CVSS 7.5 (high), 2017-03-20: The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
• CVE-2014-9845 - CVSS 5.5 (medium), 2017-03-20: The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.
• CVE-2014-9841 - CVSS 9.8 (critical), 2017-03-20: The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing…
• CVE-2014-9844 - CVSS 5.5 (medium), 2017-03-20: The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image…
• CVE-2014-9843 - CVSS 9.8 (critical), 2017-03-20: The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
• CVE-2014-9846 - CVSS 9.8 (critical), 2017-03-20: Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
• CVE-2014-9842 - CVSS 7.5 (high), 2017-03-20: Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via…
• CVE-2014-9853 - CVSS 5.5 (medium), 2017-03-17: Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.