suse Vulnerability Advisory Catalog

Total 198 security vulnerabilities recorded for suse software and firmware.

← Back to All Vendors
Component: linux_enterprise_desktop

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of...

📅 2016-09-20
CVSS 7.5 Dossier →
CVE-2015-8929 MEDIUM
Component: linux_enterprise_desktop

Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial...

📅 2016-09-20
CVSS 5.5 Dossier →
CVE-2016-0264 MEDIUM
Component: linux_enterprise_server

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25),...

📅 2016-05-24
CVSS 5.6 Dossier →
CVE-2016-1601 CRITICAL
Component: yast2

yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST inst...

📅 2016-04-26
CVSS 9.8 Dossier →
CVE-2015-8779 CRITICAL
Component: linux_enterprise_debuginfo

Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause ...

📅 2016-04-19
CVSS 9.8 Dossier →
CVE-2015-8776 CRITICAL
Component: linux_enterprise_debuginfo

The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (applicati...

📅 2016-04-19
CVSS 9.1 Dossier →
CVE-2014-9761 CRITICAL
Component: linux_enterprise_debuginfo

Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of ser...

📅 2016-04-19
CVSS 9.8 Dossier →
CVE-2016-2324 CRITICAL
Component: linux_enterprise_debuginfo

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which trigger...

📅 2016-04-08
CVSS 9.8 Dossier →
CVE-2016-2315 CRITICAL
Component: linux_enterprise_debuginfo

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or...

📅 2016-04-08
CVSS 9.8 Dossier →
CVE-2015-1781 UNKNOWN
Component: linux_enterprise_debuginfo

Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-depend...

📅 2015-09-28
CVSS 6.8 Dossier →
CVE-2015-2734 UNKNOWN
Component: linux_enterprise_desktop

The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 an...

📅 2015-07-06
CVSS 10.0 Dossier →
CVE-2015-2041 UNKNOWN
Component: suse_linux_enterprise_server

net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially...

📅 2015-04-21
CVSS 4.6 Dossier →
CVE-2015-2576 UNKNOWN
Component: linux_enterprise_desktop

Unspecified vulnerability in the MySQL Utilities component in Oracle MySQL 1.5.1 and earlier, when running on Windows, allows local users to affect in...

📅 2015-04-16
CVSS 2.1 Dossier →
CVE-2015-0505 UNKNOWN
Component: linux_enterprise_desktop

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability ...

📅 2015-04-16
CVSS 3.5 Dossier →
CVE-2015-0439 UNKNOWN
Component: suse_linux_enterprise_software_development_kit

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors relat...

📅 2015-04-16
CVSS 4.0 Dossier →
CVE-2014-8121 UNKNOWN
Component: suse_linux_enterprise_desktop

DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if ...

📅 2015-03-27
CVSS 5.0 Dossier →
CVE-2014-9116 UNKNOWN
Component: linux_enterprise_desktop

The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers t...

📅 2014-12-02
CVSS 5.0 Dossier →
CVE-2014-0223 UNKNOWN
Component: linux_enterprise_server

Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly e...

📅 2014-11-04
CVSS 4.6 Dossier →
CVE-2014-0222 UNKNOWN
Component: linux_enterprise_server

Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a lar...

📅 2014-11-04
CVSS 7.5 Dossier →
CVE-2014-3601 UNKNOWN
Component: linux_enterprise_real_time_extension

The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a map...

📅 2014-09-01
CVSS 4.3 Dossier →
CVE-2014-4214 UNKNOWN
Component: linux_enterprise_desktop

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability vi...

📅 2014-07-17
CVSS 3.3 Dossier →
CVE-2014-4207 UNKNOWN
Component: linux_enterprise_desktop

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability vi...

📅 2014-07-17
CVSS 4.0 Dossier →
CVE-2014-4038 UNKNOWN
Component: linux_enterprise_server

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (...

📅 2014-06-17
CVSS 4.4 Dossier →
CVE-2014-3917 UNKNOWN
Component: linux_enterprise_desktop

kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain pote...

📅 2014-06-05
CVSS 3.3 Dossier →
Page 5 of 9 (198 Total Records)