Suse Linux Enterprise Desktop vulnerabilities | LiveThreat CVE Feed

Product

Suse Linux Enterprise Desktop

by Novell · last CVE Jan 31, 2020

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities83 In the news0 Timeline

Severity mix

Critical 2High 15Medium 25Low 3

Severity

All severities83 Critical2 High15 Medium25 Low3

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Suse Linux Enterprise Desktop to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-8816	6.8	1%	Apr 27	The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate… Affected: 12.0
CVE-2015-8923	6.5	3%	Sep 20	The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via… Affected: 12.0
CVE-2016-4482	6.2	1%	May 23	The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain… Affected: 12.0; 12.0
CVE-2016-2847	6.2	1%	Apr 27	fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating… Affected: 12.0; 12.0
CVE-2016-9960	5.5	1%	Jun 6	game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash) Affected: 12.0; 12.0
CVE-2016-7796	5.5	1%	Oct 13	The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which… Affected: 12
CVE-2015-8924	5.5	5%	Sep 20	The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service… Affected: 12.0
CVE-2015-8922	5.5	2%	Sep 20	The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 12.0
CVE-2015-8920	5.5	2%	Sep 20	The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a… Affected: 12.0
CVE-2016-4569	5.5	1%	May 23	The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive… Affected: 12.0; 12.0
CVE-2016-3156	5.5	1%	Apr 27	The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking… Affected: 12.0
CVE-2015-8845	5.5	0%	Apr 27	The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding… Affected: 12.0
CVE-2014-8559	5.5	1%	Nov 10	The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of… Affected: 12.0
CVE-2014-3690	5.5	1%	Nov 10	arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a… Affected: 12.0
CVE-2016-3951	4.6	1%	May 2	Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly… Affected: 12; 12
CVE-2016-3689	4.6	1%	May 2	The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system… Affected: 12.0; 12.0
CVE-2016-3140	4.6	2%	May 2	The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 12.0; 12.0
CVE-2016-3138	4.6	1%	May 2	The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference… Affected: 12.0; 12.0
CVE-2016-3137	4.6	1%	May 2	drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via… Affected: 12.0; 12.0
CVE-2016-3136	4.6	2%	May 2	The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 12.0; 12.0
CVE-2016-2188	4.6	2%	May 2	The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 12.0; 12.0
CVE-2016-2186	4.6	1%	May 2	The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 12.0; 12.0
CVE-2016-2185	4.6	1%	May 2	The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 12.0; 12.0
CVE-2016-3139	4.6	2%	Apr 27	The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 12.0
CVE-2016-2184	4.6	2%	Apr 27	The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial… Affected: 12.0