Suse Linux Enterprise Module For Public Cloud vulnerabilities

Product

Suse Linux Enterprise Module For Public Cloud

by Novell · last CVE Jul 3, 2016

CVEs

On KEV

8.4

Max CVSS

New 30D

Vulnerabilities22 In the news0 Timeline

Severity mix

Critical 0High 5Medium 16Low 1

Severity

All severities22 Critical0 High5 Medium16 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Suse Linux Enterprise Module For Public Cloud to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-3134	8.4	1%	Apr 27	The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap… Affected: 12.0
CVE-2016-4997	7.8	6%	Jul 3	The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges… Affected: 12.0
CVE-2016-1583	7.8	1%	Jun 27	The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory… Affected: 12
CVE-2016-4805	7.8	0%	May 23	Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash,… Affected: 12.0; 12.0
CVE-2016-3672	7.8	1%	Apr 27	The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local… Affected: 12.0
CVE-2015-8816	6.8	1%	Apr 27	The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate… Affected: 12
CVE-2016-4482	6.2	1%	May 23	The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain… Affected: 12.0
CVE-2016-2847	6.2	1%	Apr 27	fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating… Affected: 12.0
CVE-2016-4569	5.5	1%	May 23	The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive… Affected: 12.0
CVE-2016-3156	5.5	1%	Apr 27	The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking… Affected: 12.0
CVE-2016-3951	4.6	1%	May 2	Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly… Affected: 12
CVE-2016-3689	4.6	1%	May 2	The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system… Affected: 12.0
CVE-2016-3140	4.6	2%	May 2	The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 12.0
CVE-2016-3138	4.6	1%	May 2	The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference… Affected: 12.0
CVE-2016-3137	4.6	1%	May 2	drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via… Affected: 12.0
CVE-2016-3136	4.6	2%	May 2	The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 12.0
CVE-2016-2188	4.6	2%	May 2	The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 12.0
CVE-2016-2186	4.6	1%	May 2	The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 12.0
CVE-2016-2185	4.6	1%	May 2	The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 12.0
CVE-2016-3139	4.6	2%	Apr 27	The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 12.0
CVE-2016-2184	4.6	2%	Apr 27	The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial… Affected: 12.0
CVE-2016-4486	3.3	2%	May 23	The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain… Affected: 12.0