SL
Product
Suse Linux Enterprise Server
91
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 20Medium 29Low 4
Watch
Add Suse Linux Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2834 | 8.8 | Jun 13 | Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and… Affected: 12.0; 12.0 |
| CVE-2016-2818 | 8.8 | Jun 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service… Affected: 12.0; 12.0 |
| CVE-2016-2815 | 8.8 | Jun 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application… Affected: 12.0; 12.0 |
| CVE-2016-3134 | 8.4 | Apr 27 | The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap… Affected: 11.0; 11.0; 12.0; 12.0 |
| CVE-2016-0376 | 8.1 | Jun 3 | The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40),… Affected: 11.0; 11.0; 11.0; 12.0; 12.0 |
| CVE-2016-0363 | 8.1 | Jun 3 | The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1… Affected: 11.0; 11.0; 11.0; 12.0; 12.0 |
| CVE-2016-5759 | 7.8 | Sep 8 | The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root Affected: 12.0 |
| CVE-2017-1000366 | 7.8 | Jun 19 | glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code… Affected: 11.0 |
| CVE-2016-4997 | 7.8 | Jul 3 | The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges… Affected: 12.0; 12.0 |
| CVE-2016-1583 | 7.8 | Jun 27 | The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory… Affected: 11.0; 11.0; 12.0; 12.0 |
| CVE-2016-4913 | 7.8 | May 23 | The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local… Affected: 11.0; 11.0 |
| CVE-2016-4805 | 7.8 | May 23 | Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash,… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-3672 | 7.8 | Apr 27 | The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local… Affected: 12.0 |
| CVE-2008-2931 | 7.8 | Jul 9 | The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain… Affected: 10.0; 10.0 |
| CVE-2013-4357 | 7.5 | Dec 31 | The eglibc package before 2.14 incorrectly handled the getaddrinfo() function Affected: 11.0 |
| CVE-2015-8921 | 7.5 | Sep 20 | The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file Affected: 12.0 |
| CVE-2015-8919 | 7.5 | Sep 20 | The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds… Affected: 12.0 |
| CVE-2015-8918 | 7.5 | Sep 20 | The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to… Affected: 12.0 |
| CVE-2016-4485 | 7.5 | May 23 | The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information… Affected: 11; 11 |
| CVE-2014-3687 | 7.5 | Nov 10 | The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of… Affected: 12.0 |
Showing 20