SL
Product
Suse Linux Enterprise Software Development Kit
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 16Medium 24Low 3
Watch
Add Suse Linux Enterprise Software Development Kit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9961 | 9.8 | Jun 6 | game-music-emu before 0.6.1 mishandles unspecified integer values Affected: 12.0 |
| CVE-2016-2834 | 8.8 | Jun 13 | Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and… Affected: 12.0; 12.0 |
| CVE-2016-2818 | 8.8 | Jun 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service… Affected: 12.0; 12.0 |
| CVE-2016-2815 | 8.8 | Jun 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application… Affected: 12.0; 12.0 |
| CVE-2016-3134 | 8.4 | Apr 27 | The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-0376 | 8.1 | Jun 3 | The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40),… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-0363 | 8.1 | Jun 3 | The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-4997 | 7.8 | Jul 3 | The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges… Affected: 12.0; 12.0 |
| CVE-2016-1583 | 7.8 | Jun 27 | The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-4913 | 7.8 | May 23 | The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local… Affected: 11.0 |
| CVE-2016-4805 | 7.8 | May 23 | Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash,… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-3672 | 7.8 | Apr 27 | The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local… Affected: 12.0 |
| CVE-2015-8921 | 7.5 | Sep 20 | The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file Affected: 12.0 |
| CVE-2015-8919 | 7.5 | Sep 20 | The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds… Affected: 12.0 |
| CVE-2015-8918 | 7.5 | Sep 20 | The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to… Affected: 12.0 |
| CVE-2016-4485 | 7.5 | May 23 | The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information… Affected: 11.0 |
| CVE-2014-1505 | 7.5 | Mar 19 | The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain… Affected: 11.0 |
| CVE-2015-8816 | 6.8 | Apr 27 | The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate… Affected: 11.0; 12.0 |
| CVE-2015-8923 | 6.5 | Sep 20 | The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via… Affected: 12.0 |
| CVE-2016-4482 | 6.2 | May 23 | The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-2847 | 6.2 | Apr 27 | fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-9960 | 5.5 | Jun 6 | game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash) Affected: 12.0 |
| CVE-2016-7796 | 5.5 | Oct 13 | The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which… Affected: 12.0 |
| CVE-2015-8924 | 5.5 | Sep 20 | The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service… Affected: 12.0 |
| CVE-2015-8922 | 5.5 | Sep 20 | The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 12.0 |
| CVE-2015-8920 | 5.5 | Sep 20 | The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a… Affected: 12.0 |
| CVE-2016-4569 | 5.5 | May 23 | The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-3156 | 5.5 | Apr 27 | The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking… Affected: 11.0; 12.0 |
| CVE-2016-3951 | 4.6 | May 2 | Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly… Affected: 12.0 |
| CVE-2016-3689 | 4.6 | May 2 | The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system… Affected: 12.0; 12.0 |
| CVE-2016-3140 | 4.6 | May 2 | The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-3138 | 4.6 | May 2 | The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-3137 | 4.6 | May 2 | drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-3136 | 4.6 | May 2 | The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 12.0; 12.0 |
| CVE-2016-2188 | 4.6 | May 2 | The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-2187 | 4.6 | May 2 | The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 11.0 |
| CVE-2016-2186 | 4.6 | May 2 | The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-2185 | 4.6 | May 2 | The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 11.0; 12.0; 12.0 |
| CVE-2016-3139 | 4.6 | Apr 27 | The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 11.0; 12.0 |
| CVE-2016-2184 | 4.6 | Apr 27 | The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial… Affected: 11.0; 12.0 |
| CVE-2015-7566 | 4.6 | Feb 8 | The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 11 |
| CVE-2015-6815 | 3.5 | Jan 31 | The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to… Affected: 11.0; 11.0; 12.0 |
| CVE-2014-3566 | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… Affected: 11.0; 12.0 |
| CVE-2016-4486 | 3.3 | May 23 | The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain… Affected: 11.0; 12.0; 12.0 |
| CVE-2015-2743 | – | Jul 6 | PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers… Affected: 12.0 |
| CVE-2015-2740 | – | Jul 6 | Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before… Affected: 12.0 |
| CVE-2015-2739 | – | Jul 6 | The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory… Affected: 12.0 |
| CVE-2015-2736 | – | Jul 6 | The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory… Affected: 12.0 |
| CVE-2015-2735 | – | Jul 6 | nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows… Affected: 12.0 |
| CVE-2015-2730 | – | Jul 6 | Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not… Affected: 12.0 |