LE
Product
Linux Enterprise Desktop
On CISA KEVExploited in the wildRansomware-linked
462
CVEs
37
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 26High 86Medium 44Low 2
Watch
Add Linux Enterprise Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-8567 | 7.7 | Apr 13 | Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption) Affected: 11; 12; 12 |
| CVE-2017-16232 | 7.5 | Mar 17 | LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and… Affected: 12; 12 |
| CVE-2015-5300 | 7.5 | Jul 21 | The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote… Affected: 12; 12 |
| CVE-2016-9398 | 7.5 | Mar 23 | The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors Affected: 12; 12 |
| CVE-2015-8930 | 7.5 | Sep 20 | bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself Affected: 12 |
| CVE-2016-4957 | 7.5 | Jul 5 | ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet Affected: 12 |
| CVE-2016-4954 | 7.5 | Jul 5 | The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed… Affected: 12 |
| CVE-2016-4953 | 7.5 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect… Affected: 12 |
| CVE-2016-5244 | 7.5 | Jun 27 | The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain… Affected: 12 |
| CVE-2015-6855 | 7.5 | Nov 6 | hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other… Affected: 12 |
| CVE-2008-0063 | 7.5 | Mar 19 | The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote… Affected: 10 |
| CVE-2018-10195 | 7.1 | Jun 2 | lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around Affected: 12 |
| CVE-2009-3939 | 7.1 | Nov 16 | The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the… Affected: 10; 11 |
| CVE-2010-1437 | 7.0 | May 7 | Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory… Affected: 11 |
| CVE-2006-7246 | 6.8 | Jan 27 | NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used Affected: 11 |
| CVE-2017-13086 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio… Affected: 12; 12 |
| CVE-2017-13084 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within… Affected: 12; 12 |
| CVE-2017-13077 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio… Affected: 12; 12 |
| CVE-2016-1285 | 6.8 | Mar 9 | named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause… Affected: 11; 12; 12 |
| CVE-2015-5239 | 6.5 | Jan 23 | Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an… Affected: 11; 11; 12 |
| CVE-2018-19542 | 6.5 | Nov 26 | An issue was discovered in JasPer 2.0.14 Affected: 12; 12 |
| CVE-2018-19539 | 6.5 | Nov 26 | An issue was discovered in JasPer 2.0.14 Affected: 12; 12 |
| CVE-2015-5969 | 6.2 | Apr 8 | The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package… Affected: 12 |
| CVE-2015-8551 | 6.0 | Apr 13 | The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and… Affected: 11; 12 |
| CVE-2016-4955 | 5.9 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a… Affected: 12 |
| CVE-2013-6673 | 5.9 | Dec 11 | Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509… Affected: 11 |
| CVE-2018-18873 | 5.5 | Oct 31 | An issue was discovered in JasPer 2.0.14 Affected: 12; 12 |
| CVE-2014-9853 | 5.5 | Mar 17 | Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file Affected: 12 |
| CVE-2017-5898 | 5.5 | Mar 15 | Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows… Affected: 12 |
| CVE-2015-8934 | 5.5 | Sep 20 | The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap… Affected: 12 |
| CVE-2015-8933 | 5.5 | Sep 20 | Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service… Affected: 12 |
| CVE-2015-8932 | 5.5 | Sep 20 | The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted… Affected: 12 |
| CVE-2015-8929 | 5.5 | Sep 20 | Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file Affected: 12 |
| CVE-2015-8928 | 5.5 | Sep 20 | The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a… Affected: 12 |
| CVE-2015-8926 | 5.5 | Sep 20 | The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a… Affected: 12 |
| CVE-2015-8925 | 5.5 | Sep 20 | The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree… Affected: 12 |
| CVE-2016-0651 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer Affected: 12; 12 |
| CVE-2012-1146 | 5.5 | May 17 | The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd,… Affected: 11 |
| CVE-2012-1090 | 5.5 | May 17 | The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as… Affected: 11; 11 |
| CVE-2012-0879 | 5.5 | May 17 | The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service… Affected: 11; 11 |
| CVE-2010-3079 | 5.5 | Sep 30 | kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which… Affected: 11 |
| CVE-2010-2538 | 5.5 | Sep 30 | Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 might allow local users to obtain sensitive information via a… Affected: 11 |
| CVE-2009-3238 | 5.5 | Sep 18 | The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value,… Affected: 10 |
| CVE-2019-11038 | 5.3 | Jun 19 | When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19… Affected: 12 |
| CVE-2017-13088 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM)… Affected: 12; 12 |
| CVE-2017-13087 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode… Affected: 12; 12 |
| CVE-2017-13081 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an… Affected: 12; 12 |
| CVE-2017-13080 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay… Affected: 12; 12 |
| CVE-2017-13079 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an… Affected: 12; 12 |
| CVE-2017-13078 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… Affected: 12; 12 |