Linux Enterprise Desktop vulnerabilities | LiveThreat CVE Feed

Product

Linux Enterprise Desktop

by Suse · last CVE Apr 22, 2026

On CISA KEVExploited in the wildRansomware-linked

462

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities462 In the news12 Timeline

Severity mix

Critical 26High 86Medium 44Low 2

Severity

All severities462 Critical26 High86 Medium44 Low2

Exploitation

On CISA KEV37 Exploited in the wild37

Watch

Add Linux Enterprise Desktop to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-4956	5.3	16%	Jul 5	ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet Affected: 12
CVE-2016-0642	4.7	1%	Apr 21	Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors… Affected: 12; 12
CVE-2009-1961	4.7	1%	Jun 8	The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to… Affected: 11
CVE-2016-2782	4.6	2%	Apr 27	The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference… Affected: 12; 12
CVE-2015-7976	4.3	4%	Jan 30	The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause… Affected: 12; 12
CVE-2016-0668	4.1	2%	Apr 21	Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect… Affected: 12; 12
CVE-2015-4000	3.7	100%	May 21	The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: 12
CVE-2015-2808	3.7	74%	Apr 1	The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for… Affected: 11; 11; 12
CVE-2015-0272	–	5%	Nov 17	GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a… Affected: 11; 11; 12; 12
CVE-2015-8126	–	10%	Nov 13	Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x… Affected: 11; 11; 12; 12
CVE-2015-2697	–	4%	Nov 9	The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds… Affected: 12
CVE-2015-2696	–	5%	Nov 9	lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect… Affected: 12
CVE-2015-2695	–	6%	Nov 9	lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service… Affected: 11; 11; 12
CVE-2015-4830	–	3%	Oct 21	Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to… Affected: 11
CVE-2015-1781	–	5%	Sep 28	Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a… Affected: 11; 11
CVE-2015-5154	–	1%	Aug 12	Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute… Affected: 11; 12
CVE-2015-1283	–	18%	Jul 23	Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a… Affected: 12; 12
CVE-2015-2738	–	3%	Jul 6	The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and… Affected: 12
CVE-2015-2737	–	3%	Jul 6	The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before… Affected: 12
CVE-2015-2734	–	3%	Jul 6	The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and… Affected: 12
CVE-2015-3209	–	10%	Jun 15	Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted… Affected: 11; 12
CVE-2015-4106	–	0%	Jun 3	QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a… Affected: 11; 12
CVE-2015-0797	–	5%	May 14	GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of… Affected: 11
CVE-2015-3340	–	1%	Apr 28	Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo… Affected: 12
CVE-2015-2576	–	0%	Apr 16	Unspecified vulnerability in the MySQL Utilities component in Oracle MySQL 1.5.1 and earlier, when running on Windows, allows local users to affect integrity via unknown vectors… Affected: 11
CVE-2015-2575	–	4%	Apr 16	Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via… Affected: 11
CVE-2015-2573	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL Affected: 11
CVE-2015-2571	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11
CVE-2015-2568	–	7%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server :… Affected: 11
CVE-2015-0505	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL Affected: 11
CVE-2015-0501	–	10%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11
CVE-2015-0499	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11
CVE-2015-0441	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11
CVE-2015-0433	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB… Affected: 11
CVE-2014-8160	–	5%	Mar 2	net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP,… Affected: 12
CVE-2015-0432	–	4%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign… Affected: 12
CVE-2015-0391	–	7%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL Affected: 12
CVE-2015-0382	–	10%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server :… Affected: 12
CVE-2015-0381	–	5%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server :… Affected: 12
CVE-2015-0374	–	3%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related… Affected: 12
CVE-2014-6568	–	7%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server… Affected: 12
CVE-2014-9585	–	1%	Jan 9	The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users… Affected: 12
CVE-2014-9584	–	0%	Jan 9	The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use… Affected: 12
CVE-2014-9116	–	10%	Dec 2	The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service… Affected: 12
CVE-2014-7815	–	4%	Nov 14	The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value Affected: 12
CVE-2014-6564	–	2%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH… Affected: 12
CVE-2014-6559	–	5%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL… Affected: 12
CVE-2014-6555	–	4%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability… Affected: 12
CVE-2014-6551	–	0%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN Affected: 12
CVE-2014-6530	–	3%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and… Affected: 12