LE
Product
Linux Enterprise Server
On CISA KEVExploited in the wildRansomware-linked
476
CVEs
20
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 30High 64Medium 60Low 4
Watch
Add Linux Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-13078 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… Affected: 11; 11; 12 |
| CVE-2016-4956 | 5.3 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet Affected: 11; 11; 11; 12 |
| CVE-2015-3195 | 5.3 | Dec 6 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors… Affected: 10 |
| CVE-2016-0642 | 4.7 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors… Affected: 11; 12; 12 |
| CVE-2009-1961 | 4.7 | Jun 8 | The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to… Affected: 11 |
| CVE-2016-2782 | 4.6 | Apr 27 | The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference… Affected: 11; 11; 12; 12 |
| CVE-2022-31252 | 4.4 | Oct 6 | permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() Affected: 12 |
| CVE-2018-18585 | 4.3 | Oct 23 | chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name) Affected: 11; 12; 12; 12 |
| CVE-2015-7976 | 4.3 | Jan 30 | The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause… Affected: 10; 11; 11; 11; 12 |
| CVE-2016-0668 | 4.1 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect… Affected: 12; 12 |