LE
Product
Linux Enterprise Server
On CISA KEVExploited in the wildRansomware-linked
476
CVEs
20
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 30High 64Medium 60Low 4
Watch
Add Linux Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31252 | 4.4 | Oct 6 | permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() Affected: 12 |
| CVE-2018-18585 | 4.3 | Oct 23 | chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name) Affected: 11; 12; 12; 12 |
| CVE-2015-7976 | 4.3 | Jan 30 | The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause… Affected: 10; 11; 11; 11; 12 |
| CVE-2016-0668 | 4.1 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect… Affected: 12; 12 |
| CVE-2015-4000 | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: 11.0 |
| CVE-2015-2808 | 3.7 | Apr 1 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for… Affected: 10; 11; 11; 11; 12 |
| CVE-2019-3687 | 3.3 | Jan 24 | The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic Affected: All versions, or not specified |
| CVE-2020-8013 | 2.5 | Mar 2 | A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set… Affected: 11; 12; 15 |
| CVE-2015-5006 | – | Dec 7 | IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow… Affected: 11; 11; 11; 11; 12 |
| CVE-2015-0272 | – | Nov 17 | GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a… Affected: 11; 11; 11; 11; 11; 12; +1 more |
| CVE-2015-8126 | – | Nov 13 | Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x… Affected: 12; 12 |
| CVE-2015-2697 | – | Nov 9 | The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds… Affected: 12 |
| CVE-2015-2696 | – | Nov 9 | lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect… Affected: 12 |
| CVE-2015-2695 | – | Nov 9 | lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service… Affected: 11; 11; 12 |
| CVE-2015-4830 | – | Oct 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to… Affected: 11; 11 |
| CVE-2015-1781 | – | Sep 28 | Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a… Affected: 11; 11; 11 |
| CVE-2015-5165 | – | Aug 12 | The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via… Affected: 10; 11 |
| CVE-2015-5154 | – | Aug 12 | Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute… Affected: 11 |
| CVE-2015-1283 | – | Jul 23 | Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a… Affected: 11; 12; 12 |
| CVE-2015-2738 | – | Jul 6 | The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and… Affected: 11 |
| CVE-2015-2737 | – | Jul 6 | The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before… Affected: 11 |
| CVE-2015-2734 | – | Jul 6 | The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and… Affected: 11 |
| CVE-2015-3209 | – | Jun 15 | Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted… Affected: 10; 11; 11; 11; 12 |
| CVE-2015-4106 | – | Jun 3 | QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a… Affected: 11; 11; 11; 12 |
| CVE-2015-0797 | – | May 14 | GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of… Affected: 11; 11 |
| CVE-2015-2576 | – | Apr 16 | Unspecified vulnerability in the MySQL Utilities component in Oracle MySQL 1.5.1 and earlier, when running on Windows, allows local users to affect integrity via unknown vectors… Affected: 11; 11 |
| CVE-2015-2575 | – | Apr 16 | Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via… Affected: 11; 11 |
| CVE-2015-2573 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL Affected: 11; 11 |
| CVE-2015-2571 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11; 11 |
| CVE-2015-2568 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server :… Affected: 11; 11 |
| CVE-2015-0505 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL Affected: 11; 11 |
| CVE-2015-0501 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11; 11 |
| CVE-2015-0499 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11; 11 |
| CVE-2015-0492 | – | Apr 16 | Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a… Affected: 11 |
| CVE-2015-0484 | – | Apr 16 | Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors,… Affected: 11 |
| CVE-2015-0441 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11; 11 |
| CVE-2015-0433 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB… Affected: 11; 11 |
| CVE-2013-6501 | – | Mar 30 | The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local… Affected: 11.0; 11.0 |
| CVE-2014-8160 | – | Mar 2 | net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP,… Affected: 11; 12 |
| CVE-2015-0432 | – | Jan 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign… Affected: 12 |
| CVE-2015-0391 | – | Jan 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL Affected: 12 |
| CVE-2015-0382 | – | Jan 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server :… Affected: 12 |
| CVE-2015-0381 | – | Jan 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server :… Affected: 12 |
| CVE-2015-0374 | – | Jan 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related… Affected: 12 |
| CVE-2014-6568 | – | Jan 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server… Affected: 12 |
| CVE-2014-9585 | – | Jan 9 | The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users… Affected: 11; 11; 12 |
| CVE-2014-9584 | – | Jan 9 | The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use… Affected: 10; 11; 11; 12 |
| CVE-2014-7815 | – | Nov 14 | The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value Affected: 12 |
| CVE-2014-0223 | – | Nov 4 | Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a… Affected: 11.0 |
| CVE-2014-0222 | – | Nov 4 | Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version… Affected: 11.0 |