Linux Enterprise Software Development Kit vulnerabilities

Product

Linux Enterprise Software Development Kit

by Suse · last CVE Apr 27, 2022

On CISA KEVExploited in the wildRansomware-linked

297

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities297 In the news2 Timeline

Severity mix

Critical 23High 27Medium 29Low 2

Severity

All severities297 Critical23 High27 Medium29 Low2

Exploitation

On CISA KEV12 Exploited in the wild12

Watch

Add Linux Enterprise Software Development Kit to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-2568	–	7%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server :… Affected: 11
CVE-2015-0505	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL Affected: 11
CVE-2015-0501	–	10%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11
CVE-2015-0499	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11
CVE-2015-0441	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: 11
CVE-2015-0433	–	5%	Apr 16	Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB… Affected: 11
CVE-2014-8160	–	5%	Mar 2	net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP,… Affected: 12
CVE-2015-0432	–	4%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign… Affected: 12
CVE-2015-0391	–	7%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL Affected: 12
CVE-2015-0382	–	10%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server :… Affected: 12
CVE-2015-0381	–	5%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server :… Affected: 12
CVE-2015-0374	–	3%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related… Affected: 12
CVE-2014-6568	–	7%	Jan 21	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server… Affected: 12
CVE-2014-9585	–	1%	Jan 9	The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users… Affected: 12
CVE-2014-9584	–	0%	Jan 9	The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use… Affected: 12
CVE-2014-6564	–	2%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH… Affected: 12
CVE-2014-6559	–	5%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL… Affected: 12
CVE-2014-6555	–	4%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability… Affected: 12
CVE-2014-6551	–	0%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN Affected: 12
CVE-2014-6530	–	3%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and… Affected: 12
CVE-2014-6520	–	3%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL Affected: 12
CVE-2014-6507	–	7%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and… Affected: 12
CVE-2014-6505	–	3%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to… Affected: 12
CVE-2014-6496	–	4%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to… Affected: 12
CVE-2014-6495	–	3%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL Affected: 12
CVE-2014-6494	–	5%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to… Affected: 12
CVE-2014-6484	–	3%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to… Affected: 12
CVE-2014-6478	–	3%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL Affected: 12
CVE-2014-6474	–	1%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED Affected: 12
CVE-2014-6469	–	4%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 12
CVE-2014-6464	–	4%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 12
CVE-2014-6463	–	3%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 12
CVE-2014-4287	–	3%	Oct 15	Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 12
CVE-2014-4260	–	4%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and… Affected: 11; 12
CVE-2014-4258	–	4%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality,… Affected: 11; 12
CVE-2014-4243	–	3%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via… Affected: 11
CVE-2014-4207	–	4%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR Affected: 11; 12
CVE-2014-2494	–	4%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC Affected: 11; 12
CVE-2014-2978	–	6%	Jun 11	The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute… Affected: 12
CVE-2014-2977	–	7%	Jun 11	Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of… Affected: 12
CVE-2014-3470	–	86%	Jun 5	The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used,… Affected: 12
CVE-2014-0221	–	88%	Jun 5	The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service… Affected: 12
CVE-2014-3469	–	4%	Jun 5	The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference… Affected: 11
CVE-2014-3468	–	4%	Jun 5	The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to… Affected: 11
CVE-2014-3467	–	7%	Jun 5	Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via… Affected: 11
CVE-2014-0198	–	40%	May 6	The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive… Affected: 12
CVE-2010-5298	–	34%	Apr 14	Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across… Affected: 12
CVE-2014-2497	–	20%	Mar 21	The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 11
CVE-2014-1502	–	1%	Mar 19	The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the… Affected: 11
CVE-2014-1501	–	2%	Mar 19	Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab"… Affected: 11