LE
Product
Linux Enterprise Software Development Kit
On CISA KEVExploited in the wildRansomware-linked
297
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 23High 27Medium 29Low 2
Watch
Add Linux Enterprise Software Development Kit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4495 In wildKEV | 8.8 | Aug 8 | Mozilla Firefox Security Feature Bypass Vulnerability Affected: 11; 11; 12 |
| CVE-2013-1690 In wildKEV | 8.8 | Jun 26 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Affected: 10; 11 |
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 11; 11; 12 |
| CVE-2016-3630 | 8.8 | Apr 13 | The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing… Affected: 11; 12; 12 |
| CVE-2016-3069 | 8.8 | Apr 13 | Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository Affected: 11; 12; 12 |
| CVE-2016-3068 | 8.8 | Apr 13 | Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository Affected: 11; 12; 12 |
| CVE-2010-2753 | 8.8 | Jul 30 | Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote… Affected: 11; 11 |
| CVE-2016-1286 | 8.6 | Mar 9 | named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature… Affected: 11; 12; 12 |
| CVE-2015-7547 | 8.1 | Feb 18 | Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote… Affected: 11.0; 11.0; 12; 12 |
| CVE-2022-27239 | 7.8 | Apr 27 | In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges Affected: 12 |
| CVE-2014-1947 | 7.8 | Feb 17 | Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and… Affected: 11 |
| CVE-2017-1000366 | 7.8 | Jun 19 | glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code… Affected: 11.0; 12.0 |
| CVE-2016-9959 | 7.8 | Apr 12 | game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values Affected: 12 |
| CVE-2016-9958 | 7.8 | Apr 12 | game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations Affected: 12 |
| CVE-2016-9957 | 7.8 | Apr 12 | Stack-based buffer overflow in game-music-emu before 0.6.1 Affected: 12 |
| CVE-2015-8931 | 7.8 | Sep 20 | Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to… Affected: 12 |
| CVE-2015-8567 | 7.7 | Apr 13 | Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption) Affected: 11; 12; 12 |
| CVE-2017-16232 | 7.5 | Mar 17 | LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and… Affected: 12; 12 |
| CVE-2015-5300 | 7.5 | Jul 21 | The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote… Affected: 12; 12 |
| CVE-2015-4680 | 7.5 | Apr 5 | FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates Affected: 12; 12 |
| CVE-2016-7797 | 7.5 | Mar 24 | Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection Affected: 12 |
| CVE-2016-9398 | 7.5 | Mar 23 | The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors Affected: 12; 12 |
| CVE-2014-9854 | 7.5 | Mar 17 | coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image." Affected: 11 |
| CVE-2015-8930 | 7.5 | Sep 20 | bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself Affected: 12 |
| CVE-2014-3687 | 7.5 | Nov 10 | The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of… Affected: 12 |
| CVE-2014-3673 | 7.5 | Nov 10 | The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to… Affected: 12 |
| CVE-2008-0063 | 7.5 | Mar 19 | The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote… Affected: 10 |
Showing 27