SL
Product
Suse Linux
207
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Suse Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-0083 | 9.8 | Mar 15 | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges Affected: 6.4; 6.4; 6.4; 7.0; 7.0; 7.0; +9 more |
| CVE-1999-0426 | 9.8 | Mar 1 | The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing Affected: 6.0 |
| CVE-2017-3224 | 8.2 | Jul 24 | Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber Affected: All versions, or not specified |
| CVE-2004-0940 | 7.8 | Feb 9 | Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via… Affected: 8.0; 8.1; 8.2; 9.0; 9.1; 9.2 |
| CVE-2024-12087 | 7.5 | Jan 14 | Rsync: path traversal vulnerability in rsync Affected: All versions, or not specified |
| CVE-2024-12085 | 7.5 | Jan 14 | Rsync: info leak via uninitialized stack contents Affected: All versions, or not specified |
| CVE-2024-12086 | 6.8 | Jan 14 | A flaw was found in rsync Affected: All versions, or not specified |
| CVE-2010-0230 | – | Jan 22 | SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access… Affected: 10; 10 |
| CVE-2009-1648 | – | Jul 5 | The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall in certain circumstances involving reboots during online… Affected: 11; 11 |
| CVE-2008-3949 | – | Sep 22 | emacs/lisp/progmodes/python.el in Emacs 22.1 and 22.2 imports Python script from the current working directory during editing of a Python file, which allows local users to execute… Affected: All versions, or not specified |
| CVE-2007-6167 | – | Nov 29 | Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working… Affected: All versions, or not specified |
| CVE-2007-5471 | – | Oct 16 | libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to… Affected: 10 |
| CVE-2007-5195 | – | Oct 14 | Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers… Affected: 10 |
| CVE-2007-5196 | – | Oct 14 | Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers… Affected: 10 |
| CVE-2007-4432 | – | Aug 20 | Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux 10.1 and Enterprise 10… Affected: 10 |
| CVE-2007-4393 | – | Aug 17 | The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk… Affected: All versions, or not specified |
| CVE-2007-4394 | – | Aug 17 | Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before 20070810 allows… Affected: 9.0; 10 |
| CVE-2007-4074 | – | Jul 30 | The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo Linux, SUSE Linux, and possibly other distributions, is run… Affected: All versions, or not specified |
| CVE-2007-2654 | – | May 14 | xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems Affected: 1.0; 8; 9.0 |
| CVE-2007-0460 | – | Jan 24 | Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other distributions, have unknown impact and attack vectors related to "improper string length… Affected: through 10.1; 9.3 |
| CVE-2006-6662 | – | Dec 20 | Unspecified vulnerability in Linux User Management (novell-lum) on SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9, under unspecified conditions, allows local users… Affected: 10 |
| CVE-2006-5616 | – | Oct 31 | Multiple unspecified vulnerabilities in OpenPBS, as used in SUSE Linux 9.2 through 10.1, allow attackers to execute arbitrary code via unspecified vectors Affected: 9.2; 9.2; 9.2; 9.3; 9.3; 9.3; +3 more |
| CVE-2006-2658 | – | Sep 12 | Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote… Affected: 9.2; 9.2; 9.2; 9.3; 9.3; 9.3; +4 more |
| CVE-2006-2703 | – | Jun 1 | The RedCarpet command-line client (rug) does not verify SSL certificates from a server, which allows remote attackers to read network traffic and execute commands via a… Affected: 9.0; 9.0 |
| CVE-2006-2752 | – | Jun 1 | The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows attackers to obtain the rc (RedCarpet)… Affected: 9.0; 9.0 |
| CVE-2006-0745 | – | Mar 21 | X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid,… Affected: 10.0 |
| CVE-2006-0803 | – | Feb 23 | The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents… Affected: 9.3 |
| CVE-2006-0646 | – | Feb 11 | ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute… Affected: 9.0; 9.1; 9.1; 9.1; 9.2; 9.2; +5 more |
| CVE-2006-0043 | – | Jan 31 | Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors… Affected: 1.0; 9.1; 9.1; 9.1; 9.2; 9.2; +5 more |
| CVE-2005-4789 | – | Dec 31 | resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude rules in some situations, which allows local users to bypass… Affected: 9.2; 9.3 |
| CVE-2005-4788 | – | Dec 31 | resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules for USB devices via "alternate syntax for specifying USB… Affected: 9.2; 9.3 |
| CVE-2005-4772 | – | Dec 31 | liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to… Affected: 1.0; 8; 8.0; 8.2; 8.2; 9.0; +15 more |
| CVE-2005-3626 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… Affected: 1.0; 9.0; 9.0; 9.0; 9.0; 9.0; +11 more |
| CVE-2005-3625 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… Affected: 1.0; 9.0; 9.0; 9.0; 9.0; 9.0; +11 more |
| CVE-2005-3624 | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… Affected: 1.0; 9.0; 9.0; 9.0; 9.0; 9.0; +11 more |
| CVE-2005-4790 | – | Dec 31 | Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which… Affected: 9.3 |
| CVE-2005-3321 | – | Oct 27 | chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link… Affected: 9.0; 9.0; 9.1; 9.1; 9.2; 9.2; +2 more |
| CVE-2005-3322 | – | Oct 27 | Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL) Affected: 9.0 |
| CVE-2005-3298 | – | Oct 23 | Multiple buffer overflows in OpenWBEM on SuSE Linux 9 allow remote attackers to execute arbitrary code via unknown vectors Affected: 9.0 |
| CVE-2005-3147 | – | Oct 5 | StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information Affected: All versions, or not specified |
| CVE-2005-3146 | – | Oct 5 | StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files Affected: All versions, or not specified |
| CVE-2005-3148 | – | Oct 5 | StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could… Affected: All versions, or not specified |
| CVE-2005-3013 | – | Sep 21 | Buffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local users to execute arbitrary code via a long Loc entry Affected: 9.3; 9.3; 9.3 |
| CVE-2005-1767 | – | Aug 5 | traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault… Affected: 1.0; 8; 9.0; 9.0; 9.1; 9.2; +1 more |
| CVE-2005-1761 | – | Aug 5 | Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function Affected: 1.0; 8; 9.0; 9.0; 9.1; 9.2; +1 more |
| CVE-2005-2023 | – | Jun 17 | The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes… Affected: 9.3 |
| CVE-2005-1763 | – | Jun 9 | Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory Affected: 1.0; 8; 9.0 |
| CVE-2005-0337 | – | May 2 | Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and… Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2005-0207 | – | May 2 | Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2005-0005 | – | May 2 | Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a… Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |