SL
Product
Suse Linux
207
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Suse Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-0085 | – | Apr 27 | Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not… Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2005-0206 | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… Affected: 1.0; 2.0; 3.0; 4.0; 4.2; 4.3; +34 more |
| CVE-2004-1235 | – | Apr 14 | Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1176 | – | Apr 14 | Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1175 | – | Apr 14 | fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1174 | – | Apr 14 | direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles." Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1093 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory." Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1092 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1091 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1090 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header." Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1009 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1005 | – | Apr 14 | Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1004 | – | Apr 14 | Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2005-1043 | – | Apr 14 | exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes… Affected: 1.0; 2.0; 3.0; 4.0; 4.2; 4.3; +34 more |
| CVE-2004-1237 | – | Apr 14 | Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2005-0750 | – | Mar 27 | The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or… Affected: 1.0; 9.3 |
| CVE-2005-0384 | – | Mar 15 | Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client Affected: 8.2; 9.0; 9.1; 9.2 |
| CVE-2005-0470 | – | Mar 14 | Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-Key packet data Affected: 9.2; 9.2 |
| CVE-2005-0398 | – | Mar 14 | The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets Affected: 9.1; 9.1; 9.2; 9.2 |
| CVE-2005-0605 | – | Mar 2 | scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow Affected: 6.1; 6.1; 6.2; 6.3; 6.3; 6.3; +30 more |
| CVE-2005-0639 | – | Mar 2 | Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be… Affected: 1.0; 2.0; 3.0; 4.0; 4.2; 4.3; +34 more |
| CVE-2005-0638 | – | Mar 2 | xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly… Affected: 1.0; 2.0; 3.0; 4.0; 4.2; 4.3; +34 more |
| CVE-2004-0990 | – | Mar 1 | Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary… Affected: 8.0; 8.1; 8.2; 9.0; 9.0; 9.1; +1 more |
| CVE-2004-0981 | – | Feb 9 | Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file Affected: 8.0; 8.1; 8.2; 9.0; 9.0; 9.1; +1 more |
| CVE-2004-0957 | – | Feb 9 | Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases… Affected: 8.0; 8.1; 8.2; 9.0; 9.0; 9.1; +1 more |
| CVE-2004-0947 | – | Feb 9 | Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames Affected: 9.0; 9.1; 9.2 |
| CVE-2004-0937 | – | Feb 9 | Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with… Affected: 9.2 |
| CVE-2005-0156 | – | Feb 7 | Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG… Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0933 | – | Jan 27 | Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion… Affected: 9.2 |
| CVE-2004-0936 | – | Jan 27 | RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed… Affected: 9.2 |
| CVE-2004-0935 | – | Jan 27 | Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero,… Affected: 9.2 |
| CVE-2004-0934 | – | Jan 27 | Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the… Affected: 9.2 |
| CVE-2004-0887 | – | Jan 27 | SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges Affected: 9.0; 9.0 |
| CVE-2004-0886 | – | Jan 27 | Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +1 more |
| CVE-2004-0932 | – | Jan 27 | McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via… Affected: 9.2 |
| CVE-2004-0929 | – | Jan 27 | Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +1 more |
| CVE-2004-0903 | – | Jan 27 | Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0902 | – | Jan 27 | Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0889 | – | Jan 27 | Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute… Affected: 8.0; 8.1; 8.2; 9.0; 9.0; 9.1; +1 more |
| CVE-2004-0888 | – | Jan 27 | Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service… Affected: 8.0; 8.1; 8.2; 9.0; 9.0; 9.1; +1 more |
| CVE-2004-1184 | – | Jan 21 | The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters Affected: 1.0; 2.0; 3.0; 4.0; 4.2; 4.3; +34 more |
| CVE-2004-0991 | – | Jan 11 | Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0883 | – | Jan 10 | Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +3 more |
| CVE-2004-0914 | – | Jan 10 | Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3)… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0949 | – | Jan 10 | The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +3 more |
| CVE-2004-0956 | – | Jan 10 | MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote Affected: 8.0; 8.1; 8.2; 9.0; 9.0; 9.1; +1 more |
| CVE-2004-1070 | – | Jan 10 | The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +3 more |
| CVE-2004-1071 | – | Jan 10 | The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +3 more |
| CVE-2004-1072 | – | Jan 10 | The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +3 more |
| CVE-2004-1073 | – | Jan 10 | The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +3 more |