SL
Product
Suse Linux
207
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Suse Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-1096 | – | Jan 10 | Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both… Affected: 9.2 |
| CVE-2004-1098 | – | Jan 10 | MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the… Affected: 8.0; 8.1; 8.2; 9.0; 9.0; 9.1; +1 more |
| CVE-2004-1154 | – | Jan 10 | Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly… Affected: 1.0; 8.1; 8.2; 9.0; 9.0; 9.0; +2 more |
| CVE-2004-1170 | – | Jan 10 | a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename Affected: 8; 8.1; 8.2; 9.0; 9.0; 9.0; +1 more |
| CVE-2004-1190 | – | Jan 10 | SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to… Affected: 8.1; 8.1; 8.2; 8.2; 9.0 |
| CVE-2004-1191 | – | Jan 10 | Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow local users to read unauthorized memory from "foreign memory… Affected: 8.1; 9.2 |
| CVE-2004-0592 | – | Dec 31 | The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote… Affected: 2.6.5 |
| CVE-2004-2658 | – | Dec 31 | resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types Affected: 9.0 |
| CVE-2004-2097 | – | Dec 31 | Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on (1) /tmp/fvwm-bug created by fvwm-bug, (2) /tmp/wmmenu created by… Affected: 9.0 |
| CVE-2004-1895 | – | Dec 31 | YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies Affected: 8.2; 9.0; 9.0 |
| CVE-2004-1491 | – | Dec 31 | Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec… Affected: 1.0; 2.0; 3.0; 4.0; 4.2; 4.3; +26 more |
| CVE-2004-1476 | – | Dec 31 | Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an… Affected: 8.0; 8.1; 8.2; 9.0; 9.0; 9.1; +1 more |
| CVE-2004-0817 | – | Dec 31 | Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0802 | – | Dec 31 | Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than… Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0867 | – | Dec 23 | Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform… Affected: 1.0; 8; 8.1; 8.2; 9.0 |
| CVE-2004-0803 | – | Dec 23 | Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +1 more |
| CVE-2004-1142 | – | Dec 15 | Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1145 | – | Dec 15 | Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java… Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-1139 | – | Dec 15 | Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash) Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0497 | – | Dec 6 | Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4 Affected: 8.0; 8.1; 8.2; 9.0; 9.1 |
| CVE-2004-0626 | – | Dec 6 | The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU… Affected: 8.0; 8.1; 8.2; 9.0; 9.1 |
| CVE-2004-0496 | – | Dec 6 | Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in… Affected: 7; 8 |
| CVE-2004-0687 | – | Oct 20 | Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote… Affected: 8; 8.1; 8.2; 9.0; 9.0; 9.0; +1 more |
| CVE-2004-0746 | – | Oct 20 | Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote… Affected: 8; 8.1; 8.2; 9.0; 9.0; 9.0; +1 more |
| CVE-2004-0688 | – | Oct 20 | Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm… Affected: 8; 8.1; 8.2; 9.0; 9.0; 9.0; +1 more |
| CVE-2005-0373 | – | Oct 7 | Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows… Affected: 1.0; 8.0; 8.0; 8.1; 8.2; 9.0; +6 more |
| CVE-2004-0827 | – | Sep 16 | Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and… Affected: 8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0866 | – | Sep 16 | Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform… Affected: 1.0; 8; 8.1; 8.2; 9.0 |
| CVE-2004-0905 | – | Sep 14 | Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute… Affected: 1.0; 8; 8.1; 8.2; 9.0; 9.0; +2 more |
| CVE-2004-0807 | – | Sep 13 | Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be… Affected: 8; 8.1; 8.2; 9.0; 9.0; 9.0; +1 more |
| CVE-2004-0460 | – | Aug 6 | Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and… Affected: 7; 8; 8.0; 8.0; 8.1; 8.2; +3 more |
| CVE-2004-0587 | – | Aug 6 | Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service Affected: 8; 8.1; 9.0 |
| CVE-2004-0554 | – | Aug 6 | Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain… Affected: 7; 8; 8.0; 8.0; 8.1; 8.2; +3 more |
| CVE-2004-0535 | – | Aug 6 | The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory Affected: 7; 8; 8.0; 8.0; 8.1; 8.2; +3 more |
| CVE-2004-0495 | – | Aug 6 | Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool Affected: 7; 8; 8.0; 8.0; 8.1; 8.2; +3 more |
| CVE-2004-0461 | – | Aug 6 | The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf… Affected: 7; 8; 8.0; 8.0; 8.1; 8.2; +3 more |
| CVE-2004-2004 | – | May 6 | The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH Affected: 9.1 |
| CVE-2004-0064 | – | Feb 17 | The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the… Affected: 9.0 |
| CVE-2003-1538 | – | Dec 31 | susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute… Affected: 8; 8.1 |
| CVE-2003-1295 | – | Dec 31 | Unspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to cause xscreensaver to crash via unspecified vectors "while verifying the… Affected: 9.0 |
| CVE-2003-0846 | – | Nov 17 | SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a symlink attack on the .java_wrapper temporary file Affected: 7.3 |
| CVE-2003-0847 | – | Nov 17 | SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file Affected: 8.2 |
| CVE-2002-2185 | – | Dec 31 | The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast… Affected: 6.4; 6.4; 6.4; 7.0; 7.0; 7.0; +10 more |
| CVE-2002-1285 | – | Nov 29 | runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments Affected: 7.0; 7.1; 7.2; 7.3; 8.0; 8.1 |
| CVE-2002-0854 | – | Sep 5 | Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain… Affected: 7.3; 8.0 |
| CVE-2002-0762 | – | Aug 12 | shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before… Affected: 8.0 |
| CVE-2002-0768 | – | Aug 12 | Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV… Affected: 6.4; 7.0; 7.1; 7.2; 7.3; 8.0 |
| CVE-2002-0758 | – | Aug 12 | ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file Affected: 8.0 |
| CVE-2002-0062 | – | Mar 8 | Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the… Affected: 6.2; 6.3; 7.0 |
| CVE-2002-0004 | – | Feb 27 | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice Affected: 6.4; 6.4; 6.4; 7.0; 7.0; 7.0; +9 more |