VYPR

Linux Enterprise Server

by SUSE S.A.

CVEs (551)

  • CVE-2019-18905Apr 3, 2020
    SUSE S.A.
    Linux Enterprise Server
    risk 0.00cvss —epss 0.01

    A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue…

  • CVE-2019-18904Apr 3, 2020
    SUSE S.A.
    rmt-server
    risk 0.00cvss —epss 0.02

    A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Public Cloud 15-SP1, SUSE Linux Enterprise Module for Server…

  • CVE-2019-3696Mar 3, 2020
    Performancecopilot
    Pcp
    risk 0.00cvss —epss 0.00

    A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE…

  • CVE-2019-3695Mar 3, 2020
    Performancecopilot
    Pcp
    risk 0.00cvss —epss 0.00

    A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise…

  • CVE-2019-18903Mar 2, 2020
    Schneems
    Wicked
    risk 0.00cvss —epss 0.02

    A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior…

  • CVE-2019-18902Mar 2, 2020
    Schneems
    Wicked
    risk 0.00cvss —epss 0.02

    A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior…

  • CVE-2020-8013Mar 2, 2020
    SUSE S.A.
    permissions
    risk 0.00cvss —epss 0.00

    A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The…

  • CVE-2019-18901Mar 2, 2020
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.00

    A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE…

  • CVE-2019-18897Mar 2, 2020
    SUSE S.A.
    salt-master
    risk 0.00cvss —epss 0.00

    A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise…

  • CVE-2019-3698Feb 28, 2020
    Nagios
    Nagios
    risk 0.00cvss —epss 0.01

    UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This…

  • CVE-2018-20105Jan 27, 2020
    OpenSUSE
    Leap
    risk 0.00cvss —epss 0.00

    A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions…

  • CVE-2018-12476Jan 27, 2020
    SUSE S.A.
    obs-service-tar_scm
    risk 0.00cvss —epss 0.01

    Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects:…

  • CVE-2019-18900Jan 24, 2020
    Novell
    Libzypp
    risk 0.00cvss —epss 0.00

    : Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform…

  • CVE-2019-3693Jan 24, 2020
    GNU
    Mailman
    risk 0.00cvss —epss 0.00

    A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to…

  • CVE-2019-3692Jan 24, 2020
    Isc
    Inn
    risk 0.00cvss —epss 0.01

    The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE…

  • CVE-2019-3687Jan 24, 2020
    SUSE S.A.
    permissions
    risk 0.00cvss —epss 0.00

    The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439…

  • CVE-2019-3691Jan 23, 2020
    MUNGE
    MUNGE
    risk 0.00cvss —epss 0.01

    A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to…

  • CVE-2019-18898Jan 23, 2020
    Trustedcomputinggroup
    Trousers
    risk 0.00cvss —epss 0.00

    UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions…

  • CVE-2019-3688Oct 7, 2019
    Squid Cache
    Squid
    risk 0.00cvss —epss 0.00

    The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the…

  • CVE-2019-3689Sep 19, 2019
    NFS Utils
    nfs-utils
    risk 0.00cvss —epss 0.01

    The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and…

Page 14 of 28