Latest suse linux enterprise desktop Vulnerabilities

● CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
debian/cifs-utils<=2:6.11-3.1<=2:6.8-2<=2:6.14-1
debian/cifs-utils
Samba Cifs-utils<6.15
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
and 56 more
● CVE-2021-4034
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
redhat/polkit<0:0.96-11.el6_10.2
redhat/polkit<0:0.112-26.el7_9.1
redhat/polkit<0:0.112-12.el7_3.1
redhat/polkit<0:0.112-12.el7_4.2
redhat/polkit<0:0.112-18.el7_6.3
redhat/polkit<0:0.112-22.el7_7.2
and 62 more
● CVE-2020-8018
A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to ...
SUSE Linux Enterprise Desktop=15-sp1
● CVE-2020-8017
Opensuse Texlive-filesystem<2017.135-9.5.1
SUSE Linux Enterprise Desktop=15-sp1
Opensuse Texlive-filesystem<2013.74-16.5.1
SUSE Linux Enterprise Software Development Kit=12-sp4
SUSE Linux Enterprise Software Development Kit=12-sp5
Opensuse Texlive-filesystem
and 4 more
● CVE-2020-8016
A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Developmen...
Opensuse Texlive-filesystem<2017.135-9.5.1
SUSE Linux Enterprise Desktop=15-sp1
Opensuse Texlive-filesystem<2013.74-16.5.1
SUSE Linux Enterprise Software Development Kit=12-sp4
SUSE Linux Enterprise Software Development Kit=12-sp5
Opensuse Texlive-filesystem
and 3 more
● CVE-2006-7246
NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.
GNOME NetworkManager>=0.9.0<=0.9.9.98
openSUSE openSUSE=11.4
openSUSE openSUSE=11.3
openSUSE openSUSE=12.1
SUSE Linux Enterprise Desktop=11-sp1
SUSE Linux Enterprise Server=11-sp1
● CVE-2015-5239
Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
QEMU qemu<2.1.0
Fedoraproject Fedora=21
Fedoraproject Fedora=22
Fedoraproject Fedora=23
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
and 16 more
● CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3....
redhat/rh-php71-php<0:7.1.30-1.el7
redhat/rh-php72-php<0:7.2.24-1.el7
PHP PHP<7.1.30
debian/libgd2<=2.2.5-5.1<=2.2.4-1<=2.2.4-2+deb9u4
redhat/php<7.1.30
redhat/php<7.2.19
and 32 more
● CVE-2017-16232
** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c....
Libtiff Libtiff=4.0.8
openSUSE Leap=42.2
openSUSE Leap=42.3
SUSE Linux Enterprise Desktop=12-sp2
SUSE Linux Enterprise Desktop=12-sp3
SUSE Linux Enterprise Server=12-sp2
and 14 more
● CVE-2018-19540
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24...
Jasper Project Jasper=2.0.14
SUSE Linux Enterprise Desktop=12-sp3
SUSE Linux Enterprise Desktop=12-sp4
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server=11-sp4
SUSE Linux Enterprise Server=12-sp1
and 2 more
● CVE-2018-19539
An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.
Jasper Project Jasper=2.0.14
SUSE Linux Enterprise Desktop=12-sp3
SUSE Linux Enterprise Desktop=12-sp4
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server=11-sp4
SUSE Linux Enterprise Server=12-sp1
and 3 more
● CVE-2018-19543
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
Jasper Project Jasper=2.0.14
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Debian Debian Linux=8.0
SUSE Linux Enterprise Desktop=12-sp3
SUSE Linux Enterprise Desktop=12-sp4
and 4 more
● CVE-2018-19542
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.
Jasper Project Jasper=2.0.14
Canonical Ubuntu Linux=16.04
SUSE Linux Enterprise Desktop=12-sp3
SUSE Linux Enterprise Desktop=12-sp4
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server=11-sp4
and 4 more
● CVE-2018-19541
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24...
Jasper Project Jasper=2.0.14
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
SUSE Linux Enterprise Desktop=12-sp3
SUSE Linux Enterprise Desktop=12-sp4
SUSE Linux Enterprise Server=11-sp3
and 4 more
● CVE-2018-18873
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
Jasper Project Jasper=2.0.14
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Debian Debian Linux=8.0
SUSE Linux Enterprise Desktop=12-sp3
SUSE Linux Enterprise Desktop=12-sp4
and 4 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203