SUSE SUSE Linux Enterprise Server 15
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-45154 | supportutils – 3.1.21-150000.5.44.1 | supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh | MEDIUM 5.5 | 0.2 % | ||
| CVE-2019-18905 | autoyast2 – 4.0.70-3.20.1 | Deprecated functionality in autoyast2 automatically imports gpg keys without checking them | MEDIUM 5.9 | 0.7 % | ||
| CVE-2019-18903 | wicked – < 0.6.60-28.26.1 | wicked: Use-after-free when receiving invalid DHCP6 IA_PD option | CRITICAL 9.8 | 2.4 % | ||
| CVE-2019-18902 | wicked – < 0.6.60-3.21.1 | wicked: Use-after-free when receiving invalid DHCP6 client options | CRITICAL 9.8 | 2.4 % | ||
| CVE-2020-8013 | permissions – < 20181116-9.23.1 | permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim | LOW 2.5 | 0.3 % | ||
| CVE-2019-18901 | mariadb – < 10.2.31-3.26.1 | mysql-systemd-helper allows setting 640 permissions of arbitrary files | MEDIUM 5.5 | 0.4 % | ||
| CVE-2019-18897 | salt-master – 2019.2.0-6.21.1 | Local privilege escalation from user salt to root | HIGH 8.4 | 0.4 % | ||
| CVE-2018-20105 | yast2-rmt – < 1.2.2 | yast2-rmt exposes CA private key passhrase in log-file | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-12476 | obs-service-tar_scm – < 0.9.2.1537788075.fefaa74: | obs-service-extract_file's outfilename parameter allows to write files outside of package directory | HIGH 7.5 | 1.0 % | ||
| CVE-2019-18900 | libzypp 17.19.0-3.34.1 | libzypp stores cookies world readable | MEDIUM 4.0 | 0.3 % | ||
| CVE-2019-3691 | munge – < 0.5.13-4.3.1 | Local privilege escalation from user munge to root | HIGH 7.8 | 0.5 % | ||
| CVE-2019-3688 | squid – 4.8-5.8.1 | squid: /usr/sbin/pinger packaged with wrong permission | HIGH 7.1 | 0.3 % | ||
| CVE-2019-3689 | before and including version 2.1.1-6.10.2 | nfs-utils: root-owned files stored in insecure /var/lib/nfs directory | CRITICAL 9.8 | 1.5 % |