Advisories · Technology
openSUSE Leap 15.1.
Every CVE that names openSUSE Leap 15.1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
openldap uses fixed paths in /tmp
- SUSE Linux Enterprise Server 15-LTSS
- SUSE Linux Enterprise Server for SAP 15
- CWE-377
- CVSS 7.7 High
Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2
- SUSE Enterprise Storage 5
- SUSE Linux Enterprise Debuginfo 11-SP3
- CWE-349
- CVSS 6.1 Medium
outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
- SUSE Linux Enterprise Server 12-SP4
- SUSE Linux Enterprise Server 15-LTSS
- CWE-279
- CVSS 8.4 High
inn: non-root owned files
- openSUSE Leap 15.2
- openSUSE Tumbleweed
- Broken access control
- CVSS 7.7 High
kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage
- openSUSE Leap 15.1
- openSUSE Tumbleweed
- CWE-61
- CVSS 7.5 High
osc: stores downloaded (supposed) RPM in network-controlled filesystem paths
- SUSE Linux Enterprise Module for Development Tools 15
- SUSE Linux Enterprise Software Development Kit 12-SP5
- Path traversal
- CVSS 7.7 High
syslog-ng: Local privilege escalation from new to root in %post
- SUSE Linux Enterprise Debuginfo 11-SP3
- SUSE Linux Enterprise Debuginfo 11-SP4
- CWE-61
- CVSS 5.3 Medium
Problematic permissions in hylafax+ packaging allow escalation from uucp to other users
- openSUSE Leap 15.2
- openSUSE Leap 15.1
- Broken access control
- CVSS 6.5 Medium
Migrations requests can cause DoS on rmt
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- Denial of service
- CVSS 6.2 Medium
race condition on texlive-filesystem cron job allows for the deletion of unintended files
- SUSE Linux Enterprise Module for Desktop Applications 15-SP1
- SUSE Linux Enterprise Software Development Kit 12-SP4
- Race condition
- CVSS 4.9 Medium
race condition in the packaging of texlive-filesysten
- SUSE Linux Enterprise Module for Desktop Applications 15-SP1
- SUSE Linux Enterprise Software Development Kit 12-SP4
- Race condition
- CVSS 8.4 High
pcp: Local privilege escalation from user pcp to root through migrate_tempdirs
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- Path traversal
- CVSS 8.4 High
pcp: Local privilege escalation from user pcp to root
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- Code injection
- CVSS 7.5 High
wicked: Use-after-free when receiving invalid DHCP6 IA_PD option
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- Memory corruption
- CVSS 7.5 High
wicked: Use-after-free when receiving invalid DHCP6 client options
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- Memory corruption
- CVSS 7.7 High
Local privilege escalation from user privoxy to root
- openSUSE Leap 15.1
- openSUSE Factory
- Path traversal
- CVSS 7.7 High
Local privilege escalation from user gnump3d to root
- openSUSE Leap 15.1
- Path traversal
- CVSS 7.7 High
Local privilege escalation from munin to root in the packaging of munin
- openSUSE Factory
- openSUSE Leap 15.1
- Path traversal
- CVSS 7.7 High
Local privilege escalation from user wwwrun to root in the packaging of mailman
- SUSE Linux Enterprise Server 11
- SUSE Linux Enterprise Server 12
- Path traversal
- CVSS 7.7 High
Local privilege escalation from user news to root in the packaging of inn
- SUSE Linux Enterprise Server 11
- openSUSE Factory
- Path traversal
- CVSS 6.2 Medium
apt-cacher-ng insecure use of /run/apt-cacher-ng
- openSUSE Leap 15.1
- Privilege escalation