Advisories · Technology

openSUSE Leap 15.4.

Every CVE that names openSUSE Leap 15.4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-45153 CVE record

CVSS 7.0 High

saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls
- SUSE Linux Enterprise Module for SAP Applications 15-SP1
- SUSE Linux Enterprise Server for SAP 12-SP5
- Broken access control
Not analysed yet 15 Feb 2023
CVE-2023-22643 CVE record

CVSS 6.3 Medium

libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls
- SUSE Linux Enterprise Server for SAP 15-SP3
- openSUSE Leap 15.4
- Command injection
Not analysed yet 7 Feb 2023
CVE-2022-31254 CVE record

CVSS 7.8 High

rmt-server-pubcloud allows to escalate from user _rmt to root
- SUSE Linux Enterprise Server for SAP 15
- SUSE Linux Enterprise Server for SAP 15-SP1
- Broken access control
Not analysed yet 7 Feb 2023
CVE-2022-31252 CVE record

CVSS 4.4 Medium

permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()
- SUSE Linux Enterprise Server 12-SP5
- openSUSE Leap 15.3
- Broken access control
Not analysed yet 6 Oct 2022