Advisories · Technology

SUSE Linux Enterprise Server 12 SP5.

Every CVE that names SUSE Linux Enterprise Server 12 SP5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-22034 CVE record

CVSS 5.5 Medium

Crafted projects can overwrite special files in the .osc config directory
- SUSE Linux Enterprise Desktop 15 SP5
- SUSE Linux Enterprise High Performance Computing 15 SP5
Not analysed yet 16 Oct 2024
CVE-2022-31252 CVE record

CVSS 4.4 Medium

permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()
- SUSE Linux Enterprise Server 12-SP5
- openSUSE Leap 15.3
- Broken access control
Not analysed yet 6 Oct 2022
CVE-2021-25316 CVE record

CVSS 3.3 Low

Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools
- SUSE Linux Enterprise Server 12-SP5
- SUSE Linux Enterprise Server 15-SP2
- CWE-377
Not analysed yet 14 Apr 2021
CVE-2020-8023 CVE record

CVSS 7.7 High

Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2
- SUSE Enterprise Storage 5
- SUSE Linux Enterprise Debuginfo 11-SP3
- CWE-349
Not analysed yet 1 Sept 2020