Advisories · Technology

SUSE Linux Enterprise Server 15-LTSS.

Every CVE that names SUSE Linux Enterprise Server 15-LTSS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-8027 CVE record

CVSS 7.3 High

openldap uses fixed paths in /tmp
- SUSE Linux Enterprise Server 15-LTSS
- SUSE Linux Enterprise Server for SAP 15
- CWE-377
Not analysed yet 11 Feb 2021
CVE-2020-8023 CVE record

CVSS 7.7 High

Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2
- SUSE Enterprise Storage 5
- SUSE Linux Enterprise Debuginfo 11-SP3
- CWE-349
Not analysed yet 1 Sept 2020
CVE-2020-8025 CVE record

CVSS 6.1 Medium

outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
- SUSE Linux Enterprise Server 12-SP4
- SUSE Linux Enterprise Server 15-LTSS
- CWE-279
Not analysed yet 7 Aug 2020
CVE-2019-18904 CVE record

CVSS 6.5 Medium

Migrations requests can cause DoS on rmt
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- Denial of service
Not analysed yet 3 Apr 2020
CVE-2019-3696 CVE record

CVSS 8.4 High

pcp: Local privilege escalation from user pcp to root through migrate_tempdirs
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- Path traversal
Not analysed yet 3 Mar 2020
CVE-2019-3695 CVE record

CVSS 8.4 High

pcp: Local privilege escalation from user pcp to root
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- Code injection
Not analysed yet 3 Mar 2020