Advisories · Technology

SUSE Linux Enterprise Server 15.

Every CVE that names SUSE Linux Enterprise Server 15 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-45154 CVE record

CVSS 4.4 Medium

supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- Information disclosure
Not analysed yet 15 Feb 2023
CVE-2019-18905 CVE record

CVSS 4.8 Medium

Deprecated functionality in autoyast2 automatically imports gpg keys without checking them
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- CWE-345
Not analysed yet 3 Apr 2020
CVE-2019-18903 CVE record

CVSS 7.5 High

wicked: Use-after-free when receiving invalid DHCP6 IA_PD option
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- Memory corruption
Not analysed yet 2 Mar 2020
CVE-2019-18902 CVE record

CVSS 7.5 High

wicked: Use-after-free when receiving invalid DHCP6 client options
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- Memory corruption
Not analysed yet 2 Mar 2020
CVE-2020-8013 CVE record

CVSS 2.2 Low

permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- Path traversal
Not analysed yet 2 Mar 2020
CVE-2019-18901 CVE record

CVSS 5.1 Medium

mysql-systemd-helper allows setting 640 permissions of arbitrary files
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- Path traversal
Not analysed yet 2 Mar 2020
CVE-2019-18897 CVE record

CVSS 8.4 High

Local privilege escalation from user salt to root
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- Path traversal
Not analysed yet 2 Mar 2020
CVE-2018-20105 CVE record

CVSS 4.0 Medium

yast2-rmt exposes CA private key passhrase in log-file
- SUSE Linux Enterprise Server 15
- openSUSE Leap
- Information disclosure
Not analysed yet 27 Jan 2020
CVE-2018-12476 CVE record

CVSS 4.3 Medium

obs-service-extract_file's outfilename parameter allows to write files outside of package directory
- SUSE Linux Enterprise Server 15
- openSUSE Factory
- Path traversal
Not analysed yet 27 Jan 2020
CVE-2019-18900 CVE record

CVSS 4.0 Medium

libzypp stores cookies world readable
- SUSE CaaS Platform 3.0
- SUSE Linux Enterprise Server 12
- Broken access control
Not analysed yet 24 Jan 2020
CVE-2019-3691 CVE record

CVSS 7.7 High

Local privilege escalation from user munge to root
- SUSE Linux Enterprise Server 15
- openSUSE Factory
- Path traversal
Not analysed yet 23 Jan 2020
CVE-2019-3688 CVE record

CVSS 5.1 Medium

squid: /usr/sbin/pinger packaged with wrong permission
- SUSE Linux Enterprise Server 15
- SUSE Linux Enterprise Server 12
- Broken access control
Not analysed yet 7 Oct 2019
CVE-2019-3689 CVE record

CVSS 5.1 Medium

nfs-utils: root-owned files stored in insecure /var/lib/nfs directory
- SUSE Linux Enterprise Server 12
- SUSE Linux Enterprise Server 15
- Broken access control
Not analysed yet 19 Sept 2019