Advisories · Technology

SUSE Linux Enterprise Server for SAP 15.

Every CVE that names SUSE Linux Enterprise Server for SAP 15 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-31254 CVE record

CVSS 7.8 High

rmt-server-pubcloud allows to escalate from user _rmt to root
- SUSE Linux Enterprise Server for SAP 15
- SUSE Linux Enterprise Server for SAP 15-SP1
- Broken access control
Not analysed yet 7 Feb 2023
CVE-2020-8027 CVE record

CVSS 7.3 High

openldap uses fixed paths in /tmp
- SUSE Linux Enterprise Server 15-LTSS
- SUSE Linux Enterprise Server for SAP 15
- CWE-377
Not analysed yet 11 Feb 2021
CVE-2020-8023 CVE record

CVSS 7.7 High

Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2
- SUSE Enterprise Storage 5
- SUSE Linux Enterprise Debuginfo 11-SP3
- CWE-349
Not analysed yet 1 Sept 2020
CVE-2020-8025 CVE record

CVSS 6.1 Medium

outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
- SUSE Linux Enterprise Server 12-SP4
- SUSE Linux Enterprise Server 15-LTSS
- CWE-279
Not analysed yet 7 Aug 2020
CVE-2019-18904 CVE record

CVSS 6.5 Medium

Migrations requests can cause DoS on rmt
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- Denial of service
Not analysed yet 3 Apr 2020
CVE-2019-3696 CVE record

CVSS 8.4 High

pcp: Local privilege escalation from user pcp to root through migrate_tempdirs
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- Path traversal
Not analysed yet 3 Mar 2020
CVE-2019-3695 CVE record

CVSS 8.4 High

pcp: Local privilege escalation from user pcp to root
- SUSE Linux Enterprise High Performance Computing 15-ESPOS
- SUSE Linux Enterprise High Performance Computing 15-LTSS
- Code injection
Not analysed yet 3 Mar 2020