Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

novell suse linux enterprise desktop 11.0 vulnerabilities and exploits

(subscribe to this query)
3.5
CVSSv3
CVE-2015-6815
The process_tx_desc function in hw/net/e1000.c in QEMU prior to 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows malicious users to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
Qemu QemuFedoraproject Fedora 22Fedoraproject Fedora 23Fedoraproject Fedora 21Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Desktop 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Openstack 5.0Redhat Openstack 7.0Redhat Enterprise Linux 5.0Redhat Openstack 6.0Xen Xen 4.4.3Xen Xen 4.5.1
5.5
CVSSv3
CVE-2014-9853
Memory leak in coders/rle.c in ImageMagick allows remote malicious users to cause a denial of service (memory consumption) via a crafted rle file.
Imagemagick Imagemagick -Suse Linux Enterprise Server 11Opensuse Project Suse Linux Enterprise Software Development Kit 11.0Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 12Novell Leap 42.2Suse Linux Enterprise Workstation Extension 12Opensuse Opensuse 13.2Suse Linux Enterprise Debuginfo 11Suse Linux Enterprise Software Development Kit 12Opensuse Leap 42.1Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 16.10
4.3
CVSSv3
CVE-2015-7976
The ntpq saveconfig command in NTP 4.1.2, 4.2.x prior to 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows malicious users to cause unspecified impact via a crafted filename.
Ntp Ntp 4.1.2Ntp NtpNtp Ntp 4.3.0Ntp Ntp 4.3.1Ntp Ntp 4.3.16Ntp Ntp 4.3.17Ntp Ntp 4.3.24Ntp Ntp 4.3.25Ntp Ntp 4.3.31Ntp Ntp 4.3.32Ntp Ntp 4.3.39Ntp Ntp 4.3.4Ntp Ntp 4.3.47Ntp Ntp 4.3.48Ntp Ntp 4.3.54Ntp Ntp 4.3.55Ntp Ntp 4.3.61Ntp Ntp 4.3.62Ntp Ntp 4.3.63Ntp Ntp 4.3.7Ntp Ntp 4.3.70Ntp Ntp 4.3.77
6.2
CVSSv3
CVE-2016-4482
The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel up to and including 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Linux Linux KernelNovell Suse Linux Enterprise Module For Public Cloud 12.0Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Live Patching 12.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Real Time Extension 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0Fedoraproject Fedora 24
3.3
CVSSv3
CVE-2016-4486
The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel prior to 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.
Novell Suse Linux Enterprise Module For Public Cloud 12.0Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Live Patching 12.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Real Time Extension 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Linux Linux Kernel
5.5
CVSSv3
CVE-2016-4569
The snd_timer_user_params function in sound/core/timer.c in the Linux kernel up to and including 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.
Linux Linux KernelCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Novell Suse Linux Enterprise Module For Public Cloud 12.0Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Live Patching 12.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Real Time Extension 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0
7.8
CVSSv3
CVE-2016-4805
Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel prior to 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to...
Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Module For Public Cloud 12.0Novell Suse Linux Enterprise Server 11.0Novell Opensuse Leap 42.1Novell Suse Linux Enterprise Software Development Kit 11.0Redhat Enterprise Linux 6.0Canonical Ubuntu Linux 12.04Linux Linux KernelNovell Suse Linux Enterprise Software Development Kit 12.0Novell Suse Linux Enterprise Server 12.0Redhat Enterprise Linux 7.0Oracle Linux 6Novell Suse Linux Enterprise Real Time Extension 11.0Novell Suse Linux Enterprise Real Time Extension 12.0Novell Suse Linux Enterprise Live Patching 12.0
4.6
CVSSv3
CVE-2016-3137
drivers/usb/serial/cypress_m8.c in the Linux kernel prior to 4.5.1 allows physically proximate malicious users to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoint descriptor, related ...
Novell Suse Linux Enterprise Module For Public Cloud 12.0Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Live Patching 12.0Novell Suse Linux Enterprise Real Time Extension 11.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Real Time Extension 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Linux Linux Kernel
4.6
CVSSv3
CVE-2016-3138
The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel prior to 4.5.1 allows physically proximate malicious users to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor.
Linux Linux KernelCanonical Ubuntu Linux 12.04Novell Suse Linux Enterprise Module For Public Cloud 12.0Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Live Patching 12.0Novell Suse Linux Enterprise Real Time Extension 11.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Real Time Extension 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0
4.6
CVSSv3
CVE-2016-3140
The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel prior to 4.5.1 allows physically proximate malicious users to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Linux Linux KernelNovell Suse Linux Enterprise Module For Public Cloud 12.0Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Live Patching 12.0Novell Suse Linux Enterprise Real Time Extension 11.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Real Time Extension 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook