Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

opensuse opensuse 13.2 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2014-5220
The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which allows local malicious users to execute arbitrary commands as root.
Opensuse Opensuse 13.2Mdadm Project Mdadm
8.8
CVSSv3
CVE-2016-5314
Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and previous versions allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwritin...
Libtiff LibtiffOpensuse Opensuse 13.2Opensuse Opensuse 13.1Opensuse Leap 42.1Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Debian Debian Linux 9.0Debian Debian Linux 8.0
5.6
CVSSv3
CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Intel Atom C C2308Intel Atom C C2316Intel Atom C C2338Intel Atom C C2350Intel Atom C C2358Intel Atom C C2508Intel Atom C C2516Intel Atom C C2518Intel Atom C C2530Intel Atom C C2538Intel Atom C C2550Intel Atom C C2558Intel Atom C C2718Intel Atom C C2730Intel Atom C C2738Intel Atom C C2750Intel Atom C C2758Intel Atom C C3308Intel Atom C C3338Intel Atom C C3508Intel Atom C C3538Intel Atom C C3558
7.5
CVSSv3
CVE-2016-1254
Tor prior to 0.2.8.12 might allow remote malicious users to cause a denial of service (client crash) via a crafted hidden service descriptor.
Torproject TorOpensuse Project Leap 42.1Debian Debian Linux 8.0Fedoraproject Fedora 25Fedoraproject Fedora 24Debian Debian Linux 9.0Opensuse Leap 42.2Opensuse Opensuse 13.2
7.5
CVSSv3
CVE-2014-3462
The ".encfs6.xml" configuration file in encfs prior to 1.7.5 allows remote malicious users to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".
Opensuse Leap 42.1Opensuse Leap 42.2Opensuse Opensuse 13.2Encfs Project Encfs
6.5
CVSSv3
CVE-2014-8127
LibTIFF 4.0.3 allows remote malicious users to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig...
Libtiff Libtiff 4.0.3Opensuse Opensuse 13.1Opensuse Opensuse 13.2
9.8
CVSSv3
CVE-2016-9841
inffast.c in zlib 1.2.8 might allow context-dependent malicious users to have unspecified impact by leveraging improper pointer arithmetic.
Zlib ZlibOpensuse Leap 42.2Opensuse Leap 42.1Opensuse Opensuse 13.2Debian Debian Linux 8.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Oracle MysqlOracle Database Server 18cOracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jdk 1.6.0Oracle Jre 1.6.0Oracle Jre 1.8.0Oracle Jre 1.7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Eus 7.4
7.8
CVSSv3
CVE-2016-2347
Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa prior to 0.3.1 allows remote malicious users to execute arbitrary code via a crafted archive.
Opensuse Opensuse 13.2Opensuse Leap 42.1Debian Debian Linux 8.0Debian Debian Linux 7.0Lhasa Project Lhasa
7.7
CVSSv3
CVE-2015-8567
Memory leak in net/vmxnet3.c in QEMU allows remote malicious users to cause a denial of service (memory consumption).
Qemu QemuCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.10Debian Debian Linux 8.0Suse Linux Enterprise Debuginfo 11Opensuse Leap 42.1Opensuse Opensuse 13.2Suse Linux Enterprise Desktop 11Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Software Development Kit 12Fedoraproject Fedora 23Fedoraproject Fedora 22
6.1
CVSSv3
CVE-2016-4068
Cross-site scripting (XSS) vulnerability in Roundcube Webmail prior to 1.0.9 and 1.1.x prior to 1.1.5 allows remote malicious users to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864.
Opensuse Opensuse 13.1Opensuse Opensuse 13.2Opensuse Leap 42.1Roundcube Roundcube Webmail 1.1.1Roundcube Webmail 1.1.4Roundcube WebmailRoundcube Roundcube Webmail 1.1.2Roundcube Webmail 1.1Roundcube Roundcube Webmail 1.1.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook