Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

suse linux enterprise desktop 12 vulnerabilities and exploits

(subscribe to this query)
6
CVSSv3
CVE-2015-8551
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x up to and including 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a sy...
Linux Linux KernelDebian Debian Linux 7.0Debian Debian Linux 8.0Opensuse Opensuse 13.1Suse Linux Enterprise Desktop 11Suse Linux Enterprise Desktop 12Suse Linux Enterprise Real Time Extension 11Suse Linux Enterprise Real Time Extension 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Workstation Extension 12
6.2
CVSSv3
CVE-2015-5969
The mysql-systemd-helper script in the mysql-community-server package prior to 5.6.28-2.17.1 in openSUSE 13.2 and prior to 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package prior to 10.0.22-2.21.2 in openSUSE 13.2 and prior to 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12...
Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Server 12Suse Linux Enterprise Workstation Extension 12Suse Linux Enterprise Desktop 12Opensuse Leap 42.1Opensuse Opensuse 13.2
NA
CVE-2015-0272
GNOME NetworkManager allows remote malicious users to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.
Gnome NetworkmanagerSuse Linux Enterprise Server 11Suse Linux Enterprise Desktop 11Suse Linux Enterprise Debuginfo 11Suse Linux Enterprise Real Time Extension 11Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Workstation Extension 12Suse Linux Enterprise Desktop 12Canonical Ubuntu Linux 12.04Oracle Linux 7
NA
CVE-2015-2695
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) prior to 1.14 relies on an inappropriate context handle, which allows remote malicious users to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during ...
Mit Kerberos 5Oracle Solaris 11.3Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 15.10Debian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 42.1Opensuse Opensuse 13.1Opensuse Opensuse 13.2Suse Linux Enterprise Desktop 11Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Software Development Kit 12
NA
CVE-2015-2696
lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) prior to 1.14 relies on an inappropriate context handle, which allows remote malicious users to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_i...
Mit Kerberos 5Opensuse Leap 42.1Opensuse Opensuse 13.1Opensuse Opensuse 13.2Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 12Debian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 15.10
NA
CVE-2015-2697
The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) prior to 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS requ...
Mit Kerberos 5Oracle Solaris 11.3Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 15.10Debian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 42.1Opensuse Opensuse 13.1Opensuse Opensuse 13.2Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 12
7.5
CVSSv3
CVE-2015-6855
hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive,...
Qemu QemuDebian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Fedoraproject Fedora 21Fedoraproject Fedora 22Fedoraproject Fedora 23Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 12Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Arista Eos -
NA
CVE-2015-4106
QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact vi...
Qemu QemuDebian Debian Linux 7.0Debian Debian Linux 8.0Fedoraproject Fedora 20Fedoraproject Fedora 21Fedoraproject Fedora 22Suse Linux Enterprise Desktop 11Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Software Development Kit 12Citrix Xenserver 6.0Citrix Xenserver 6.0.2Citrix Xenserver 6.1.0Citrix Xenserver 6.2.0Citrix Xenserver 6.5Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 15.04
3.7
CVSSv3
CVE-2015-4000
The TLS protocol 1.2 and previous versions, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle malicious users to conduct cipher-downgrade attacks by rewriting a ClientHello with D...
Openssl OpensslCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Hp Hp-ux B.11.31Ibm Content Manager 8.5Oracle Jrockit R28.3.6Debian Debian Linux 8.0Debian Debian Linux 7.0Oracle Jdk 1.8.0Oracle Jre 1.7.0Oracle Jre 1.6.0Oracle Jre 1.8.0Oracle Jdk 1.7.0Oracle Jdk 1.6.0Suse Linux Enterprise Server 11.0Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Desktop 12Suse Suse Linux Enterprise Server 12Apple Mac Os XApple Iphone Os
NA
CVE-2015-3340
Xen 4.2.x up to and including 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.
Xen Xen 4.2.1Xen Xen 4.2.2Xen Xen 4.3.3Xen Xen 4.3.4Xen Xen 4.5.0Xen Xen 4.2.3Xen Xen 4.2.4Xen Xen 4.4.0Xen Xen 4.2.0Xen Xen 4.3.1Xen Xen 4.3.2Xen Xen 4.4.2Xen Xen 4.4.1Xen Xen 4.2.5Xen Xen 4.3.0Suse Suse Linux Enterprise Server 11.0Suse Suse Linux Enterprise Software Development Kit 11.0Suse Suse Linux Enterprise Desktop 11.0Fedoraproject Fedora 22Fedoraproject Fedora 20Fedoraproject Fedora 21Debian Debian Linux 8.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook