novell vulnerabilities

Products

• suse linux enterprise server 91
• suse linux enterprise desktop 83
• groupwise 73
• netware 71
• suse linux enterprise software development kit 65
• edirectory 51
• zenworks configuration management 35
• suse linux enterprise real time extension 33
• iprint 30
• suse linux enterprise debuginfo 24
• suse linux enterprise workstation extension 24
• suse linux enterprise live patching 22
• suse linux enterprise module for public cloud 22
• open enterprise server 20
• netmail 17
• netware ftp server 17
• suse linux 17
• suse package hub for suse linux enterprise 17
• client 16
• imanager 16
• ichain 14
• bordermanager 13
• suse studio onsite 12
• linux desktop 11
• data synchronizer 7
• file reporter 7
• mobility pack 7
• access manager 6
• filr 6
• groupwise messenger 6

Latest novell CVEs

Newest publication first · page 1 of 27

1. CVE-2024-12084 Rsync: heap buffer overflow in rsync due to improper checksum length handling

   Published 2025-01-15

   Critical·CVSS 9.8 EPSS 72.5%

   A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buf...

2. CVE-2024-12088 Rsync: --safe-links option bypass leads to path traversal

   Published 2025-01-14

   High·CVSS 7.5 EPSS 4.6%

   A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file...

3. CVE-2020-8118 An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application.

   Published 2020-02-04

   Medium·CVSS 5.0 EPSS 1.3%

   An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application.

4. CVE-2015-6815 The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of serv...

   Published 2020-01-31

   Low·CVSS 3.5 EPSS 0.98%

   The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.

5. CVE-2012-6345 Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.

   Published 2020-01-25

   High·CVSS 7.5 EPSS 1.1%

   Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.

6. CVE-2012-6344 Novell ZENworks Configuration Management before 11.2.4 allows XSS.

   Published 2020-01-25

   Medium·CVSS 6.1 EPSS 0.72%

   Novell ZENworks Configuration Management before 11.2.4 allows XSS.

7. CVE-2013-4357 The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.

   Published 2019-12-31

   High·CVSS 7.5 EPSS 3.2%

   The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.

8. CVE-2013-2016 A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such...

   Published 2019-12-30

   High·CVSS 7.8 EPSS 0.51%

   A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matchi...

9. CVE-2019-13730 Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

   Published 2019-12-10

   High·CVSS 8.8 EPSS 1.9%

   Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

10. CVE-2019-9811 As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vu...

    Published 2019-07-23

    High·CVSS 8.3 EPSS 2.6%

    As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

11. CVE-2019-11717 A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulne...

    Published 2019-07-23

    Medium·CVSS 5.3 EPSS 2.1%

    A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

12. CVE-2019-11338 libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array acces...

    Published 2019-04-18

    High·CVSS 8.8 EPSS 2.4%

    libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.

13. CVE-2017-9277 existing connection is being used even though eDirectory LDAP server is upgraded to EBA

    Published 2018-03-02

    High·CVSS 7.5 EPSS 1.3%

    The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA.

14. CVE-2017-9267 eDirectory LDAP peer certificate validation issue

    Published 2018-03-02

    High·CVSS 7.5 EPSS 1.0%

    In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.

15. CVE-2017-13704 In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xf...

    Published 2017-10-02

    High·CVSS 7.5 EPSS 65.4%

    In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.

16. CVE-2017-14496 Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service v...

    Published 2017-10-02

    High·CVSS 7.5 EPSS 68.4% PoC

    Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.

17. CVE-2017-14494 dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.

    Published 2017-10-02

    Medium·CVSS 5.9 EPSS 70.5% PoC

    dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.

18. CVE-2016-5759 The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.

    Published 2017-09-08

    High·CVSS 7.8 EPSS 0.38%

    The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.

19. CVE-2015-0786 Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary code via unspecifi...

    Published 2017-08-09

    Critical·CVSS 9.8 EPSS 23.6%

    Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary code via unspecified vectors.

20. CVE-2015-0785 com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.

    Published 2017-08-09

    High·CVSS 7.5 EPSS 6.5%

    com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.

21. CVE-2015-0784 Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.

    Published 2017-08-09

    High·CVSS 7.5 EPSS 6.6%

    Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.

22. CVE-2015-0783 The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.

    Published 2017-08-09

    Medium·CVSS 6.5 EPSS 5.0%

    The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.

23. CVE-2015-0782 SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecifie...

    Published 2017-08-09

    Critical·CVSS 9.8 EPSS 7.1%

    SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

24. CVE-2015-0781 Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecifi...

    Published 2017-08-09

    Critical·CVSS 9.8 EPSS 4.3%

    Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors.

25. CVE-2015-0780 SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via....

    Published 2017-08-09

    Critical·CVSS 9.8 EPSS 8.2%

    SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.