opensuse project suse linux enterprise server vulnerabilities

Latest opensuse project suse linux enterprise server CVEs

Newest publication first

1. CVE-2014-9851 ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

   Published 2017-03-20

   High·CVSS 7.5 EPSS 3.7%

   ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

2. CVE-2014-9850 Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

   Published 2017-03-20

   High·CVSS 7.5 EPSS 3.6%

   Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

3. CVE-2014-9849 The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

   Published 2017-03-20

   High·CVSS 7.5 EPSS 3.6%

   The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

4. CVE-2014-9848 Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

   Published 2017-03-20

   High·CVSS 7.5 EPSS 3.7%

   Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

5. CVE-2014-9847 The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

   Published 2017-03-20

   Critical·CVSS 9.8 EPSS 4.6%

   The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

6. CVE-2014-9846 Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

   Published 2017-03-20

   Critical·CVSS 9.8 EPSS 4.9%

   Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

7. CVE-2014-9845 The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.

   Published 2017-03-20

   Medium·CVSS 5.5 EPSS 1.9%

   The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.

8. CVE-2014-9844 The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.

   Published 2017-03-20

   Medium·CVSS 5.5 EPSS 2.1%

   The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.

9. CVE-2014-9843 The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.

   Published 2017-03-20

   Critical·CVSS 9.8 EPSS 3.9%

   The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.

10. CVE-2014-9842 Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

    Published 2017-03-20

    High·CVSS 7.5 EPSS 3.6%

    Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

11. CVE-2014-9841 The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."

    Published 2017-03-20

    Critical·CVSS 9.8 EPSS 3.9%

    The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."

12. CVE-2014-4258 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availabili...

    Published 2014-07-17

    Medium·CVSS 6.5 EPSS 3.5%

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.