SUSE linux enterprise server vulnerabilities

Latest SUSE linux enterprise server CVEs

Newest publication first · page 1 of 19

1. CVE-2026-31431 crypto: algif_aead - Revert to operating out-of-place

   Published 2026-04-22

   High·CVSS 7.8 EPSS 98.1% CISA KEV added 2026-05-01 Exploited in the wild Framework module

   In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the sourc...

2. CVE-2026-25702 nftables disabled due to incorrect kernel backport

   Published 2026-03-05

   Critical·CVSS 9.8 EPSS 0.23%

   A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before...

3. CVE-2024-46956 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.

   Published 2024-11-10

   High·CVSS 7.8 EPSS 0.39%

   An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.

4. CVE-2024-46955 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.

   Published 2024-11-10

   Medium·CVSS 5.5 EPSS 0.29%

   An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.

5. CVE-2024-46953 An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and....

   Published 2024-11-10

   High·CVSS 7.8 EPSS 0.39%

   An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.

6. CVE-2024-46951 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.

   Published 2024-11-10

   High·CVSS 7.8 EPSS 0.36%

   An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.

7. CVE-2023-29552 The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of...

   Published 2023-04-25

   High·CVSS 7.5 EPSS 64.0% CISA KEV added 2023-11-08 Exploited in the wild

   The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

8. CVE-2022-45153 saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls

   Published 2023-02-15

   High·CVSS 7.8 EPSS 0.22%

   An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuratio...

9. CVE-2022-31252 permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()

   Published 2022-10-06

   Medium·CVSS 4.4 EPSS 0.15%

   A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location...

10. CVE-2022-27239 In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

    Published 2022-04-27

    High·CVSS 7.8 EPSS 0.58%

    In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

11. CVE-2021-45082 Command Injection in Cobbler

    Published 2022-02-18

    High·CVSS 7.8 EPSS 0.50%

    An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)

12. CVE-2021-4034 A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users accord...

    Published 2022-01-28

    High·CVSS 7.8 EPSS 94.9% CISA KEV added 2022-06-27 Ransomware Exploited in the wild Framework module Public exploit PoC

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the callin...

13. CVE-2002-20001 The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-expo...

    Published 2021-11-11

    High·CVSS 7.5 EPSS 24.6%

    The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs ver...

14. CVE-2021-32000 clone-master-clean-up: dangerous file system operations

    Published 2021-07-28

    High·CVSS 7.1 EPSS 0.30%

    A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affect...

15. CVE-2018-10195 lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.

    Published 2021-06-02

    High·CVSS 7.1 EPSS 0.39%

    lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.

16. CVE-2020-8025 outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues

    Published 2020-08-07

    Critical·CVSS 9.3 EPSS 0.48%

    A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the...

17. CVE-2019-18903 wicked: Use-after-free when receiving invalid DHCP6 IA_PD option

    Published 2020-03-02

    Critical·CVSS 9.8 EPSS 2.4%

    A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior...

18. CVE-2019-18902 wicked: Use-after-free when receiving invalid DHCP6 client options

    Published 2020-03-02

    Critical·CVSS 9.8 EPSS 2.4%

    A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior...

19. CVE-2020-8013 permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim

    Published 2020-03-02

    Low·CVSS 2.5 EPSS 0.32%

    A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The sy...

20. CVE-2019-18901 mysql-systemd-helper allows setting 640 permissions of arbitrary files

    Published 2020-03-02

    Medium·CVSS 5.5 EPSS 0.38%

    A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Li...

21. CVE-2019-18897 Local privilege escalation from user salt to root

    Published 2020-03-02

    High·CVSS 7.8 EPSS 0.39%

    A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Se...

22. CVE-2014-1947 Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c...

    Published 2020-02-17

    High·CVSS 7.8 EPSS 7.0% Public exploit

    Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a...

23. CVE-2006-7246 NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.

    Published 2020-01-27

    Medium·CVSS 6.8 EPSS 0.88%

    NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.

24. CVE-2019-3687 "easy" permission profile allows everyone execute dumpcap and read all network traffic

    Published 2020-01-24

    Low·CVSS 3.3 EPSS 0.27%

    The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 t...

25. CVE-2015-5239 Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.

    Published 2020-01-23

    Medium·CVSS 6.5 EPSS 3.6%

    Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.