Suse vulnerabilities
253 CVEs and advisories name Suse as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-25314hawk: Insecure file permissions
- CVE-2021-25316Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools
- CVE-2021-25313Rancher: XSS on /v3/cluster/
- CVE-2021-25315salt-api unauthenticated remote code execution
- CVE-2020-8027openldap uses fixed paths in /tmp
- CVE-2020-8030skuba: Insecure /tmp usage when joining node to cluster
- CVE-2020-8029skuba: Insecure handling of private key
- CVE-2020-8028salt-api is accessible to every user on SUSE Manager Server
- CVE-2020-8023Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2
- CVE-2020-8025outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
- CVE-2019-3681osc: stores downloaded (supposed) RPM in network-controlled filesystem paths
- CVE-2020-8019syslog-ng: Local privilege escalation from new to root in %post
- CVE-2020-8022User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges
- CVE-2020-8018User owned /etc in SLES15-SP1-CHOST-BYOS
- CVE-2019-18905Deprecated functionality in autoyast2 automatically imports gpg keys without checking them
- CVE-2019-18904Migrations requests can cause DoS on rmt
- CVE-2018-17954crowbar provision leaks admin password to all nodes in cleartext
- CVE-2020-8017race condition on texlive-filesystem cron job allows for the deletion of unintended files
- CVE-2020-8016race condition in the packaging of texlive-filesysten
- CVE-2019-3696pcp: Local privilege escalation from user pcp to root through migrate_tempdirs
- CVE-2019-3695pcp: Local privilege escalation from user pcp to root
- CVE-2019-18903wicked: Use-after-free when receiving invalid DHCP6 IA_PD option
- CVE-2019-18902wicked: Use-after-free when receiving invalid DHCP6 client options
- CVE-2020-8013permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim
- CVE-2019-18901mysql-systemd-helper allows setting 640 permissions of arbitrary files
- CVE-2019-18897Local privilege escalation from user salt to root
- CVE-2019-3698nagios cron job allows privilege escalation from user nagios to root
- CVE-2017-14807SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite
- CVE-2017-14806Insecure handling of repodata and packages in SUSE Studio onlite
- CVE-2018-20105yast2-rmt exposes CA private key passhrase in log-file