Novell Suse Linux Enterprise Desktop vulnerabilities, page 3
83 vulnerabilities
Known vulnerabilities in Novell Suse Linux Enterprise Desktop, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-8923canonicalubuntu_linux+6
EPSS score2.88%
The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.CVE-2015-8845debianlinux+12EPSS score0.39%
The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim call, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.CVE-2015-8924canonicalubuntu_linux+6EPSS score5.38%
The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file.CVE-2015-8918libarchivelibarchive+3EPSS score3.84%
The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to "overlapping memcpy."CVE-2015-8920canonicalubuntu_linux+6EPSS score1.92%
The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.CVE-2015-8922canonicalubuntu_linux+7EPSS score2.06%
The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.CVE-2015-3043adobeflash_player+11KEVEPSS score73.86%
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.CVE-2015-3044adobeflash_player+9EPSS score9.40%
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.CVE-2016-2847debianlinux+31EPSS score0.56%
fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.CVE-2016-2188canonicalubuntu_linux+33EPSS score1.81%
The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.CVE-2016-2185canonicalubuntu_linux+33EPSS score0.80%
The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.CVE-2016-2834canonicalubuntu_linux+11EPSS score3.38%
Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.CVE-2016-2184canonicalubuntu_linux+33EPSS score1.95%
The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor.CVE-2016-2815canonicalubuntu_linux+7EPSS score2.94%
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.CVE-2016-2186canonicalubuntu_linux+33EPSS score0.80%
The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.CVE-2016-2818canonicalubuntu_linux+26EPSS score3.87%
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.CVE-2016-1583canonicalubuntu_linux+56EPSS score1.39%
The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.CVE-2016-9960debiangame-music-emu+8EPSS score0.53%
game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).CVE-2016-9961debiangame-music-emu+8EPSS score4.36%
game-music-emu before 0.6.1 mishandles unspecified integer values.CVE-2016-4482canonicalubuntu_linux+34EPSS score0.55%
The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.