Novell Suse Linux Enterprise Point Of Sale vulnerabilities

2 vulnerabilities

Known vulnerabilities in Novell Suse Linux Enterprise Point Of Sale, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2017-1000366debian · debian_linux +48 more9y agodebian debian_linuxglibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.CVSS7.8HighEPSS2.73%RoutineCVE-2017-7995novell · suse_linux_enterprise_point_of_sale +6 more9y agonovell suse_linux_enterprise_point_of_saleXen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.CVSS3.8LowEPSS0.37%