Novell Suse Linux Enterprise Software Development Kit vulnerabilities, page 4

65 vulnerabilities

Known vulnerabilities in Novell Suse Linux Enterprise Software Development Kit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9CVE-2016-3140canonicalubuntu_linux+33
EPSS score
1.79%
The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.5.5CVE-2016-3156canonicalubuntu_linux+33
EPSS score
0.55%
The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large number of IP addresses.4.9CVE-2016-3138canonicalubuntu_linux+33
EPSS score
0.55%
The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor.7.5CVE-2014-1505canonicalubuntu_linux+15
EPSS score
4.00%
The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693.4.3CVE-2014-3566applemac_os_x+116
EPSS score
100.00%
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.