Opensuse vulnerabilities
3,294 vulnerabilities
Known vulnerabilities in Opensuse products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 71 products.
Products
50 of 71- Leap1,898 vulnerabilities
- Opensuse1,456 vulnerabilities
- Backports Sle326 vulnerabilities
- Backports97 vulnerabilities
- Evergreen44 vulnerabilities
- Factory32 vulnerabilities
- Open Build Service24 vulnerabilities
- Libsolv14 vulnerabilities
- Opensuse Leap 15.113 vulnerabilities
- Tumbleweed12 vulnerabilities
- Leap 15.18 vulnerabilities
- Libzypp7 vulnerabilities
- Opensuse Leap 15.26 vulnerabilities
- Supportutils6 vulnerabilities
- Opensuse Leap 15.44 vulnerabilities
- Leap 15.23 vulnerabilities
- Openbuildservice3 vulnerabilities
- Openldap23 vulnerabilities
- Opensuse Tumbleweed3 vulnerabilities
- Zypper3 vulnerabilities
- Cryptctl2 vulnerabilities
- Cscreen2 vulnerabilities
- Libeconf2 vulnerabilities
- Munge2 vulnerabilities
- Opensuse Backports SLE 15 SP32 vulnerabilities
- Opensuse Factory2 vulnerabilities
- Opensuse Leap 15.32 vulnerabilities
- Osc2 vulnerabilities
- Pcp2 vulnerabilities
- Rmt Server2 vulnerabilities
- Suse Linux Enterprise Server2 vulnerabilities
- Texlive Filesystem2 vulnerabilities
- Wicked2 vulnerabilities
- Autoyast21 vulnerabilities
- Build Service1 vulnerabilities
- Buildservice1 vulnerabilities
- Canna1 vulnerabilities
- Cyrus Sasl1 vulnerabilities
- Factory Watchman1 vulnerabilities
- Hylafax\+1 vulnerabilities
- Inn1 vulnerabilities
- Leap Micro1 vulnerabilities
- Libstorage1 vulnerabilities
- Libstorage Ng1 vulnerabilities
- Libzypp Plugin Appdata1 vulnerabilities
- Mirrorcache1 vulnerabilities
- Munin1 vulnerabilities
- Obs Service Set Version1 vulnerabilities
- Obs Service Source Validator1 vulnerabilities
- Open Buildservice1 vulnerabilities
CVE-2026-104618opensusetumbleweed+3
EPSS score0.11%
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.CVE-2026-104617opensusetumbleweed+3EPSS score0.10%
There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.CVE-2018-21247canonicalubuntu_linux+13EPSS score2.46%
An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.CVE-2018-16872canonicalubuntu_linux+7EPSS score1.07%
A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and directories in usb_mtp_object_readdir doesn't consider that the underlying filesystem may have changed since the time lstat(2) was called in usb_mtp_object_alloc, a classical TOCTTOU problem. An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host filesystem in the context of the QEMU process and read any file the QEMU process has access to. Access to the filesystem may be local or via a network share protocol such as CIFS.CVE-2018-16228alpinetcpdump+8EPSS score3.74%
The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().CVE-2018-16875ubuntugolang-1.10+7EPSS score6.38%
The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.CVE-2018-16412debianimagemagick+3EPSS score4.48%
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.CVE-2018-16227alpinetcpdump+8EPSS score6.82%
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.CVE-2018-16846canonicalubuntu_linux+8EPSS score2.14%
It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.CVE-2018-16062alpineelfutils+9EPSS score1.63%
dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.CVE-2018-16451alpinetcpdump+8EPSS score4.13%
The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.CVE-2018-16843alpinenginx+8EPSS score47.98%
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.CVE-2018-16878canonicalubuntu_linux+10EPSS score0.41%
A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoSCVE-2018-16845alpinenginx+10EPSS score9.84%
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.CVE-2018-16230alpinetcpdump+8EPSS score3.89%
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).CVE-2018-16874ubuntugolang-1.10+10EPSS score5.04%
In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both '{' and '}' characters). Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). The attacker can cause an arbitrary filesystem write, which can lead to code execution.CVE-2018-16229alpinetcpdump+9EPSS score6.82%
The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().CVE-2018-16402alpineelfutils+18EPSS score3.69%
libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.CVE-2018-16877canonicalubuntu_linux+10EPSS score0.38%
A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.CVE-2018-16873ubuntugolang-1.10+10EPSS score66.25%
In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). Using custom domains, it's possible to arrange things so that a Git repository is cloned to a folder named ".git" by using a vanity import path that ends with "/.git". If the Git repository root contains a "HEAD" file, a "config" file, an "objects" directory, a "refs" directory, with some work to ensure the proper ordering of operations, "go get -u" can be tricked into considering the parent directory as a repository root, and running Git commands on it. That will use the "config" file in the original Git repository root for its configuration, and if that config file contains malicious commands, they will execute on the system running "go get -u".