Opensuse Leap vulnerabilities, page 3
1,898 vulnerabilities
Known vulnerabilities in Opensuse Leap, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-19873canonicalubuntu_linux+6
EPSS score3.38%
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.CVE-2018-19364canonicalubuntu_linux+6EPSS score0.53%
hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a use-after-free outcome.CVE-2018-19491debiangnuplot+5EPSS score1.77%
An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot postscript terminal is used as a backend.CVE-2018-19456opensuseleap+6EPSS score2.06%
The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql.CVE-2018-19869debianqtsvg-opensource-src+10EPSS score2.20%
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.CVE-2018-19870debianqtbase-opensource-src+4EPSS score2.42%
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.CVE-2018-19492debiangnuplot+5EPSS score1.78%
An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot pngcairo terminal is used as a backend.CVE-2018-19841alpinewavpack+7EPSS score2.54%
The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack.CVE-2018-19489canonicalubuntu_linux+6EPSS score0.40%
v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming.CVE-2018-19490debiangnuplot+5EPSS score1.77%
An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is passed to the plot function.CVE-2018-11212chainguardopenjdk-10+34EPSS score4.83%
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.CVE-2018-11577canonicalubuntu_linux+4EPSS score2.54%
Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.CVE-2018-11685canonicalubuntu_linux+4EPSS score2.20%
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.CVE-2018-11683canonicalubuntu_linux+4EPSS score2.18%
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.CVE-2018-11684canonicalubuntu_linux+4EPSS score2.20%
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.CVE-2018-11440canonicalubuntu_linux+4EPSS score3.08%
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.CVE-2018-20547canonicalubuntu_linux+6EPSS score1.80%
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data.CVE-2018-20836canonicalubuntu_linux+32EPSS score5.09%
An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.CVE-2018-20545canonicalubuntu_linux+5EPSS score2.39%
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.CVE-2018-20855debianlinux+20EPSS score0.47%
An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.