Opensuse vulnerabilities, page 4
3,294 vulnerabilities
Known vulnerabilities in Opensuse products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 71 products.
CVE-2018-11683canonicalubuntu_linux+4
EPSS score2.18%
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.CVE-2018-11684canonicalubuntu_linux+4EPSS score2.20%
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.CVE-2018-11440canonicalubuntu_linux+4EPSS score3.08%
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.CVE-2018-20547canonicalubuntu_linux+6EPSS score1.80%
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data.CVE-2018-20836canonicalubuntu_linux+32EPSS score5.09%
An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.CVE-2018-20532canonicalubuntu_linux+4EPSS score2.06%
There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.CVE-2018-20545canonicalubuntu_linux+5EPSS score2.39%
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.CVE-2018-20534canonicalubuntu_linux+3EPSS score2.24%
There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world applicationCVE-2018-20855debianlinux+20EPSS score0.47%
An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.CVE-2018-20177alpinerdesktop+6EPSS score7.93%
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.CVE-2018-20506appleicloud+9EPSS score7.56%
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.CVE-2018-20860debianlibopenmpt+3EPSS score1.34%
libopenmpt before 0.3.13 allows a crash with malformed MED files.CVE-2018-20546canonicalubuntu_linux+6EPSS score2.31%
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case.CVE-2018-20467canonicalubuntu_linux+5EPSS score3.10%
In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.CVE-2018-20106opensuseyast2-printer+1EPSS score1.02%
In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.CVE-2018-20482alpinetar+6EPSS score0.53%
GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).CVE-2018-20548canonicalubuntu_linux+5EPSS score1.81%
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data.CVE-2018-20549canonicalubuntu_linux+6EPSS score1.83%
There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19.CVE-2018-20126canonicalubuntu_linux+3EPSS score0.49%
hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled.CVE-2018-20615canonicalubuntu_linux+13EPSS score4.46%
An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.