Opensuse Project Leap vulnerabilities
35 vulnerabilities
Known vulnerabilities in Opensuse Project Leap, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-5203ubuntujasper+5
EPSS score1.94%
Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.CVE-2015-5218debianutil-linux+23EPSS score0.61%
Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.CVE-2015-5221ubuntujasper+5EPSS score2.19%
Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.CVE-2015-8010ubuntuicinga+3EPSS score1.49%
Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi.CVE-2015-3138opensuse_projectleap+2EPSS score2.28%
print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).CVE-2016-1254debiantor+8EPSS score3.00%
Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.CVE-2016-9435debianw3m+4EPSS score3.34%
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags.CVE-2016-9556debianimagemagick+4EPSS score2.27%
The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.CVE-2016-9957debiangame-music-emu+10EPSS score1.93%
Stack-based buffer overflow in game-music-emu before 0.6.1.CVE-2016-9436debianw3m+4EPSS score3.34%
parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.CVE-2016-9960debiangame-music-emu+8EPSS score0.53%
game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).CVE-2016-9961debiangame-music-emu+8EPSS score4.36%
game-music-emu before 0.6.1 mishandles unspecified integer values.CVE-2016-9958debiangame-music-emu+10EPSS score2.33%
game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.CVE-2016-9959debiangame-music-emu+10EPSS score2.33%
game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.CVE-2016-7797clusterlabspacemaker+18EPSS score3.25%
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.CVE-2016-5316alpinetiff+5EPSS score2.17%
Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.CVE-2016-5317alpinetiff+5EPSS score1.95%
Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.CVE-2016-10048debianimagemagick+3EPSS score6.53%
Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.CVE-2016-10069debianimagemagick+3EPSS score1.96%
coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames.CVE-2016-10068debianimagemagick+4EPSS score1.97%
The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file.