Opensuse Project Leap vulnerabilities, page 2
35 vulnerabilities
Known vulnerabilities in Opensuse Project Leap, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2014-9847canonicalubuntu_linux+11
EPSS score4.58%
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.CVE-2014-9842canonicalubuntu_linux+10EPSS score3.62%
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.CVE-2014-9844canonicalubuntu_linux+11EPSS score2.05%
The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.CVE-2014-9846canonicalubuntu_linux+12EPSS score4.85%
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.CVE-2014-9841canonicalubuntu_linux+9EPSS score3.93%
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."CVE-2014-9850canonicalubuntu_linux+9EPSS score3.62%
Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).CVE-2014-9849canonicalubuntu_linux+10EPSS score3.62%
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).CVE-2014-9843canonicalubuntu_linux+9EPSS score3.93%
The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.CVE-2014-9845canonicalubuntu_linux+12EPSS score1.95%
The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.CVE-2014-9848canonicalubuntu_linux+11EPSS score3.73%
Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).CVE-2014-9851canonicalubuntu_linux+10EPSS score3.70%
ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).CVE-2017-17805canonicalubuntu_linux+25EPSS score0.44%
The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.CVE-2017-17806canonicalubuntu_linux+30EPSS score0.56%
The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.CVE-2017-5938debianviewvc+6EPSS score1.32%
Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web script or HTML via the nav_data name.CVE-2017-6542alpineputty+6EPSS score21.82%
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.