SUSE Opensuse Leap 15.5 vulnerabilities

4 vulnerabilities

Known vulnerabilities in SUSE Opensuse Leap 15.5, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.3CVE-2024-22033opensuseobs-service-download_url&distro=openSUSE Tumbleweed+5
EPSS score
0.92%
The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps7.8CVE-2024-22029opensusetomcat10&distro=openSUSE Leap 15.5+26
EPSS score
0.18%
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root5.5CVE-2024-22034debianosc+23
EPSS score
0.21%
Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim7.8CVE-2023-32182opensuseleap+21
EPSS score
0.30%
A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1.