SUSE Opensuse Leap 15.6 vulnerabilities

2 vulnerabilities

Known vulnerabilities in SUSE Opensuse Leap 15.6, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.3CVE-2024-22033opensuseobs-service-download_url&distro=openSUSE Tumbleweed+5
EPSS score
0.92%
The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps5.5CVE-2024-22034debianosc+23
EPSS score
0.21%
Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim