SUSE Opensuse Tumbleweed vulnerabilities
13 vulnerabilities
Known vulnerabilities in SUSE Opensuse Tumbleweed, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-62875debianopensmtpd+5
EPSS score0.18%
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD.
This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.CVE-2025-53882opensusepython-mailman&distro=openSUSE Tumbleweed+1EPSS score0.14%
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3 package allows the mailman user to sent SIGHUP to arbitrary processes. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.CVE-2025-23386ubuntugerbera+2EPSS score0.15%
A Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed package gerbera allows the service user gerbera to escalate to root.,This issue affects gerbera on openSUSE Tumbleweed before 2.5.0-1.1.CVE-2025-23394ubuntucyrus-imapd+2EPSS score0.57%
A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1.CVE-2024-22033opensuseobs-service-download_url&distro=openSUSE Tumbleweed+5EPSS score0.92%
The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later stepsCVE-2024-22029opensusetomcat10&distro=openSUSE Leap 15.5+26EPSS score0.18%
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to rootCVE-2024-22034debianosc+23EPSS score0.21%
Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victimCVE-2024-49504debiangrub2+5EPSS score0.32%
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.CVE-2026-59674opensusesuricata&distro=openSUSE Tumbleweed+1EPSS score0.17%
A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root.
This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1.CVE-2026-59679debianlibxfont+81EPSS score0.26%
fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from num_extents in the separate FS_QueryXExtents16 reply. The two CARD32 fields are never cross-checked.
A malicious or compromised font server can send a small num_extents (e.g. 1) in the extents reply, then a large num_chars (e.g. 100000) in the bitmaps reply. This causes attacker-controlled out-of-bounds heap read and writes.CVE-2026-41051debiancsync2+5EPSS score0.10%
csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.CVE-2026-44950debianlibxfont+81EPSS score0.26%
fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (position, length) lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the allocation.
A malicious font server can send overlapping source offsets -- for example 1000 glyphs each referencing {position:0, length:64} with nbytes=64. Each individual source range passes the existing validation, but the cumulative writes total 64000 bytes into a 64-byte destination buffer. This is a heap buffer overflow with attacker-controlled content.CVE-2023-32190debianmlocate+1EPSS score0.20%
mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.