Suse Linux vulnerabilities, page 2

198 vulnerabilities

Known vulnerabilities in Suse Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2001-0193debiandebian_linux+1
EPSS score
1.06%
Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.
4.6CVE-2001-0610kdekde+1
EPSS score
0.56%
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.
7.2CVE-2001-0525susesuse_linux
EPSS score
0.60%
Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line argument.
5.1CVE-2001-0918susesuse_linux
EPSS score
1.71%
Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files securely.
6.4CVE-2001-0834conectivalinux+3
EPSS score
2.63%
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
10CVE-2001-0388freebsdfreebsd+2
EPSS score
2.75%
time server daemon timed allows remote attackers to cause a denial of service via malformed packets.
4.6CVE-2001-0641immuniximmunix+2
EPSS score
1.26%
Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option.
7.5CVE-2001-0869calderaopenlinux_eserver+4
EPSS score
3.00%
Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.
2.1CVE-2001-0914linuxlinux_kernel+1
EPSS score
0.39%
Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading.
10CVE-2005-2023debiangnupg2+1
EPSS score
2.28%
The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail.
5CVE-2005-1043applemac_os_x+6
EPSS score
1.93%
exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.
2.1CVE-2005-1761novelllinux_desktop+2
EPSS score
0.46%
Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.
2.1CVE-2005-1767novelllinux_desktop+2
EPSS score
0.46%
traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).
7.2CVE-2005-1763novelllinux_desktop+1
EPSS score
0.41%
Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.
7.2CVE-2005-0750conectivalinux+7
EPSS score
0.85%
The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.
2.1CVE-2005-0156debianperl+9
EPSS score
1.31%
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.
5CVE-2005-0384redhatenterprise_linux+3
EPSS score
3.97%
Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client.
5CVE-2005-0398altlinuxalt_linux+8
EPSS score
2.43%
The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.
7.5CVE-2005-0337debianpostfix+7
EPSS score
2.81%
Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.
7.5CVE-2005-0373applemac_os_x+8
EPSS score
3.92%
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.