Suse Linux vulnerabilities, page 5
198 vulnerabilities
Known vulnerabilities in Suse Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2000-0231halloweenhalloween_linux+1
EPSS score0.77%
Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.CVE-2010-0230suseopensuse+1EPSS score1.80%
SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.CVE-2017-3224ubuntuquagga+4EPSS score1.06%
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two instances of the same LSA, recency is determined by first comparing sequence numbers, then checksums, and finally MaxAge. In a case where the sequence numbers are the same, the LSA with the larger checksum is considered more recent, and will not be flushed from the Link State Database (LSDB). Since the RFC does not explicitly state that the values of links carried by a LSA must be the same when prematurely aging a self-originating LSA with MaxSequenceNumber, it is possible in vulnerable OSPF implementations for an attacker to craft a LSA with MaxSequenceNumber and invalid links that will result in a larger checksum and thus a 'newer' LSA that will not be flushed from the LSDB. Propagation of the crafted LSA can result in the erasure or alteration of the routing tables of routers within the routing domain, creating a denial of service condition or the re-routing of traffic on the network. CVE-2017-3224 has been reserved for Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages).CVE-1999-1495susesuse_linuxEPSS score0.48%
xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.CVE-1999-1182calderaopenlinux_lite+5EPSS score0.43%
Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.so/ld-linux.so to report an error.CVE-1999-0434calderaopenlinux+4EPSS score1.10%
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.CVE-1999-0409susesuse_linuxEPSS score0.71%
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.CVE-1999-0390redhatlinux+1EPSS score0.44%
Buffer overflow in Dosemu Slang library in Linux.CVE-1999-0433netbsdnetbsd+4EPSS score0.71%
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.CVE-1999-0831cobaltqube+3EPSS score1.44%
Denial of service in Linux syslogd via a large number of connections.CVE-1999-0746slackwareslackware_linux+1EPSS score5.64%
A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.CVE-1999-0462susesuse_linuxEPSS score0.40%
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.CVE-1999-0234redhatlinux+1EPSS score0.40%
Bash treats any character with a value of 255 as a command separator.CVE-1999-0405debiandebian_linux+3EPSS score0.76%
A buffer overflow in lsof allows local users to obtain root privilege.CVE-1999-0426susesuse_linuxEPSS score10.76%
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.CVE-1999-0768redhatlinux+1EPSS score2.28%
Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.CVE-1999-0804debiandebian_linux+3EPSS score5.64%
Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.CVE-1999-0906susesuse_linuxEPSS score0.80%
Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.CVE-1999-0363susesuse_linuxEPSS score0.78%
SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.CVE-2004-2658susesuse_linuxEPSS score0.30%
resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types.