SUSE Linux Enterprise vulnerabilities

2 vulnerabilities

Known vulnerabilities in SUSE Linux Enterprise, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2011-3172opensusepam-modules&distro=openSUSE Tumbleweed+4
EPSS score
1.03%
A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions prior to 12.8.5CVE-2026-44933ubuntulibzypp+3
EPSS score
0.19%
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges.