Suse Linux Enterprise Server vulnerabilities, page 5
131 vulnerabilities
Known vulnerabilities in Suse Linux Enterprise Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
LowCVE-2014-1739canonical · ubuntu_linux +6 morecanonical ubuntu_linuxThe media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call.EPSS1.12%MediumCVE-2014-0196canonical · ubuntu_linux +57 morecanonical ubuntu_linuxThe n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.KEVEPSS20.33%LowCVE-2014-0181debian · linux +43 moredebian linuxThe Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the (1) stdout or (2) stderr of a setuid program.EPSS0.53%HighCVE-2014-9854canonical · ubuntu_linux +8 morecanonical ubuntu_linuxcoders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."EPSS3.66%HighCVE-2014-9322canonical · ubuntu_linux +64 morecanonical ubuntu_linuxarch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.EPSS1.54%MediumCVE-2014-9116debian · mutt +7 moredebian muttThe write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.EPSS9.69%CriticalCVE-2014-9761canonical · ubuntu_linux +10 morecanonical ubuntu_linuxMultiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.EPSS5.51%HighCVE-2014-7826debian · linux +5 moredebian linuxkernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.EPSS0.59%HighCVE-2014-8369debian · linux +7 moredebian linuxThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601.EPSS0.56%LowCVE-2014-8134canonical · ubuntu_linux +8 morecanonical ubuntu_linuxThe paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value.EPSS0.70%MediumCVE-2014-8559canonical · ubuntu_linux +28 morecanonical ubuntu_linuxThe d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application.EPSS0.74%MediumCVE-2014-8121canonical · ubuntu_linux +5 morecanonical ubuntu_linuxDB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.EPSS5.61%MediumCVE-2014-8086debian · linux +3 moredebian linuxRace condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag.EPSS0.37%HighCVE-2014-3673canonical · ubuntu_linux +29 morecanonical ubuntu_linuxThe SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.EPSS7.46%MediumCVE-2014-3610canonical · ubuntu_linux +6 morecanonical ubuntu_linuxThe WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.EPSS0.60%MediumCVE-2014-3646canonical · ubuntu_linux +7 morecanonical ubuntu_linuxarch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.EPSS0.43%MediumCVE-2014-3647canonical · ubuntu_linux +8 morecanonical ubuntu_linuxarch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.EPSS0.59%MediumCVE-2014-3601canonical · ubuntu_linux +15 morecanonical ubuntu_linuxThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.EPSS1.17%HighCVE-2014-3687canonical · ubuntu_linux +14 morecanonical ubuntu_linuxThe sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.EPSS8.58%HighCVE-2008-2812avaya · communication_manager +13 moreavaya communication_managerThe Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.EPSS0.43%