Novell Leap vulnerabilities

5 CVEs affecting Novell Leap, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-14496, published 2017-10-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-14494, published 2017-10-03. Medium severity, CVSS 5.9. EPSS: 67.5% chance of exploitation in the next 30 days. dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
CVE-2017-14496, published 2017-10-03. High severity, CVSS 7.5. EPSS: 66.3% chance of exploitation in the next 30 days. Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service…
CVE-2017-13704, published 2017-10-03. High severity, CVSS 7.5. EPSS: 65.4% chance of exploitation in the next 30 days. In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to…
CVE-2015-5219, published 2017-07-21. High severity, CVSS 7.5. EPSS: 6.1% chance of exploitation in the next 30 days. The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service…
CVE-2014-9853, published 2017-03-17. Medium severity, CVSS 5.5. EPSS: 1.8% chance of exploitation in the next 30 days. Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.