Suse Linux vulnerabilities

2 CVEs affecting Suse Linux, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-0063, published 2008-03-19.

More from Suse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-6427, published 2008-01-18. High severity, CVSS 9.3. EPSS: 4.3% chance of exploitation in the next 30 days. The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a…
• CVE-2008-0063, published 2008-03-19. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain…