Suse Linux Enterprise Module For Public Cloud vulnerabilities

3 CVEs affecting Suse Linux Enterprise Module For Public Cloud, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7566, published 2018-03-30.

More from Suse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-18017, published 2018-01-03. Critical severity, CVSS 9.8. EPSS: 52.8% chance of exploitation in the next 30 days. The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and…
• CVE-2016-2782, published 2016-04-27. Medium severity, CVSS 4.6. EPSS: 1.6% chance of exploitation in the next 30 days. The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or…
• CVE-2018-7566, published 2018-03-30. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.