Suse Linux Enterprise Server For Raspberry Pi vulnerabilities

3 CVEs affecting Suse Linux Enterprise Server For Raspberry Pi, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17806, published 2017-12-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-1000366, published 2017-06-19. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note…
CVE-2017-17806, published 2017-12-20. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the…
CVE-2017-17805, published 2017-12-20. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface…