Suse Linux Enterprise Server For SAP vulnerabilities

6 CVEs affecting Suse Linux Enterprise Server For SAP, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-32463, published 2025-06-30.

More from Suse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-32463: Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability, published 2025-06-30. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2025-09-29. EPSS: 55.5% chance of exploitation in the next 30 days. Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
• CVE-2017-5898, published 2017-03-15. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a…
• CVE-2024-46956, published 2024-11-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.
• CVE-2024-46953, published 2024-11-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and…
• CVE-2024-46951, published 2024-11-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.
• CVE-2024-46955, published 2024-11-10. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.