Suse Opensuse vulnerabilities

7 CVEs affecting Suse Opensuse, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-44933, published 2026-05-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0469, published 2017-08-17. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011.
CVE-2010-0230, published 2010-01-22. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
CVE-2017-3224, published 2018-07-24. High severity, CVSS 8.2. EPSS: 1.1% chance of exploitation in the next 30 days. Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two…
CVE-2007-2654, published 2007-05-14. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
CVE-2008-3067, published 2008-07-07. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo…
CVE-2026-44933, published 2026-05-20. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`,…
CVE-2025-62876, published 2025-11-12. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4.