Suse Studio Onsite vulnerabilities

22 CVEs affecting Suse Studio Onsite, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-14807, published 2020-01-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-6271: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability, published 2014-09-24. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 100% chance of exploitation in the next 30 days. GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment,…
CVE-2014-7169: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability, published 2014-09-25. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 99.9% chance of exploitation in the next 30 days. GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or…
CVE-2013-4547, published 2013-11-23. High severity, CVSS 7.5. EPSS: 67.7% chance of exploitation in the next 30 days. nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
CVE-2016-5118, published 2016-06-10. Critical severity, CVSS 9.8. EPSS: 50% chance of exploitation in the next 30 days. The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
CVE-2015-1283, published 2015-07-23. Medium severity, CVSS 6.8. EPSS: 18.4% chance of exploitation in the next 30 days. Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service…
CVE-2016-0718, published 2016-05-26. Critical severity, CVSS 9.8. EPSS: 13.3% chance of exploitation in the next 30 days. Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
CVE-2011-4315, published 2011-12-08. Medium severity, CVSS 6.8. EPSS: 6% chance of exploitation in the next 30 days. Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have…
CVE-2014-9846, published 2017-03-20. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
CVE-2011-3180, published 2014-04-16. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in…
CVE-2014-9844, published 2017-03-20. Medium severity, CVSS 5.5. EPSS: 2.1% chance of exploitation in the next 30 days. The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.

Latest

CVE-2017-14807, published 2020-01-27. High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days. An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in…
CVE-2017-14806, published 2020-01-27. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages…
CVE-2011-0467, published 2018-06-07. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected…
CVE-2014-9845, published 2017-03-20. Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days. The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.
CVE-2016-2318, published 2017-02-03. Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days. GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2)…
CVE-2016-2317, published 2017-02-03. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2)…
CVE-2015-8808, published 2016-07-13. Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days. The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file.