Novell Suse Linux vulnerabilities

17 CVEs affecting Novell Suse Linux, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-12084, published 2025-01-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-12084, published 2025-01-15. Critical severity, CVSS 9.8. EPSS: 72.1% chance of exploitation in the next 30 days. A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the…
CVE-2013-4854, published 2013-07-29. High severity, CVSS 7.8. EPSS: 34.2% chance of exploitation in the next 30 days. The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows…
CVE-2007-1285, published 2007-03-06. High severity, CVSS 7.5. EPSS: 18.8% chance of exploitation in the next 30 days. The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep…
CVE-2024-12088, published 2025-01-14. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within…
CVE-2015-2566, published 2015-04-16. Low severity, CVSS 2.8. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVE-2015-2567, published 2015-04-16. Low severity, CVSS 3.5. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges.
CVE-2010-1507, published 2010-09-03. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session…
CVE-2010-3912, published 2011-01-13. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors.
CVE-2006-0803, published 2006-02-23. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents YOU from detecting…
CVE-2005-4790, published 2005-12-31. Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users…

Latest

CVE-2011-0988, published 2011-04-18. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows…
CVE-2010-3110, published 2010-10-12. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow local users to gain privileges via unspecified vectors.
CVE-2009-1297, published 2009-10-23. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a…