Novell Suse Linux Enterprise Point Of Sale vulnerabilities

2 CVEs affecting Novell Suse Linux Enterprise Point Of Sale, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1000366, published 2017-06-19.

More from Novell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-1000366, published 2017-06-19. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note…
• CVE-2017-7995, published 2017-05-03. Low severity, CVSS 3.8. EPSS: 0.4% chance of exploitation in the next 30 days. Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in…