Opensuse Suse Linux Enterprise Server vulnerabilities

2 CVEs affecting Opensuse Suse Linux Enterprise Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3405, published 2017-08-09.

More from Opensuse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-3405, published 2017-08-09. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is…
• CVE-2016-1645, published 2016-03-13. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of…