Novell Suse Linux Enterprise Workstation Extension vulnerabilities

24 CVEs affecting Novell Suse Linux Enterprise Workstation Extension, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4997, published 2016-07-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-3043: Adobe Flash Player Memory Corruption Vulnerability, published 2015-04-14. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 73.9% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of…
CVE-2015-3044, published 2015-04-14. Medium severity, CVSS 5.0. EPSS: 9.4% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain…
CVE-2016-4997, published 2016-07-03. High severity, CVSS 7.8. EPSS: 5.7% chance of exploitation in the next 30 days. The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of…
CVE-2016-2184, published 2016-04-27. Medium severity, CVSS 4.6. EPSS: 1.9% chance of exploitation in the next 30 days. The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL…
CVE-2016-2188, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 1.8% chance of exploitation in the next 30 days. The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system…
CVE-2016-3136, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 1.8% chance of exploitation in the next 30 days. The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and…
CVE-2016-3140, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 1.8% chance of exploitation in the next 30 days. The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and…
CVE-2016-3139, published 2016-04-27. Medium severity, CVSS 4.6. EPSS: 1.8% chance of exploitation in the next 30 days. The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system…
CVE-2016-4486, published 2016-05-23. Low severity, CVSS 3.3. EPSS: 1.7% chance of exploitation in the next 30 days. The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from…
CVE-2016-1583, published 2016-06-27. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via…

Latest

CVE-2016-4805, published 2016-05-23. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or…
CVE-2016-4569, published 2016-05-23. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from…
CVE-2016-4482, published 2016-05-23. Medium severity, CVSS 6.2. EPSS: 0.6% chance of exploitation in the next 30 days. The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from…
CVE-2016-3951, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified…
CVE-2016-3689, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device…
CVE-2016-3138, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash)…