Suse linux enterprise server business critical linux

This hub aggregates every CVE we track for Suse linux enterprise server business critical linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Suse linux enterprise server business critical linux.

• CVE-2022-4245Codehaus-plexus: xml external entity (xxe) injection4.3Sep 25, 2023
• CVE-2022-4244Codehaus-plexus: directory traversal7.5Sep 25, 2023
• CVE-2022-4065cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal5.5Nov 19, 2022
• CVE-2022-23824IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.5.5Nov 9, 2022
• CVE-2022-37866Apache Ivy allows path traversal in the presence of a malicious repository7.5Nov 7, 2022
• CVE-2022-21385A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:N...6.2Aug 29, 2022
• CVE-2022-27239In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.7.8Apr 27, 2022
• CVE-2022-24839Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)7.5Apr 11, 2022
• CVE-2021-29965A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website th...5.3Jun 24, 2021
• CVE-2018-18385Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop). The loop was caused by the fact that Parser.next_block was not exhausting all the lines in the ...7.5Oct 16, 2018