SUSE Manager Server vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SUSE Manager Server: 3 record(s), with affected versions and fixes.cpe:2.3:a:suse:manager_server
CVE-2026-31431
High · 7.8
KEV Urgent · 72 Public exploit CWE-669 Apr 22, 2026
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
CVE-2023-29552
High · 7.5
KEV High · 59 Apr 25, 2023
Service Location Protocol (SLP) Denial-of-Service Vulnerability
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
CVE-2021-4034
High · 7.8
KEV Urgent · 86 Public exploit Ransomware CWE-125 Jan 28, 2022
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.