Opensuse vulnerabilities
Published CVEs affecting Opensuse products: 180 record(s), with severity, exploitation and fixes.
Leap 121Opensuse 52Evergreen 11Backports Sle 10Tumbleweed 5Libsolv 4Backports 2Factory 2Libzypp 2Munge 1Sdbootutil 1openSUSE Leap 15.2 1Buildservice 1
CVE-2019-5482
Critical · 9.8
CWE-787 Sep 16, 2019
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVE-2019-5481
Critical · 9.8
CWE-415 Sep 16, 2019
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
CVE-2019-16056
High · 7.5
CWE-20 Sep 6, 2019
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.
CVE-2019-15847
High · 7.5
CWE-331 Sep 2, 2019
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple...
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
CVE-2019-10086
High · 7.3
CWE-502 Aug 20, 2019
Deserialization of Untrusted Data in Apache Software Foundation Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
CVE-2019-15219
Medium · 4.6
CWE-476 Aug 19, 2019
NULL Pointer Dereference in Linux Linux Kernel
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver.
CVE-2019-15218
Medium · 4.6
CWE-476 Aug 19, 2019
NULL Pointer Dereference in Linux Linux Kernel
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.
CVE-2019-15217
Medium · 4.6
CWE-476 Aug 19, 2019
NULL Pointer Dereference in Linux Linux Kernel
An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.
CVE-2019-5460
Medium · 5.5
CWE-415 Jul 30, 2019
Double Free in Videolan Vlc Media Player
Double Free in VLC versions <= 3.0.6 leads to a crash.
CVE-2019-5459
High · 7.1
CWE-191 Jul 30, 2019
Integer Underflow in Videolan Vlc Media Player
An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
CVE-2019-13565
High · 7.5
Jul 26, 2019
An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session...
An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user.
CVE-2019-13057
Medium · 4.9
Jul 26, 2019
An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator...
An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)
CVE-2019-1010180
High · 7.8
CWE-125 Jul 24, 2019
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is:...
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
CVE-2019-14250
Medium · 5.5
CWE-190 Jul 24, 2019
Integer Overflow or Wraparound in Gnu Binutils
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
CVE-2019-13962
Critical · 9.8
CWE-125 Jul 18, 2019
Out-of-bounds Read in Videolan Vlc Media Player
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
CVE-2019-13602
High · 7.8
CWE-191 Jul 14, 2019
Integer Underflow in Videolan Vlc Media Player
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file.
CVE-2019-12972
Medium · 5.5
CWE-125 Jun 26, 2019
Out-of-bounds Read in Gnu Binutils
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_object_p in elfcode.h mishandles an e_shstrndx section of type SHT_GROUP by omitting a trailing '\0' character.
CVE-2018-20843
High · 7.5
CWE-611 Jun 24, 2019
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).
CVE-2019-12904
Medium · 5.9
CWE-668 Jun 19, 2019
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel...
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack
CVE-2019-12900
Critical · 9.8
CWE-787 Jun 19, 2019
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
CVE-2019-10160
Critical · 9.8
CWE-172 Jun 7, 2019
A security regression of CVE-2019-9636 was discovered in python since commit...
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.
CVE-2019-8457
Critical · 9.8
CWE-125 May 30, 2019
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the...
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVE-2019-5436
High · 7.8
CWE-787 May 28, 2019
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVE-2019-0211
High · 7.8
KEV Urgent · 70 Public exploit CWE-416 Apr 8, 2019
Apache HTTP Server Privilege Escalation Vulnerability
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.
CVE-2019-5418
High · 7.5
KEV Urgent · 79 Public exploit CWE-22 Mar 27, 2019
Rails Ruby on Rails Path Traversal Vulnerability
There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.