Opensuse vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Opensuse products: 180 record(s), with severity, exploitation and fixes.

Leap 121 Opensuse 52 Evergreen 11 Backports Sle 10 Tumbleweed 5 Libsolv 4 Backports 2 Factory 2 Libzypp 2 Munge 1 Sdbootutil 1 openSUSE Leap 15.2 1 Buildservice 1

Exploited only (KEV) →

CVE-2010-3904 High · 7.8 KEV Urgent · 76 Public exploit CWE-1284 Dec 6, 2010

Linux Kernel Improper Input Validation Vulnerability

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

CVE-2010-1297 High · 7.8 KEV Urgent · 76 Public exploit CWE-787 Jun 8, 2010

Adobe Flash Player Memory Corruption Vulnerability

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

CVE-2010-0840 Critical · 9.8 KEV Urgent · 83 Public exploit Apr 1, 2010

Oracle JRE Unspecified Vulnerability

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."

CVE-2009-3953 High · 8.8 KEV Urgent · 76 Public exploit CWE-787 Jan 13, 2010

Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

CVE-2009-4324 High · 7.8 KEV Urgent · 86 Public exploit CWE-416 Dec 15, 2009

Adobe Acrobat and Reader Use-After-Free Vulnerability

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.