Vulnerabilidades de SUSE
CVEs publicadas que afetam produtos de SUSE: 109 registro(s), com severidade, exploração e correções.
Linux Enterprise Desktop 40Linux Enterprise Server 27Rancher 21Linux Enterprise Workstation Extension 14Linux Enterprise Software Development Kit 13Linux Enterprise Debuginfo 8Linux Enterprise 7Openstack Cloud 6Rancher Fleet 6Manager Proxy 5Package Hub 5Enterprise Storage 4Neuvector 4Manager Server 3Linux Enterprise High Availability Extension 3Manager 3Linux Enterprise Java 3Studio Onsite 3Harvester 3Linux Enterprise High Performance Computing 2Linux Enterprise Micro 2Linux Enterprise Real Time 2Linux Enterprise Real Time Extension 2Linux Enterprise Module For Legacy 2openSUSE Leap 16.1 2SUSE Manager Proxy LTS 4.3 2SUSE Manager Server LTS 4.3 2openSUSE 2openSUSE Tumbleweed 2Libzypp 2Fleet 2SUSE Linux Enterprise Server for NVIDIA 16.1 2SUSE Linux Enterprise Server 16.1 2Caas Platform 1Manager Retail Branch Server 1Openstack Cloud Crowbar 1Basesystem Module 1Development Tools Module 1Legacy Module 1Linux Enterprise Live Patching 1
CVE-2026-41051
Média · 5.0
CWE-367 13/05/2026
csync2 uses insecure temporary directories when compiled with C99 or later
csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.
CVE-2026-41050
Crítica · 9.9
CWE-863 13/05/2026
Falha de impersonação no deployer Helm do Fleet permite leitura de secrets entre namespaces
O deployer Helm do Fleet não aplicou totalmente a impersonação de ServiceAccount em dois caminhos de código, permitindo que um tenant com acesso de push a um repositório Git monitorado pelo Fleet leia secrets de qualquer namespace em todos os clusters downstream direcionados pelo seu GitRepo.
CVE-2026-25705
Alta · 8.4
CWE-35 13/05/2026
Rancher Extensions have arbitrary file access via path traversal
A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher through a path traversal in the `compressedEndpoint` field inside a `UIPlugin` deployment. A malicious UI extension could abuse that to: * Overwrite Rancher binaries or configuration to inject code.
* Write to /var/lib/rancher/ to tamper with cluster state.
* If hostPath volumes are mounted, write to the host node filesystem.
* Use this issue to chain with other attack vectors.
CVE-2026-31431
Alta · 7.8
KEV Urgente · 72 Exploit público CWE-669 22/04/2026
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
CVE-2026-25702
Crítica · 9.8
CWE-284 05/03/2026
nftables disabled due to incorrect kernel backport
A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.
CVE-2025-62879
Média · 4.9
CWE-532 04/03/2026
Rancher Backup Operator pod's logs leak S3 tokens
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.
CVE-2025-67860
Baixa · 3.8
CWE-522 25/02/2026
NeuVector scanner insecurely handles passwords as command arguments
A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users.
CVE-2025-67601
Média · 4.8
CWE-295 25/02/2026
Rancher CLI skips TLS verification on Rancher CLI login command
A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts.
CVE-2025-62878
Crítica · 9.9
CWE-23 25/02/2026
Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.
CVE-2025-62877
Crítica · 9.8
CWE-1188 08/01/2026
Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer
Projects using the SUSE Virtualization (Harvester) environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utilized along with the Harvester configuration setup.
CVE-2025-66001
Alta · 8.8
CWE-295 08/01/2026
NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)
NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks.
CVE-2025-62875
Média · 5.5
CWE-754 20/11/2025
Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD.
This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.
CVE-2025-62876
Média · 5.3
CWE-250 12/11/2025
Execution with Unnecessary Privileges em SUSE openSUSE
A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4.
CVE-2025-53883
Crítica · 9.3
CWE-80 30/10/2025
spacewalk-java has various XSS issues on search page
A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x86_64/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manager Server LTS 4.3: from ? before 4.3.88-150400.3.113.5.
CVE-2025-53880
Alta · 8.7
CWE-35 30/10/2025
susemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversal
A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list of allowed IP addresses.
CVE-2025-54471
Média · 6.5
CWE-321 30/10/2025
NeuVector is shipping cryptographic material into its binary
NeuVector used a hard-coded cryptographic key embedded in the source
code. At compilation time, the key value was replaced with the secret
key value and used to encrypt sensitive configurations when NeuVector
stores the data.
CVE-2025-54470
Alta · 8.6
CWE-295 30/10/2025
NeuVector telemetry sender is vulnerable to MITM and DoS
This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server.
In affected versions, NeuVector does not enforce TLS
certificate verification when transmitting anonymous cluster data to the
telemetry server. As a result, the communication channel is susceptible
to man-in-the-middle (MITM) attacks, where an attacker could intercept
or modify the transmitted data. Additionally, NeuVector loads the
response of the telemetry server is loaded into memory without size
limitation, which makes it vulnerable to a Denial of Service(DoS)
attack
CVE-2025-54469
Crítica · 9.9
CWE-78 30/10/2025
NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow
A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTER_RPC_PORT and CLUSTER_LAN_PORT to generate a command to be executed via popen, without first sanitising their values.
The entry process of the enforcer container is the monitor
process. When the enforcer container stops, the monitor process checks
whether the consul subprocess has exited. To perform this check, the
monitor process uses the popen function to execute a shell command that determines whether the ports used by the consul subprocess are still active.
The values of environment variables CLUSTER_RPC_PORT and CLUSTER_LAN_PORT
are used directly to compose shell commands via popen without
validation or sanitization. This behavior could allow a malicious user
to inject malicious commands through these variables within the enforcer
container.
CVE-2024-58269
Média · 4.3
CWE-532 29/10/2025
Rancher exposes sensitive information through audit logs
A vulnerability has been identified in Rancher Manager, where sensitive
information, including secret data, cluster import URLs, and
registration tokens, is exposed to any entity with access to Rancher
audit logs.
CVE-2023-32199
Média · 4.3
CWE-281 29/10/2025
Rancher user retains access to clusters despite Global Role removal
A vulnerability has been identified within Rancher
Manager, where after removing a custom GlobalRole that gives
administrative access or the corresponding binding, the user still
retains access to clusters. This only affects custom Global Roles that have a * on * in * rule for resources or have a * on * rule for non-resource URLs
CVE-2025-54468
Média · 4.7
CWE-200 02/10/2025
Rancher sends sensitive information to external services through the `/meta/proxy` endpoint
A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses.
CVE-2025-32463
Alta · 7.8
KEV Urgente · 76 Exploit público CWE-829 30/06/2025
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVE-2024-12085
Alta · 7.5
CWE-908 14/01/2025
Rsync: info leak via uninitialized stack contents
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
CVE-2024-6387
Alta · 8.1
CWE-362 01/07/2024
Openssh: regresshion - race condition in ssh allows rce/dos
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
CVE-2023-29552
Alta · 7.5
KEV Alta · 59 25/04/2023
Service Location Protocol (SLP) Denial-of-Service Vulnerability
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.