Skip to content
OpenAdvisories

Vendor

openSUSE

83 known vulnerabilities.

Products

Factory 24 open build service 14 openSUSE Leap 15.1 13 Tumbleweed 9 Leap 15.1 8 openSUSE Leap 15.2 6 openSUSE Leap 15.4 4 Leap 15.2 3 openSUSE Tumbleweed 3 openbuildservice 3 openSUSE Leap 15.3 2 libeconf 2 openSUSE Factory 2 openSUSE Backports SLE-15-SP3 2 sdbootutil 1 openSUSE Backports SLE-15-SP1 1 Leap 1 obs-service-set_version 1 libsolv 1 openSUSE Leap Micro 5.2 1 Build service 1 buildservice 1 opensuse-welcome 1 travel-support-program 1 openSUSE Backports SLE-15-SP2 1 paste 1 openSUSE Backports SLE-15-SP4 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.3
    CVE-2023-22652

    Stack buffer overflow in "read_file" function

    A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

    openSUSE libeconf libeconf libeconf Debian Ubuntu
  • Low 3.3
    CVE-2023-32181

    Stack buffer overflow in "econf_writeFile" function

    A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

    openSUSE libeconf libeconf libeconf Debian Ubuntu
  • Low 3.2
    CVE-2021-32000

    clone-master-clean-up: dangerous file system operations

    A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary fil…

    SUSE openSUSE Factory SUSE Linux Enterprise Server 15 SP1 Linux
  • Low 3.3
    CVE-2021-25317

    cups: ownership of /var/log/cups allows the lp user to create files as root

    A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to cre…

    SUSE openSUSE Factory openSUSE Leap 15.2 Linux
  • Low 2.9
    CVE-2019-3700

    yast: Fallback to DES without configuration in /etc/login.def

    yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were moved to a different location. As of the 20191022 snapshot the insecure default settings were used until…

    openSUSE Factory
  • Low 3.5
    CVE-2018-12477

    obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories

    A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affected releases are openSUSE Open Build Service: versions prior …

    openSUSE open build service
  • Low 3.1
    CVE-2018-12473

    path traversal in obs-service-tar_scm

    A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in the current build. On the server itself this is prevented by confining the worker via KVM. Affected releases are openSUS…

    openSUSE open build service