Vulnerabilities for Suse linux enterprise server (...) - CXSECURITY.COM

Vulnerabilities for 'Suse linux enterprise server'

2018-06-08

CVE-2011-4190

CWE-310

The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is similar to CVE-2011-3588, but different in that the kdump implementation is specific to SUSE. A remote malicious kdump server could use this flaw to impersonate the correct kdump server to obtain security sensitive information (kdump core files).

2017-08-09

CVE-2015-3405

CWE-331

ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.

2016-03-13

CVE-2016-1645

CWE-119

Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service (incorrect cast and out-of-bounds write) or possibly have unspecified other impact via crafted JPEG 2000 data.

2013-07-17

CVE-2013-3809

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log.

>>> Vendor: Opensuse 29 Products

Linux enterprise desktop

Suse linux enterprise server

Suse linux enterprise desktop

Suse linux enterprise software development kit

Linux enterprise workstation extension

Open build service

Yast2-samba-provision

Copyright 2024, cxsecurity.com