2098 matches found
CVE-2015-8543_for_SLE12SP1
$cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" $id uid=1000jeremysp1 gid=100users groups=100users $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i sh-4.2 /home/jeremysp1/nullpointerderf/exp +...
CVE-2026-54086
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...
CVE-2026-54086 SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...
CVE-2026-54086
The SLE API for Java (an implementation of CCSDS Space Link Extension Services) is vulnerable to a Denial of Service attack in versions prior to 5.1.7 . The flaw exists in the ISP1 PDU handling path , where the application decodes an attacker-controlled body length and allocates a byte array with...
CVE-2026-54086 SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...
PT-2026-111866
Name of the Vulnerable Software and Affected Versions SLE API for Java versions prior to 5.1.7 Description The ISP1 PDU handling path decodes a body length controlled by an attacker and allocates a byte array without an upper bound. Additionally, malformed or truncated input can cause reads to...
SUSE SLES15: Multi-Linux-Manager-Server-SLE-release / mgradm / etc (SUSE-SU-2025:3839-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:3839-1 advisory. Multi-Linux-Manager-Server-SLE-release: - Update for the release packages for fixing the EOL - Fixed migration issue bsc1243486 server-attestation-imag...
SUSE-SU-2026:4255-1 Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. - CVE-2026-64561: KVM: x86: Check for...
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-68138: net/sched: serialize qdiscrtablist...
Security update for python39.SUSE_SLE-15-SP3_Update
This update for python39.SUSESLE-15-SP3Update fixes the following issues: Security issues fixed: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-1703: files may be extracted outside the...
SUSE-SU-2026:4174-1 Security update for python39.SUSE_SLE-15-SP3_Update
This update for python39.SUSESLE-15-SP3Update fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-1703: files may be extracted outside t...
SUSE-SU-2026:3835-1 Security update for openssl, openssl-3
This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support Security issues fixed: CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling bsc1266347 CVE-2026-34182...
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock bsc1269282. CVE-2026-46037: ipv4: icmp: validate reply type before using icmppointers...
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie bsc1270023. CVE-2026-53246: sctp: validate cached peer INIT chunk length in...
SUSE-SU-2026:23540-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_29
This update for kernel-livepatch-MICRO-6-0-RTUpdate29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...
SUSE-SU-2026:23480-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_29
This update for kernel-livepatch-MICRO-6-0-RTUpdate29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...
SUSE-SU-2026:23479-1 Security update for kernel-livepatch-MICRO-6-0_Update_29
This update for kernel-livepatch-MICRO-6-0Update29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...
SUSE-SU-2026:23530-1 Security update for kernel-livepatch-MICRO-6-0_Update_29
This update for kernel-livepatch-MICRO-6-0Update29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...
PT-2026-95569
This update for kernel-livepatch-MICRO-6-0 Update 29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...