Novell

Suse Linux Enterprise Software Development Kit

64 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2016-4569

  • EPSS 0.37%
  • Published 23.05.2016 10:59:08
  • Last modified 12.04.2025 10:46:40

The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer...

3.3

CVE-2016-4486

  • EPSS 0.52%
  • Published 23.05.2016 10:59:02
  • Last modified 12.04.2025 10:46:40

The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.

7.5

CVE-2016-4485

  • EPSS 0.51%
  • Published 23.05.2016 10:59:01
  • Last modified 12.04.2025 10:46:40

The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by reading a message.

6.2

CVE-2016-4482

  • EPSS 0.04%
  • Published 23.05.2016 10:59:00
  • Last modified 12.04.2025 10:46:40

The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTIN...

4.9

CVE-2016-3951

  • EPSS 0.02%
  • Published 02.05.2016 10:59:41
  • Last modified 12.04.2025 10:46:40

Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invali...

4.9

CVE-2016-3689

  • EPSS 0.06%
  • Published 02.05.2016 10:59:40
  • Last modified 12.04.2025 10:46:40

The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.

4.9

CVE-2016-3140

  • EPSS 0.16%
  • Published 02.05.2016 10:59:39
  • Last modified 12.04.2025 10:46:40

The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB...

4.9

CVE-2016-3138

  • EPSS 0.02%
  • Published 02.05.2016 10:59:37
  • Last modified 12.04.2025 10:46:40

The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data e...

4.9

CVE-2016-3137

  • EPSS 0.02%
  • Published 02.05.2016 10:59:36
  • Last modified 12.04.2025 10:46:40

drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoin...

4.9

CVE-2016-3136

  • EPSS 0.2%
  • Published 02.05.2016 10:59:35
  • Last modified 12.04.2025 10:46:40

The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two i...