Suse

Manager Proxy

15 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2022-27239

  • EPSS 0.12%
  • Published 27.04.2022 14:15:09
  • Last modified 21.11.2024 06:55:28

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

7.8

CVE-2021-4034

Warning Exploit
  • EPSS 86.52%
  • Published 28.01.2022 20:15:12
  • Last modified 03.04.2025 18:53:12

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pk...

3.8

CVE-2017-7995

  • EPSS 0.1%
  • Published 03.05.2017 19:59:00
  • Last modified 20.04.2025 01:37:25

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project...

4.3

CVE-2015-7976

  • EPSS 2.73%
  • Published 30.01.2017 21:59:00
  • Last modified 20.04.2025 01:37:25

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

7.5

CVE-2016-4957

  • EPSS 57.88%
  • Published 05.07.2016 01:59:04
  • Last modified 12.04.2025 10:46:40

ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.

5.3

CVE-2016-4956

  • EPSS 2.28%
  • Published 05.07.2016 01:59:03
  • Last modified 12.04.2025 10:46:40

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.

5.9

CVE-2016-4955

  • EPSS 5.19%
  • Published 05.07.2016 01:59:02
  • Last modified 12.04.2025 10:46:40

ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a ...

7.5

CVE-2016-4954

  • EPSS 2.18%
  • Published 05.07.2016 01:59:01
  • Last modified 12.04.2025 10:46:40

The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstr...

7.5

CVE-2016-4953

  • EPSS 12.64%
  • Published 05.07.2016 01:59:00
  • Last modified 12.04.2025 10:46:40

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.

6.8

CVE-2016-0264

  • EPSS 9.84%
  • Published 24.05.2016 15:59:00
  • Last modified 12.04.2025 10:46:40

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows re...