Opensuse Project

Leap

35 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2017-17806

  • EPSS 0.03%
  • Published 20.12.2017 23:29:00
  • Last modified 20.04.2025 01:37:25

The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HAS...

7.8

CVE-2017-17805

  • EPSS 0.11%
  • Published 20.12.2017 23:29:00
  • Last modified 20.04.2025 01:37:25

The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service ...

7.5

CVE-2016-1254

  • EPSS 3.04%
  • Published 05.12.2017 16:29:00
  • Last modified 20.04.2025 01:37:25

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

7.5

CVE-2015-3138

  • EPSS 0.94%
  • Published 28.09.2017 01:29:00
  • Last modified 20.04.2025 01:37:25

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).

5.5

CVE-2015-5203

  • EPSS 0.38%
  • Published 02.08.2017 19:29:00
  • Last modified 20.04.2025 01:37:25

Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

5.5

CVE-2015-5221

  • EPSS 0.23%
  • Published 25.07.2017 18:29:00
  • Last modified 20.04.2025 01:37:25

Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

10

CVE-2016-9961

Exploit
  • EPSS 2.85%
  • Published 06.06.2017 18:29:00
  • Last modified 20.04.2025 01:37:25

game-music-emu before 0.6.1 mishandles unspecified integer values.

5.5

CVE-2016-9960

Exploit
  • EPSS 0.1%
  • Published 06.06.2017 18:29:00
  • Last modified 20.04.2025 01:37:25

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

7.8

CVE-2016-9959

Exploit
  • EPSS 0.31%
  • Published 12.04.2017 20:59:00
  • Last modified 20.04.2025 01:37:25

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

7.8

CVE-2016-9957

Exploit
  • EPSS 0.29%
  • Published 12.04.2017 20:59:00
  • Last modified 20.04.2025 01:37:25

Stack-based buffer overflow in game-music-emu before 0.6.1.