Vulnerabilities

Filters

Reset all

2 selected

35 records

Sort

Vendor: Opensuse Project Component: Leap Clear all filters

TI-2017-13044 CVE-2017-17806 · GHSA-7cfh-r37c-4mqr

The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not…

LOW 35

The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interfa…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00557 Published 2017-12-20 Fixed CWE-787

TI-2017-13043 CVE-2017-17805 · GHSA-h6gr-h9qh-f94v

The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly…

LOW 34

The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER)…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00441 Published 2017-12-20 Partial fix CWE-20

TI-2016-01151 CVE-2016-1254 · GHSA-q68j-wcf9-644f

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client…

LOW 38

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03004 Published 2017-12-05 No fix listed CWE-119

TI-2015-02772 CVE-2015-3138 · GHSA-75gj-485x-v865

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service…

LOW 37

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02284 Published 2017-09-27 No fix listed CWE-20

TI-2015-04366 CVE-2015-5203 · GHSA-8p3p-rp99-mrhw

Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17…

LOW 29

Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01944 Published 2017-08-02 Partial fix CWE-415

TI-2015-04383 CVE-2015-5221 · GHSA-45hq-xrcp-79f9

Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c…

LOW 29

Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.0219 Published 2017-07-25 Fixed CWE-416

TI-2016-08067 CVE-2016-9961 · GHSA-468v-hjgx-r39h

game-music-emu before 0.6.1 mishandles unspecified integer values.

MEDIUM 49

game-music-emu before 0.6.1 mishandles unspecified integer values.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04364 Published 2017-06-06 No fix listed CWE-189

TI-2016-08066 CVE-2016-9960 · GHSA-h99v-mrwp-7gw9

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

LOW 25

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0053 Published 2017-06-06 No fix listed CWE-369

TI-2016-08065 CVE-2016-9959 · GHSA-fr5p-jv24-2gw9

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

LOW 39

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0233 Published 2017-04-12 No fix listed CWE-125

TI-2016-08064 CVE-2016-9958 · GHSA-jvrm-7h8w-chxm

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.

LOW 39

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0233 Published 2017-04-12 No fix listed CWE-119

TI-2016-08063 CVE-2016-9957 · GHSA-x8w4-hgv4-rjx8

Stack-based buffer overflow in game-music-emu before 0.6.1.

LOW 38

Stack-based buffer overflow in game-music-emu before 0.6.1.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01928 Published 2017-04-12 No fix listed CWE-119

TI-2017-04321 CVE-2017-6542 · GHSA-6q3h-v425-7xx2

The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have…

MEDIUM 62

The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain s…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.21816 Published 2017-03-27 No fix listed CWE-119

TI-2015-06660 CVE-2015-8010 · GHSA-x57r-7jqf-5w9p

Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and…

LOW 30

Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01486 Published 2017-03-27 No fix listed CWE-79

TI-2016-06549 CVE-2016-7797 · GHSA-gp6f-9wm3-5hr4

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to…

LOW 39

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0325 Published 2017-03-24 Fixed CWE-254

TI-2016-07779 CVE-2016-9556 · GHSA-3w2x-9vcq-46w8

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows…

LOW 29

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.02266 Published 2017-03-23 No fix listed CWE-119

TI-2016-08132 CVE-2016-10048 · GHSA-c3pw-9g68-56j8

Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote…

MEDIUM 42

Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.06534 Published 2017-03-23 Will not fix CWE-22

TI-2014-08024 CVE-2014-9851 · GHSA-5277-5jxm-2v8h

ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

LOW 39

ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03702 Published 2017-03-20 Will not fix CWE-20

TI-2014-08023 CVE-2014-9850 · GHSA-79f8-5j4j-fpx5

Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

LOW 39

Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03618 Published 2017-03-20 Will not fix CWE-399

TI-2014-08022 CVE-2014-9849 · GHSA-9v2h-5gfh-h2p2

The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

LOW 39

The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03618 Published 2017-03-20 Will not fix CWE-400

TI-2014-08021 CVE-2014-9848 · GHSA-6rjh-r7gx-7pfh

Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

LOW 39

Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03734 Published 2017-03-20 Will not fix CWE-399

TI-2014-08020 CVE-2014-9847 · GHSA-pw5h-pj9g-x2j5

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

MEDIUM 49

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04584 Published 2017-03-20 Will not fix CWE-119

TI-2014-08019 CVE-2014-9846 · GHSA-fx7w-v837-p52c

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9…

MEDIUM 50

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04852 Published 2017-03-20 Will not fix CWE-119

TI-2014-08018 CVE-2014-9845 · GHSA-768x-wc78-6cc7

The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause…

LOW 29

The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01946 Published 2017-03-20 Will not fix CWE-119

TI-2014-08017 CVE-2014-9844 · GHSA-689w-wq5r-v53p

The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers…

LOW 29

The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.02054 Published 2017-03-20 Will not fix CWE-125

TI-2014-08016 CVE-2014-9843 · GHSA-8x8p-5g6g-p65m

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote…

MEDIUM 49

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03933 Published 2017-03-20 Will not fix CWE-119