15.0 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2020-10756	125	+Info	2020-07-09	2020-10-01	2.1	None	Local	Low	Not required	Partial	None	None
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. This flaw affects versions of libslirp before 4.3.1.
2	CVE-2019-1010180	119	Exec Code Overflow	2019-07-24	2020-11-23	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
3	CVE-2019-1000020	835		2019-02-04	2020-08-24	4.3	None	Remote	Medium	Not required	None	None	Partial
libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.
4	CVE-2019-1000019	125	DoS	2019-02-04	2019-11-06	4.3	None	Remote	Medium	Not required	None	None	Partial
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
5	CVE-2019-18805	190	DoS Overflow	2019-11-07	2021-06-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.
6	CVE-2019-18804	476		2019-11-07	2021-05-27	5.0	None	Remote	Low	Not required	None	None	Partial
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
7	CVE-2019-18622	89	Sql	2019-11-22	2020-01-14	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature.
8	CVE-2019-17596	436		2019-10-24	2021-03-22	5.0	None	Remote	Low	Not required	None	None	Partial
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.
9	CVE-2019-17595	125		2019-10-14	2021-02-08	5.8	None	Remote	Medium	Not required	Partial	None	Partial
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
10	CVE-2019-17594	125		2019-10-14	2021-02-10	4.6	None	Local	Low	Not required	Partial	Partial	Partial
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
11	CVE-2019-17178	772		2019-10-04	2020-10-14	5.0	None	Remote	Low	Not required	None	None	Partial
HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.
12	CVE-2019-17177	772		2019-10-04	2020-10-14	5.0	None	Remote	Low	Not required	None	None	Partial
libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.
13	CVE-2019-17069	20	DoS	2019-10-01	2019-11-27	5.0	None	Remote	Low	Not required	None	None	Partial
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message.
14	CVE-2019-17068	74		2019-10-01	2019-11-27	5.0	None	Remote	Low	Not required	None	Partial	None
PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.
15	CVE-2019-16995	772	DoS	2019-09-30	2021-06-02	7.8	None	Remote	Low	Not required	None	None	Complete
In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.
16	CVE-2019-16276	444		2019-09-30	2021-03-22	5.0	None	Remote	Low	Not required	None	Partial	None
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
17	CVE-2019-16234	476		2019-09-11	2020-05-05	4.7	None	Local	Medium	Not required	None	None	Complete
drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
18	CVE-2019-16233	476		2019-09-11	2020-05-06	4.7	None	Local	Medium	Not required	None	None	Complete
drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
19	CVE-2019-16232	476		2019-09-11	2020-05-04	4.7	None	Local	Medium	Not required	None	None	Complete
drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
20	CVE-2019-16231	476		2019-09-11	2020-05-04	4.7	None	Local	Medium	Not required	None	None	Complete
drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
21	CVE-2019-15921	401		2019-09-04	2020-08-24	4.7	None	Local	Medium	Not required	None	None	Complete
An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c.
22	CVE-2019-15920	416		2019-09-04	2019-12-11	4.0	None	Remote	Low	???	Partial	None	None
An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak.
23	CVE-2019-15919	416		2019-09-04	2019-12-11	2.1	None	Local	Low	Not required	Partial	None	None
An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free.
24	CVE-2019-15917	416		2019-09-04	2020-03-09	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.
25	CVE-2019-15902	200	+Info	2019-09-04	2019-10-17	4.7	None	Local	Medium	Not required	Complete	None	None
A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
26	CVE-2019-15847	331		2019-09-02	2020-09-17	5.0	None	Remote	Low	Not required	Partial	None	None
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
27	CVE-2019-15666	125	DoS	2019-08-27	2020-04-23	4.9	None	Local	Low	Not required	None	None	Complete
An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandles directory validation.
28	CVE-2019-15538	400		2019-08-25	2021-06-02	7.8	None	Remote	Low	Not required	None	None	Complete
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
29	CVE-2019-15214	416		2019-08-19	2020-03-06	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c.
30	CVE-2019-15166	119	Overflow	2019-10-03	2020-01-20	5.0	None	Remote	Low	Not required	None	None	Partial
lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
31	CVE-2019-15145	125		2019-08-18	2021-05-27	4.3	None	Remote	Medium	Not required	None	None	Partial
DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.
32	CVE-2019-15144	674		2019-08-18	2021-05-27	4.3	None	Remote	Medium	Not required	None	None	Partial
In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM image file that is mishandled in libdjvu/GContainer.h.
33	CVE-2019-15143	835		2019-08-18	2021-05-27	4.3	None	Remote	Medium	Not required	None	None	Partial
In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp.
34	CVE-2019-15142	125		2019-08-18	2021-05-27	4.3	None	Remote	Medium	Not required	None	None	Partial
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.
35	CVE-2019-15098	476		2019-08-16	2019-11-25	4.9	None	Local	Low	Not required	None	None	Complete
drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
36	CVE-2019-15090	125		2019-08-16	2020-05-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read.
37	CVE-2019-15031	200	+Info	2019-09-13	2020-01-23	3.6	None	Local	Low	Not required	Partial	None	Partial
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
38	CVE-2019-15030	862		2019-09-13	2020-08-24	3.6	None	Local	Low	Not required	Partial	None	Partial
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
39	CVE-2019-14981	369	DoS	2019-08-12	2020-08-19	4.3	None	Remote	Medium	Not required	None	None	Partial
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
40	CVE-2019-14869	732	Exec Code Bypass	2019-11-15	2020-10-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
41	CVE-2019-14847	476	DoS	2019-11-06	2021-05-29	4.0	None	Remote	Low	???	None	None	Partial
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.
42	CVE-2019-14835	120	Overflow	2019-09-17	2021-06-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
43	CVE-2019-14833	521		2019-11-06	2021-05-29	4.9	None	Remote	Medium	???	Partial	Partial	None
A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
44	CVE-2019-14821	787	DoS	2019-09-19	2021-06-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
45	CVE-2019-14817	863	Exec Code Bypass	2019-09-03	2020-10-16	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
46	CVE-2019-14813	863	Exec Code Bypass	2019-09-06	2020-10-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
47	CVE-2019-14811	863	Exec Code Bypass	2019-09-03	2020-10-16	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
48	CVE-2019-14287	755	Bypass	2019-10-17	2020-08-24	9.0	None	Remote	Low	???	Complete	Complete	Complete
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
49	CVE-2019-13627	362		2019-09-25	2020-04-01	2.6	None	Local	High	Not required	Partial	Partial	None
It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.
50	CVE-2019-13619	119	Overflow	2019-07-17	2021-02-10	5.0	None	Remote	Low	Not required	None	None	Partial
In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.

Total number of vulnerabilities : 303 Page : 1 (This Page)2 3 4 5 6 7