Vulnerabilities > Opensuse > Leap

DATE CVE VULNERABILITY TITLE RISK
2020-06-22 CVE-2020-4032 Incorrect Conversion between Numeric Types vulnerability in multiple products
In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order.
4.3
2020-06-22 CVE-2020-4031 Use After Free vulnerability in multiple products
In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject.
7.5
2020-06-22 CVE-2020-4030 Out-of-bounds Read vulnerability in multiple products
In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse.
6.5
2020-06-22 CVE-2020-11099 Out-of-bounds Read vulnerability in multiple products
In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet.
6.5
2020-06-22 CVE-2020-11098 Out-of-bounds Read vulnerability in multiple products
In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put.
6.5
2020-06-22 CVE-2020-11097 Out-of-bounds Read vulnerability in multiple products
In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES.
5.4
2020-06-22 CVE-2020-11096 Out-of-bounds Read vulnerability in multiple products
In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order.
6.5
2020-06-22 CVE-2020-11095 Out-of-bounds Read vulnerability in multiple products
In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES.
5.4
2020-06-22 CVE-2020-14983 Classic Buffer Overflow vulnerability in multiple products
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow.
network
low complexity
chocolate-doom opensuse CWE-120
critical
9.8
2020-06-22 CVE-2020-8933 Incorrect Default Permissions vulnerability in multiple products
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root.
local
low complexity
google opensuse CWE-276
7.8