Vulnerabilities > Opensuse > Leap

DATE CVE VULNERABILITY TITLE RISK
2020-01-08 CVE-2020-6614 Out-of-bounds Read vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.
network
gnu opensuse CWE-125
5.8
2020-01-08 CVE-2020-6613 Out-of-bounds Read vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.
network
gnu opensuse CWE-125
5.8
2020-01-08 CVE-2020-6612 Out-of-bounds Read vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.
network
gnu opensuse CWE-125
5.8
2020-01-08 CVE-2020-6611 NULL Pointer Dereference vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.
network
gnu opensuse CWE-476
4.3
2020-01-08 CVE-2020-6610 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c.
network
gnu opensuse CWE-770
4.3
2020-01-08 CVE-2020-6609 Out-of-bounds Read vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.
network
gnu opensuse CWE-125
6.8
2020-01-08 CVE-2019-11745 Out-of-bounds Write vulnerability in multiple products
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur.
6.8
2020-01-08 CVE-2019-20367 Out-of-bounds Read vulnerability in multiple products
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
network
low complexity
freedesktop debian canonical opensuse CWE-125
critical
9.1
2020-01-08 CVE-2019-5188 Out-of-bounds Write vulnerability in multiple products
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4.
6.7
2020-01-06 CVE-2019-18179 An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23.
network
low complexity
otrs debian opensuse
4.3