Vulnerabilities > Opensuse > Leap > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-09-19 CVE-2019-11779 Uncontrolled Recursion vulnerability in multiple products
In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or more '/' characters, i.e.
6.5
2019-09-13 CVE-2019-15031 Improper Synchronization vulnerability in multiple products
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt.
local
low complexity
linux redhat canonical opensuse CWE-662
4.4
2019-09-13 CVE-2019-15030 Missing Authorization vulnerability in multiple products
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception.
local
low complexity
linux redhat canonical opensuse CWE-862
4.4
2019-09-11 CVE-2019-16234 NULL Pointer Dereference vulnerability in multiple products
drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
local
high complexity
linux canonical opensuse CWE-476
4.7
2019-09-11 CVE-2019-16233 NULL Pointer Dereference vulnerability in multiple products
drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
local
high complexity
linux redhat canonical opensuse CWE-476
4.1
2019-09-11 CVE-2019-16232 NULL Pointer Dereference vulnerability in multiple products
drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
local
high complexity
linux canonical opensuse fedoraproject CWE-476
4.1
2019-09-11 CVE-2019-16231 NULL Pointer Dereference vulnerability in multiple products
drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
local
high complexity
linux redhat canonical opensuse CWE-476
4.1
2019-09-09 CVE-2019-16167 Integer Overflow or Wraparound vulnerability in multiple products
sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.
5.5
2019-09-06 CVE-2019-9456 Out-of-bounds Write vulnerability in multiple products
In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check.
local
low complexity
google opensuse CWE-787
6.7
2019-09-05 CVE-2019-15939 Divide By Zero vulnerability in multiple products
An issue was discovered in OpenCV 4.1.0.
network
high complexity
opencv opensuse debian CWE-369
5.9