Vulnerabilities > Opensuse

DATE CVE VULNERABILITY TITLE RISK
2017-03-23 CVE-2016-6225 Inadequate Encryption Strength vulnerability in multiple products
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack.
network
high complexity
percona opensuse fedoraproject CWE-326
5.9
2017-03-20 CVE-2017-6318 Information Exposure vulnerability in multiple products
saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet.
network
low complexity
opensuse sane-backends-project CWE-200
7.5
2017-03-20 CVE-2017-5930 Missing Authorization vulnerability in multiple products
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.
network
low complexity
opensuse postfixadmin-project CWE-862
2.7
2017-03-20 CVE-2014-9851 Improper Input Validation vulnerability in multiple products
ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
7.5
2017-03-20 CVE-2014-9850 Resource Management Errors vulnerability in multiple products
Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
7.5
2017-03-20 CVE-2014-9849 Resource Exhaustion vulnerability in multiple products
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
7.5
2017-03-20 CVE-2014-9848 Resource Management Errors vulnerability in multiple products
Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
7.5
2017-03-20 CVE-2014-9847 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
network
low complexity
opensuse-project opensuse canonical imagemagick CWE-119
critical
9.8
2017-03-20 CVE-2014-9846 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
network
low complexity
opensuse-project suse opensuse canonical imagemagick CWE-119
critical
9.8
2017-03-20 CVE-2014-9845 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.
5.5