Vulnerabilities > Opensuse

DATE CVE VULNERABILITY TITLE RISK
2015-02-13 CVE-2013-2027 Permissions, Privileges, and Access Controls vulnerability in multiple products
Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.
local
low complexity
opensuse jython-project CWE-264
4.6
2015-02-12 CVE-2015-1345 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.
local
low complexity
gnu opensuse CWE-119
2.1
2015-02-12 CVE-2014-9512 Link Following vulnerability in multiple products
rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.
network
low complexity
samba opensuse oracle CWE-59
6.4
2015-02-08 CVE-2014-9675 Permissions, Privileges, and Access Controls vulnerability in multiple products
bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
5.0
2015-02-08 CVE-2014-9674 Remote vulnerability in FreeType Versions Prior to 2.5.4
The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
7.5
2015-02-08 CVE-2014-9673 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
6.8
2015-02-08 CVE-2014-9672 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.
5.8
2015-02-08 CVE-2014-9671 Remote vulnerability in FreeType Versions Prior to 2.5.4
Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented.
4.3
2015-02-08 CVE-2014-9670 Numeric Errors vulnerability in multiple products
Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.
4.3
2015-02-08 CVE-2014-9669 Out-of-bounds Read vulnerability in multiple products
Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.
6.8