Vulnerabilities > Suse > Opensuse

DATE CVE VULNERABILITY TITLE RISK
2018-07-24 CVE-2017-3224 Insufficient Verification of Data Authenticity vulnerability in multiple products
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber.
4.3
2017-08-17 CVE-2011-0469 Code Injection vulnerability in Suse Opensuse
Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011.
network
low complexity
suse CWE-94
critical
9.8
2010-01-22 CVE-2010-0230 Permissions, Privileges, and Access Controls vulnerability in Suse Opensuse and Suse Linux
SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
network
low complexity
suse CWE-264
7.5
2008-07-07 CVE-2008-3067 Credentials Management vulnerability in Suse Opensuse 10.3
sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits.
local
low complexity
suse CWE-255
2.1
2007-05-14 CVE-2007-2654 Race Condition vulnerability in multiple products
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
4.4