Vulnerabilities > Suse > Opensuse
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-07-24 | CVE-2017-3224 | Insufficient Verification of Data Authenticity vulnerability in multiple products Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. | 4.3 |
2017-08-17 | CVE-2011-0469 | Code Injection vulnerability in Suse Opensuse Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011. | 9.8 |
2010-01-22 | CVE-2010-0230 | Permissions, Privileges, and Access Controls vulnerability in Suse Opensuse and Suse Linux SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions. | 7.5 |
2008-07-07 | CVE-2008-3067 | Credentials Management vulnerability in Suse Opensuse 10.3 sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits. | 2.1 |
2007-05-14 | CVE-2007-2654 | Race Condition vulnerability in multiple products xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems. | 4.4 |