CVE Daily – SUSE Linux Enterprise Server (High+Critical) https://cvedaily.com/pages/tags/sles.html CVE Daily – SUSE Linux Enterprise Server (High+Critical) en Wed, 03 Jun 2026 21:26:59 +0000 [High] CVE-2026-25702 – A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterpr... https://nvd.nist.gov/vuln/detail/CVE-2026-25702 https://nvd.nist.gov/vuln/detail/CVE-2026-25702 Thu, 05 Mar 2026 07:16:13 +0000 High CVE-2026-25702

A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.

CVSS: 7.3 · CWE: CWE-284

View on NVD

]]> [High] CVE-2022-45153 – An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SU... https://nvd.nist.gov/vuln/detail/CVE-2022-45153 https://nvd.nist.gov/vuln/detail/CVE-2022-45153 Wed, 15 Feb 2023 10:15:16 +0000 High CVE-2022-45153

An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formul…

CVSS: 7.0 · CWE: CWE-276

View on NVD

]]> [High] CVE-2022-31254 – A Incorrect Default Permissions vulnerability in rmt-server-regsharing service o... https://nvd.nist.gov/vuln/detail/CVE-2022-31254 https://nvd.nist.gov/vuln/detail/CVE-2022-31254 Tue, 07 Feb 2023 10:15:52 +0000 High CVE-2022-31254

A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10.…

CVSS: 7.8 · CWE: CWE-276

View on NVD

]]> [High] CVE-2021-25321 – A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux... https://nvd.nist.gov/vuln/detail/CVE-2021-25321 https://nvd.nist.gov/vuln/detail/CVE-2021-25321 Wed, 30 Jun 2021 09:15:08 +0000 High CVE-2021-25321

A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch ve…

CVSS: 7.8 · CWE: CWE-61

View on NVD

]]> [Critical] CVE-2019-18906 – A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Ser... https://nvd.nist.gov/vuln/detail/CVE-2019-18906 https://nvd.nist.gov/vuln/detail/CVE-2019-18906 Wed, 30 Jun 2021 09:15:07 +0000 Critical CVE-2019-18906

A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.

CVSS: 9.8 · CWE: CWE-287

View on NVD

]]> [Critical] CVE-2021-25315 – CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Se... https://nvd.nist.gov/vuln/detail/CVE-2021-25315 https://nvd.nist.gov/vuln/detail/CVE-2021-25315 Wed, 03 Mar 2021 10:15:13 +0000 Critical CVE-2021-25315

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE L…

CVSS: 9.8 · CWE: CWE-287

View on NVD

]]> [High] CVE-2020-8027 – A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Se... https://nvd.nist.gov/vuln/detail/CVE-2020-8027 https://nvd.nist.gov/vuln/detail/CVE-2020-8027 Thu, 11 Feb 2021 16:15:12 +0000 High CVE-2020-8027

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Serv…

CVSS: 7.3 · CWE: CWE-377

View on NVD

]]> [High] CVE-2020-8023 – A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the... https://nvd.nist.gov/vuln/detail/CVE-2020-8023 https://nvd.nist.gov/vuln/detail/CVE-2020-8023 Tue, 01 Sep 2020 12:15:10 +0000 High CVE-2020-8023

A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SECURITY, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux En…

CVSS: 7.7 · CWE: CWE-349

View on NVD

]]> [High] CVE-2020-8019 – A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslo... https://nvd.nist.gov/vuln/detail/CVE-2020-8019 https://nvd.nist.gov/vuln/detail/CVE-2020-8019 Mon, 29 Jun 2020 12:15:10 +0000 High CVE-2020-8019

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Module for Legacy Software 12, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server for SAP 12-SP1; openSUSE Backports SLE-15-SP1, openSUSE Leap 15…

CVSS: 7.7 · CWE: CWE-61

View on NVD

]]> [High] CVE-2020-8022 – A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE... https://nvd.nist.gov/vuln/detail/CVE-2020-8022 https://nvd.nist.gov/vuln/detail/CVE-2020-8022 Mon, 29 Jun 2020 09:15:11 +0000 High CVE-2020-8022

A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterpr…

CVSS: 7.7 · CWE: CWE-276

View on NVD

]]> [High] CVE-2020-8018 – A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and S... https://nvd.nist.gov/vuln/detail/CVE-2020-8018 https://nvd.nist.gov/vuln/detail/CVE-2020-8018 Mon, 04 May 2020 12:15:12 +0000 High CVE-2020-8018

A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS version 1.0.1 and prior versions; SLES15-SP1-CHOST-BY…

CVSS: 8.4 · CWE: CWE-276

View on NVD

]]> [High] CVE-2019-3696 – A Improper Limitation of a Pathname to a Restricted Directory vulnerability in t... https://nvd.nist.gov/vuln/detail/CVE-2019-3696 https://nvd.nist.gov/vuln/detail/CVE-2019-3696 Tue, 03 Mar 2020 11:15:11 +0000 High CVE-2019-3696

A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development To…

CVSS: 8.4 · CWE: CWE-22

View on NVD

]]> [High] CVE-2019-3695 – A Improper Control of Generation of Code vulnerability in the packaging of pcp o... https://nvd.nist.gov/vuln/detail/CVE-2019-3695 https://nvd.nist.gov/vuln/detail/CVE-2019-3695 Tue, 03 Mar 2020 11:15:11 +0000 High CVE-2019-3695

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux En…

CVSS: 8.4 · CWE: CWE-94

View on NVD

]]> [High] CVE-2019-18903 – A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUS... https://nvd.nist.gov/vuln/detail/CVE-2019-18903 https://nvd.nist.gov/vuln/detail/CVE-2019-18903 Mon, 02 Mar 2020 17:15:18 +0000 High CVE-2019-18903

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-28.26.1. openSUSE Leap 15.1 wicked ve…

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2019-18902 – A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUS... https://nvd.nist.gov/vuln/detail/CVE-2019-18902 https://nvd.nist.gov/vuln/detail/CVE-2019-18902 Mon, 02 Mar 2020 17:15:18 +0000 High CVE-2019-18902

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-3.21.1. openSUSE Leap 15.1 wicked vers…

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2019-18897 – A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt ... https://nvd.nist.gov/vuln/detail/CVE-2019-18897 https://nvd.nist.gov/vuln/detail/CVE-2019-18897 Mon, 02 Mar 2020 16:15:11 +0000 High CVE-2019-18897

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master version 2019.2.0-46.83.1 and prior versions. SUSE Linux Enterprise Server 15 salt-master version 20…

CVSS: 8.4 · CWE: CWE-59

View on NVD

]]> [High] CVE-2019-3693 – A symlink following vulnerability in the packaging of mailman in SUSE Linux Ente... https://nvd.nist.gov/vuln/detail/CVE-2019-3693 https://nvd.nist.gov/vuln/detail/CVE-2019-3693 Fri, 24 Jan 2020 10:15:12 +0000 High CVE-2019-3693

A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This issue affects: SUSE Linux Enterprise Server 11 mailman versions prior to 2.1.15-9.6.15.1. SUSE Linux…

CVSS: 7.7 · CWE: CWE-59

View on NVD

]]> [High] CVE-2019-3692 – The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap ... https://nvd.nist.gov/vuln/detail/CVE-2019-3692 https://nvd.nist.gov/vuln/detail/CVE-2019-3692 Fri, 24 Jan 2020 09:15:13 +0000 High CVE-2019-3692

The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version 2.6.2-2.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.2.47 and prior versions.

CVSS: 7.7 · CWE: CWE-59

View on NVD

]]> [High] CVE-2019-3691 – A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in S... https://nvd.nist.gov/vuln/detail/CVE-2019-3691 https://nvd.nist.gov/vuln/detail/CVE-2019-3691 Thu, 23 Jan 2020 16:15:11 +0000 High CVE-2019-3691

A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.

CVSS: 7.7 · CWE: CWE-59

View on NVD

]]> [High] CVE-2019-18898 – UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of ... https://nvd.nist.gov/vuln/detail/CVE-2019-18898 https://nvd.nist.gov/vuln/detail/CVE-2019-18898 Thu, 23 Jan 2020 14:15:12 +0000 High CVE-2019-18898

UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1. openSUSE Factory trousers versions prior to 0.3.14-7.1.

CVSS: 7.7 · CWE: CWE-59

View on NVD

]]> [High] CVE-2016-1602 – A code injection in the supportconfig data collection tool in supportutils in SU... https://nvd.nist.gov/vuln/detail/CVE-2016-1602 https://nvd.nist.gov/vuln/detail/CVE-2016-1602 Thu, 23 Mar 2017 06:59:00 +0000 High CVE-2016-1602

A code injection in the supportconfig data collection tool in supportutils in SUSE Linux Enterprise Server 12 and 12-SP1 and SUSE Linux Enterprise Desktop 12 and 12-SP1 could be used by local attackers to execute code as the user running supportconfig (usually root).

CVSS: 7.8 · CWE: CWE-94

View on NVD

]]> [High] CVE-2009-1648 – The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (a... https://nvd.nist.gov/vuln/detail/CVE-2009-1648 https://nvd.nist.gov/vuln/detail/CVE-2009-1648 Sun, 05 Jul 2009 16:30:00 +0000 High CVE-2009-1648

The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services.

CVSS: 7.5 · CWE: CWE-16

View on NVD

]]> [High] CVE-2009-0115 – The Device Mapper multipathing driver (aka multipath-tools or device-mapper-mult... https://nvd.nist.gov/vuln/detail/CVE-2009-0115 https://nvd.nist.gov/vuln/detail/CVE-2009-0115 Mon, 30 Mar 2009 16:30:00 +0000 High CVE-2009-0115

The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.

CVSS: 7.8 · CWE: CWE-732

View on NVD

]]> [High] CVE-2007-5471 – libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux En... https://nvd.nist.gov/vuln/detail/CVE-2007-5471 https://nvd.nist.gov/vuln/detail/CVE-2007-5471 Tue, 16 Oct 2007 00:17:00 +0000 High CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. NOTE: this issue probably affects other daemons that attempt to initialize this library within a chroot configuration or other invalid configuration.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2005-3655 – Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (nove... https://nvd.nist.gov/vuln/detail/CVE-2005-3655 https://nvd.nist.gov/vuln/detail/CVE-2005-3655 Sat, 31 Dec 2005 05:00:00 +0000 High CVE-2005-3655

Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2005-2500 – Buffer overflow in the xdr_xcode_array2 function in xdr.c in Linux kernel 2.6.12... https://nvd.nist.gov/vuln/detail/CVE-2005-2500 https://nvd.nist.gov/vuln/detail/CVE-2005-2500 Mon, 08 Aug 2005 04:00:00 +0000 High CVE-2005-2500

Buffer overflow in the xdr_xcode_array2 function in xdr.c in Linux kernel 2.6.12, as used in SuSE Linux Enterprise Server 9, might allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted XDR data for the nfsacl protocol.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2004-0887 – SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a ... https://nvd.nist.gov/vuln/detail/CVE-2004-0887 https://nvd.nist.gov/vuln/detail/CVE-2004-0887 Thu, 27 Jan 2005 05:00:00 +0000 High CVE-2004-0887

SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges.

CVSS: 7.2 · CWE: N/A

View on NVD

]]>