← Back

Linux Enterprise Desktop

linux_enterprise_desktop

Vendor: Suse • 461 CVEs

CVEs (461)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Novell
NtpOpensuse+1 more
10Leap
Linux Enterprise DebuginfoLinux Enterprise Desktop+7 more
May 13, 2026
Jan 30, 2017
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.
4Canonical
DebianLibarchive+1 more
6Debian Linux
LibarchiveLinux Enterprise Desktop+3 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left s...Show more
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.Show less
4Canonical
DebianLibarchive+1 more
6Debian Linux
LibarchiveLinux Enterprise Desktop+3 more
May 6, 2026
Sep 20, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtre...Show more
Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.Show less
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.
2Libarchive
Suse
4Libarchive
Linux Enterprise DesktopLinux Enterprise Server+1 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file.
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing.
5Novell
NtpOpensuse+2 more
9Leap
Linux Enterprise DesktopLinux Enterprise Server+6 more
May 6, 2026
Jul 5, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.
6Novell
NtpOpensuse+3 more
10Leap
Linux Enterprise DesktopLinux Enterprise Server+7 more
May 6, 2026
Jul 5, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete...Show more
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.Show less
6Novell
NtpOpensuse+3 more
10Leap
Linux Enterprise DesktopLinux Enterprise Server+7 more
May 6, 2026
Jul 5, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet wit...Show more
ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.Show less
5Ntp
OpensuseOracle+2 more
12Leap
Linux Enterprise DesktopLinux Enterprise Server+9 more
May 6, 2026
Jul 5, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a...Show more
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.Show less
5Ntp
OpensuseOracle+2 more
12Leap
Linux Enterprise DesktopLinux Enterprise Server+9 more
May 6, 2026
Jul 5, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.
4Fedoraproject
LinuxRedhat+1 more
11Enterprise Linux
FedoraLinux Enterprise Debuginfo+8 more
May 6, 2026
Jun 27, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by...Show more
The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.Show less
4Adobe
OpensuseRedhat+1 more
7Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+4 more
Apr 21, 2026
Jun 16, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less