Opensuse

opensuse

Vendor: Suse • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-3224 3Quagga RedhatSuse 4Opensuse Package ManagerQuagga+1 more Nov 21, 2024 Jul 24, 2018 N/A· v4 8.2 HIGH· v3 4.3 MEDIUM· v2 Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two instances of the same...Show more Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two instances of the same LSA, recency is determined by first comparing sequence numbers, then checksums, and finally MaxAge. In a case where the sequence numbers are the same, the LSA with the larger checksum is considered more recent, and will not be flushed from the Link State Database (LSDB). Since the RFC does not explicitly state that the values of links carried by a LSA must be the same when prematurely aging a self-originating LSA with MaxSequenceNumber, it is possible in vulnerable OSPF implementations for an attacker to craft a LSA with MaxSequenceNumber and invalid links that will result in a larger checksum and thus a 'newer' LSA that will not be flushed from the LSDB. Propagation of the crafted LSA can result in the erasure or alteration of the routing tables of routers within the routing domain, creating a denial of service condition or the re-routing of traffic on the network. CVE-2017-3224 has been reserved for Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages).Show less
CVE-2011-0469 1Suse 1Opensuse May 13, 2026 Aug 17, 2017 N/A· v4 9.8 CRITICAL· v3 9.0 HIGH· v2 Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011.
CVE-2010-0230 1Suse 2Opensuse Suse Linux Apr 29, 2026 Jan 22, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
CVE-2008-3067 1Suse 1Opensuse Apr 23, 2026 Jul 7, 2008 N/A· v4 N/A· v3 2.1 LOW· v2 sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits.
CVE-2007-2654 2Suse Xfsdump 7Opensuse Suse LinuxSuse Linux Openexchange Server+4 more Apr 23, 2026 May 14, 2007 N/A· v4 N/A· v3 4.4 MEDIUM· v2 xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.