Known vulnerabilities in SUSE Linux Enterprise High Availability Extension 15 SP5 - page 124

Vendor: SUSE
Software: SUSE Linux Enterprise High Availability Extension 15
Version: SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 2670
Public exploits: 22
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise High Availability Extension 15 version SP5 SUSE Linux Enterprise High Availability Extension 15 SP5 is affected by 2670 vulnerabilities: 1 critical, 15 high, 77 medium, 2577 low Critical High Medium Low

Vulnerabilities (2670)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91613 - Missing release of memory after effective lifetime
CVE-2024-36955		 CWE-401 Low
No
No
 - 10.06.2024 SB2024061053
SB2024070893
SB2024070894
and 18 more
#VU91611 - Insufficient Verification of Data Authenticity
CVE-2024-3049		 CWE-345 Medium
No
No
 - 10.06.2024 SB2024061049
SB2024061050
SB2024061051
and 18 more
#VU91463 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-36952		 CWE-362 Low
No
No
 - 08.06.2024 SB20240608175
SB2024062810
SB2024070474
and 45 more
#VU91321 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36959		 CWE-200 Low
No
No
 - 08.06.2024 SB2024060837
SB2024070224
SB2024070893
and 29 more
#VU87010 - Incorrect Regular Expression
CVE-2024-25126		 CWE-185 Medium
No
No
 - 04.03.2024 SB2024030429
SB2024030544
SB2024041627
and 21 more
#VU87009 - Improper input validation
CVE-2024-26141		 CWE-20 Medium
No
No
 - 04.03.2024 SB2024030429
SB2024030544
SB2024031240
and 22 more
#VU87008 - Improper input validation
CVE-2024-26146		 CWE-20 Medium
No
No
 - 04.03.2024 SB2024030428
SB2024030544
SB2024031240
and 21 more
#VU86856 - Permissions, Privileges, and Access Controls
CVE-2020-25720		 CWE-264 Medium
No
No
 - 27.02.2024 SB2024022768
SB2024022775
SB2025021950
and 1 more
#VU86575 - Integer overflow
CVE-2021-33631		 CWE-190 Low
No
No
 - 19.02.2024 SB2024021921
SB2024021925
SB2024021926
and 34 more
#VU86560 - Use After Free
CVE-2023-51042		 CWE-416 Low
No
No
 - 19.02.2024 SB2024021911
SB2024021912
SB2024021926
and 40 more
#VU86268 - Use After Free
CVE-2023-51043		 CWE-416 Low
No
No
 - 08.02.2024 SB2024020851
SB2024021925
SB2024021926
and 36 more
#VU85682 - Improper input validation
CVE-2023-46838		 CWE-20 Low
No
No
 - 22.01.2024 SB2024012251
SB2024012342
SB2024012904
and 35 more
#VU85024 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-51780		 CWE-362 Low
No
No
 - 05.01.2024 SB2024010527
SB2024021925
SB2024021926
and 66 more
#VU82755 - Use After Free
CVE-2023-47233		 CWE-416 Low
No
No
 - 06.11.2023 SB2023110640
SB2024021925
SB2024021926
and 49 more
#VU81693 - Use After Free
CVE-2023-4921		 CWE-416 Low
No
No
 - 08.10.2023 SB2023100808
SB2023100810
SB2023101184
and 109 more
#VU78577 - Out-of-bounds read
CVE-2022-2127		 CWE-125 Medium
No
No
 - 24.07.2023 SB2023072430
SB2023072432
SB2023072433
and 34 more
#VU78576 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34968		 CWE-200 Low
No
No
 - 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 27 more
#VU78575 - Type confusion
CVE-2023-34967		 CWE-843 Medium
No
No
 - 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 32 more
#VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-34966		 CWE-835 Medium
No
No
 - 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 35 more
#VU78573 - Security Features
CVE-2023-3347		 CWE-254 Medium
No
No
 - 24.07.2023 SB2023072431
SB2023072437
SB2023073157
and 16 more


Showing elements 2461 - 2480 out of 2670