Known vulnerabilities in SUSE Linux Enterprise Module for Basesystem 15-SP4 - page 15

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Basesystem
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 791
Public exploits: 33
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Basesystem version 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 is affected by 791 vulnerabilities: 3 critical, 206 high, 233 medium, 349 low Critical High Medium Low

Vulnerabilities (791)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73108 - Covert Timing Channel
CVE-2020-25658		 CWE-385 Low
No
No
 - 07.03.2023 SB2020111232
SB2023030749
SB2022111045
and 7 more
#VU69301 - UNIX Symbolic Link (Symlink) Following
CVE-2022-31256		 CWE-61 Low
No
No
 - 14.11.2022 SB2022111452
SB2022111453
#VU69241 - Memory corruption
CVE-2022-24130		 CWE-119 High
No
No
 - 11.11.2022 SB2022111114
SB2022111136
SB2022111137
and 6 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 - 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 - 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68518 - Heap-based Buffer Overflow
CVE-2022-39260		 CWE-122 High
No
No
 - 19.10.2022 SB2022101995
SB2022101996
SB2022101997
and 23 more
#VU68517 - Improper input validation
CVE-2022-39253		 CWE-20 Low
Public exploit available
No
 - 19.10.2022 SB2022101995
SB2022101996
SB2022101997
and 41 more
#VU67944 - Improper input validation
CVE-2022-2928		 CWE-20 Low
No
No
 - 05.10.2022 SB2022100544
SB2022100545
SB2022100547
and 28 more
#VU67943 - Missing release of memory after effective lifetime
CVE-2022-2929		 CWE-401 Medium
No
No
 - 05.10.2022 SB2022100544
SB2022100545
SB2022100547
and 26 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023		 CWE-185 Medium
No
No
 - 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more
#VU66200 - Integer overflow
CVE-2022-2122		 CWE-190 High
No
No
 - 09.08.2022 SB2022080901
SB2022080902
SB2022081037
and 9 more
#VU66199 - Integer overflow
CVE-2022-1925		 CWE-190 High
No
No
 - 09.08.2022 SB2022080901
SB2022080902
SB2022081037
and 9 more
#VU66198 - Integer overflow
CVE-2022-1924		 CWE-190 High
No
No
 - 09.08.2022 SB2022080901
SB2022080902
SB2022081037
and 9 more
#VU66197 - Integer overflow
CVE-2022-1923		 CWE-190 High
No
No
 - 09.08.2022 SB2022080901
SB2022080902
SB2022081037
and 9 more
#VU66196 - Integer overflow
CVE-2022-1922		 CWE-190 High
No
No
 - 09.08.2022 SB2022080901
SB2022080902
SB2022081037
and 9 more
#VU66195 - Integer overflow
CVE-2022-1921		 CWE-190 High
No
No
 - 09.08.2022 SB2022080901
SB2022080902
SB2022081037
and 9 more
#VU66194 - Integer overflow
CVE-2022-1920		 CWE-190 High
No
No
 - 08.08.2022 SB2022080901
SB2022080902
SB2022081037
and 9 more
#VU61394 - UNIX Symbolic Link (Symlink) Following
CVE-2021-31566		 CWE-61 Low
No
No
 - 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 27 more
#VU49517 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2021-23926		 CWE-776 High
No
No
 - 14.01.2021 SB2021011401
SB2022072039
SB2022081823
and 21 more


Showing elements 281 - 300 out of 791