Known vulnerabilities in SUSE Linux Enterprise Realtime Extension 15-SP2

Vendor: SUSE
Software: SUSE Linux Enterprise Realtime Extension
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_realtime_extension:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 352
Public exploits: 13
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Realtime Extension version 15-SP2 SUSE Linux Enterprise Realtime Extension 15-SP2 is affected by 352 vulnerabilities: 7 critical, 103 high, 115 medium, 127 low Critical High Medium Low

Vulnerabilities (352)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75499 - Heap-based Buffer Overflow
CVE-2018-11490		 CWE-122 High
No
No
 - 25.04.2023 SB2018052606
SB2018052607
SB2023042611
and 4 more
#VU64075 - Out-of-bounds write
CVE-2022-1304		 CWE-787 Low
No
No
 - 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU63468 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3639		 CWE-601 Low
No
No
 - 20.05.2022 SB2022052019
SB2021090215
SB2021090845
and 8 more
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903		 CWE-122 High
No
No
 - 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU62398 - Improper input validation
CVE-2022-21476		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 69 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU62400 - Improper input validation
CVE-2022-21496		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443		 CWE-20 Low
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU62002 - Improper input validation
CVE-2022-1271		 CWE-20 High
No
No
 - 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60986 - Improper input validation
CVE-2020-28491		 CWE-20 Medium
No
No
 - 03.03.2022 SB2022030316
SB2022030322
SB2022062413
and 12 more
#VU55488 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31810		 CWE-200 Medium
No
No
 - 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 27 more
#VU52796 - Command injection
CVE-2021-31799		 CWE-77 High
No
No
 - 03.05.2021 SB2021050306
SB2021052413
SB2021052414
and 27 more
#VU50978 - Missing release of memory after effective lifetime
CVE-2021-20193		 CWE-401 Medium
No
No
 - 28.02.2021 SB2021022807
SB2021022808
SB2021052630
and 9 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU20920 - Heap-based Buffer Overflow
CVE-2016-3977		 CWE-122 High
No
No
 - 06.09.2019 SB2016042104
SB2016060211
SB2023042611
and 2 more
#VU30817 - Divide By Zero
CVE-2019-15133		 CWE-369 Medium
No
No
 - 17.08.2019 SB2019081703
SB2023042611
SB2023082232
and 1 more
#VU18058 - NULL Pointer Dereference
CVE-2019-9923		 CWE-476 Low
No
No
 - 22.03.2019 SB2019032204
SB2019041818
SB2021030306
and 10 more
#VU16782 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-20482		 CWE-835 Low
No
No
 - 02.01.2019 SB2018122607
SB2019010801
SB2019041818
and 8 more


Showing elements 1 - 20 out of 352