Known vulnerabilities in SUSE Linux Enterprise Realtime Extension 15-SP2 - page 7

Vendor: SUSE
Software: SUSE Linux Enterprise Realtime Extension
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_realtime_extension:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 352
Public exploits: 13
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Realtime Extension version 15-SP2 SUSE Linux Enterprise Realtime Extension 15-SP2 is affected by 352 vulnerabilities: 7 critical, 103 high, 115 medium, 127 low Critical High Medium Low

Vulnerabilities (352)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69295 - Out-of-bounds read
CVE-2021-4048		 CWE-125 Medium
No
No
 - 14.11.2022 SB2021120825
SB2022111436
SB2022032140
and 11 more
#VU65086 - Out-of-bounds read
CVE-2021-44269		 CWE-125 Low
No
No
 - 11.07.2022 SB2022071110
SB2022071111
SB2022110849
and 9 more
#VU61830 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25255		 CWE-94 Low
No
No
 - 04.04.2022 SB2022021640
SB2022040411
SB2022110842
and 15 more
#VU61608 - Improper Authentication
CVE-2022-0547		 CWE-287 Medium
No
No
 - 24.03.2022 SB2022032420
SB2022032423
SB2022040412
and 17 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220		 CWE-350 Medium
No
No
 - 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU61295 - Memory corruption
CVE-2022-23219		 CWE-119 High
No
No
 - 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 51 more
#VU61294 - Memory corruption
CVE-2022-23218		 CWE-119 High
No
No
 - 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 38 more
#VU61293 - Off-by-one Error
CVE-2021-3999		 CWE-193 High
No
No
 - 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 36 more
#VU61287 - Improper input validation
CVE-2022-22719		 CWE-20 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 32 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU61284 - Out-of-bounds write
CVE-2022-23943		 CWE-787 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU60188 - Untrusted Search Path
CVE-2022-23853		 CWE-426 Low
No
No
 - 31.01.2022 SB2022013113
SB2022031532
SB2024011532
and 2 more
#VU59459 - Use After Free
CVE-2021-36976		 CWE-416 Medium
No
No
 - 11.01.2022 SB2021072064
SB2022011140
SB2022031433
and 13 more
#VU46134 - Improper Link Resolution Before File Access ('Link Following')
CVE-2020-14367		 CWE-59 Medium
No
No
 - 31.08.2020 SB2020083109
SB2020083110
SB2020082303
and 6 more
#VU45745 - Incorrect Permission Assignment for Critical Resource
CVE-2020-15862		 CWE-732 Medium
No
No
 - 17.08.2020 SB2020081707
SB2020082704
SB2020111826
and 22 more
#VU15322 - NULL Pointer Dereference
CVE-2018-18065		 CWE-476 Low
No
No
 - 11.10.2018 SB2018101107
SB2018101201
SB2018101807
and 10 more
#VU31436 - Data Handling
CVE-2015-8985		 CWE-19 Medium
No
No
 - 20.03.2017 SB2017032011
SB2019081555
SB2022113036
and 5 more
#VU33268 - Out-of-bounds read
CVE-2017-5601		 CWE-125 Medium
No
No
 - 28.01.2017 SB2017012808
SB2017020106
SB2022061550
and 4 more


Showing elements 121 - 140 out of 352