Known vulnerabilities in SUSE Linux Enterprise Realtime Extension 15-SP3 - page 2

Vendor: SUSE
Software: SUSE Linux Enterprise Realtime Extension
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_realtime_extension:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 180
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Realtime Extension version 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP3 is affected by 180 vulnerabilities: 1 critical, 44 high, 60 medium, 75 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72245 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-23946		 CWE-59 Medium
No
No
 - 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 28 more
#VU72085 - Improper input validation
CVE-2022-48279		 CWE-20 Medium
No
No
 - 09.02.2023 SB2023020946
SB2023020948
SB2023020949
and 15 more
#VU72079 - Resource Management Errors
CVE-2022-44267		 CWE-399 Low
Public exploit available
No
 - 09.02.2023 SB2023020911
SB2023021005
SB2023021560
and 16 more
#VU72078 - Exposure of sensitive information to an unauthorized actor
CVE-2022-44268		 CWE-200 Medium
Public exploit available
No
 - 09.02.2023 SB2023020911
SB2023021005
SB2023021560
and 16 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 - 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 47 more
#VU71620 - Heap-based Buffer Overflow
CVE-2022-48281		 CWE-122 High
No
No
 - 30.01.2023 SB2023013012
SB2023013014
SB2023013015
and 27 more
#VU71529 - Resource exhaustion
CVE-2022-3094		 CWE-400 Medium
No
No
 - 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU71341 - Missing release of memory after effective lifetime
CVE-2023-0417		 CWE-401 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71340 - Improper input validation
CVE-2023-0413		 CWE-20 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71339 - Improper input validation
CVE-2023-0416		 CWE-20 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71338 - Improper input validation
CVE-2023-0415		 CWE-20 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71337 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-0411		 CWE-835 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71335 - Improper input validation
CVE-2023-0412		 CWE-20 Medium
No
No
 - 19.01.2023 SB2023011907
SB2023021030
SB2023011810
and 3 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001		 CWE-119 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU70040 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-4345		 CWE-835 Medium
No
No
 - 08.12.2022 SB2022120803
SB2023021030
SB2023011810
and 6 more


Showing elements 21 - 40 out of 180