Known vulnerabilities in SUSE Linux Enterprise Server 15-LTSS - page 17

Vendor: SUSE
Version: 15-LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 1299
Public exploits: 51
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 15-LTSS SUSE Linux Enterprise Server 15-LTSS is affected by 1299 vulnerabilities: 14 critical, 321 high, 454 medium, 510 low Critical High Medium Low

Vulnerabilities (1299)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66639 - Heap-based Buffer Overflow
CVE-2022-0204
CWE-122 Low
No
No
- 18.08.2022 SB2022081856
SB2022081857
SB2022082428
and 8 more
#VU66596 - Heap-based Buffer Overflow
CVE-2022-34503
CWE-122 High
No
No
- 17.08.2022 SB2022081758
SB2022081759
SB2022081760
and 4 more
#VU66595 - Heap-based Buffer Overflow
CVE-2021-36978
CWE-122 High
No
No
- 17.08.2022 SB2021072930
SB2022081759
SB2022081760
and 4 more
#VU66591 - Out-of-bounds read
CVE-2022-1462
CWE-125 Low
No
No
- 17.08.2022 SB2022081737
SB2022081739
SB2022081740
and 49 more
#VU66590 - Out-of-bounds write
CVE-2021-33656
CWE-787 Low
No
No
- 17.08.2022 SB2022081736
SB2022081739
SB2022081740
and 48 more
#VU66589 - NULL Pointer Dereference
CVE-2020-36558
CWE-476 Low
No
No
- 17.08.2022 SB2022081735
SB2022081739
SB2022081740
and 32 more
#VU66588 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-36557
CWE-362 Low
No
No
- 17.08.2022 SB2022081734
SB2022081739
SB2022081740
and 21 more
#VU65833 - Out-of-bounds write
CVE-2021-33655
CWE-787 Low
No
No
- 27.07.2022 SB2022072725
SB2022072814
SB2022081739
and 77 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215
CWE-444 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32214
CWE-444 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 36 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213
CWE-444 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212
CWE-703 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU64208 - Permissions, Privileges, and Access Controls
CVE-2022-20166
CWE-264 Low
No
No
- 13.06.2022 SB2022061414
SB2022081739
SB2022081740
and 16 more
#VU61565 - Exposure of resource to wrong sphere
CVE-2021-26341
CWE-668 Low
No
No
- 23.03.2022 SB2022032308
SB2022071346
SB2022071602
and 32 more
#VU61254 - Use After Free
CVE-2021-22940
CWE-416 Medium
No
No
- 11.03.2022 SB2021081615
SB2022031104
SB2022060618
and 23 more
#VU59234 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22960
CWE-444 Medium
No
No
- 05.01.2022 SB2022010523
SB2022010524
SB2022042806
and 40 more
#VU59233 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22959
CWE-444 Medium
No
No
- 05.01.2022 SB2022010523
SB2022010524
SB2022011841
and 43 more
#VU55560 - Use After Free
CVE-2021-22930
CWE-416 High
No
No
- 03.08.2021 SB2021080320
SB2021080324
SB2021080325
and 35 more
#VU54520 - Improper input validation
CVE-2020-14343
CWE-20 High
Public exploit available
No
- 04.07.2021 SB2021070403
SB2021070404
SB2022042259
and 17 more
#VU25823 - Improper input validation
CVE-2020-1747
CWE-20 High
No
No
- 09.03.2020 SB2020030903
SB2020041201
SB2020051129
and 21 more


Showing elements 321 - 340 out of 1299