Known vulnerabilities in SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12 SP2 BCL
Version: 12-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12_sp2_bcl:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 247
Public exploits: 11
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 SP2 BCL version 12-SP2 SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 is affected by 247 vulnerabilities: 5 critical, 64 high, 72 medium, 106 low Critical High Medium Low

Vulnerabilities (247)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80932 - Off-by-one Error
CVE-2023-4504		 CWE-193 High
No
No
 - 20.09.2023 SB2023092051
SB2023092052
SB2023092054
and 26 more
#VU79586 - Access of Uninitialized Pointer
CVE-2023-36054		 CWE-824 Medium
No
No
 - 16.08.2023 SB2023081621
SB2023081623
SB2023081624
and 51 more
#VU79263 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20569		 CWE-200 Low
No
No
 - 08.08.2023 SB20230808145
SB20230808146
SB2023080902
and 86 more
#VU79262 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2022-40982		 CWE-1342 Medium
No
No
 - 08.08.2023 SB20230808144
SB2023081009
SB2023081143
and 113 more
#VU78572 - Use After Free
CVE-2023-20593		 CWE-416 Low
No
No
 - 24.07.2023 SB2023072428
SB2023072429
SB2023072553
and 134 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU77641 - Use After Free
CVE-2023-34241		 CWE-416 Medium
No
No
 - 22.06.2023 SB2023062261
SB2023062272
SB2023062276
and 36 more
#VU76672 - Integer overflow
CVE-2023-2610		 CWE-190 High
No
No
 - 30.05.2023 SB2023053072
SB2023060908
SB2023061307
and 19 more
#VU76671 - NULL Pointer Dereference
CVE-2023-2609		 CWE-476 Low
No
No
 - 30.05.2023 SB2023053071
SB2023060908
SB2023061307
and 15 more
#VU76670 - Use of Out-of-range Pointer Offset
CVE-2023-2426		 CWE-823 Low
No
No
 - 30.05.2023 SB2023053070
SB2023060908
SB2023061307
and 14 more
#VU76308 - Improper Authentication
CVE-2023-32360		 CWE-287 Medium
No
No
 - 18.05.2023 SB2023051860
SB2023051901
SB2023051902
and 36 more
#VU76222 - Processor optimization removal or modification of security-critical code
CVE-2023-0459		 CWE-1037 Low
No
No
 - 16.05.2023 SB20230516114
SB20230516117
SB20230516118
and 48 more
#VU74771 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2023-1637		 CWE-1342 Low
No
No
 - 10.04.2023 SB2023041037
SB2023041041
SB2023041830
and 30 more
#VU74499 - NULL Pointer Dereference
CVE-2023-1355		 CWE-476 Low
No
No
 - 06.04.2023 SB2023040616
SB2023040625
SB2023050455
and 7 more
#VU73172 - NULL Pointer Dereference
CVE-2023-1264		 CWE-476 Low
No
No
 - 08.03.2023 SB2023030818
SB2023032026
SB2023032045
and 16 more
#VU73169 - Divide By Zero
CVE-2023-1127		 CWE-369 Low
No
No
 - 08.03.2023 SB2023030818
SB2023031642
SB2023031656
and 17 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU17858 - Resource exhaustion
CVE-2018-20784		 CWE-400 Low
No
No
 - 26.02.2019 SB2019022606
SB2022061630
SB2022061634
and 3 more
#VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3639		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052207
SB2018052208
and 142 more


Showing elements 1 - 20 out of 247