Known vulnerabilities in SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security 12-SP5

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
Version: 12-SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12_sp5_ltss_extended_security:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 57
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security version 12-SP5 SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security 12-SP5 is affected by 57 vulnerabilities: 1 critical, 18 high, 19 medium, 19 low Critical High Medium Low

Vulnerabilities (57)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101942 - Incorrect Default Permissions
CVE-2024-21820		 CWE-276 Low
No
No
 - 27.12.2024 SB2024122731
SB2024122734
SB2024122735
and 11 more
#VU101941 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-23918		 CWE-754 Low
No
No
 - 27.12.2024 SB2024122731
SB2024122734
SB2024122735
and 14 more
#VU101936 - Improper Finite State Machines (FSMs) in Hardware Logic
CVE-2024-21853		 CWE-1245 Low
No
No
 - 27.12.2024 SB2024122729
SB2024122734
SB2024122735
and 14 more
#VU100566 - Off-by-one Error
CVE-2024-52533		 CWE-193 High
No
No
 - 15.11.2024 SB20241115147
SB20241115148
SB20241115149
and 71 more
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978		 CWE-266 Medium
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU100327 - Missing release of memory after effective lifetime
CVE-2024-45819		 CWE-401 Medium
No
No
 - 12.11.2024 SB20241112120
SB20241112131
SB2024111303
and 11 more
#VU100325 - Improper Locking
CVE-2024-45818		 CWE-667 Medium
No
No
 - 12.11.2024 SB20241112118
SB20241112131
SB2024111303
and 12 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 - 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287		 CWE-78 Low
No
No
 - 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU97424 - Observable discrepancy
CVE-2024-23984		 CWE-203 Low
No
No
 - 17.09.2024 SB2024091724
SB2024091725
SB2024091726
and 20 more
#VU97423 - State Issues
CVE-2024-24968		 CWE-371 Low
No
No
 - 17.09.2024 SB2024091723
SB2024091725
SB2024091726
and 18 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU82245 - Resource Management Errors
CVE-2023-45802		 CWE-399 Medium
No
No
 - 19.10.2023 SB2023101942
SB2023101960
SB2023102104
and 37 more


Showing elements 1 - 20 out of 57