Known vulnerabilities in SUSE Linux Enterprise Workstation Extension 12-SP5

Vendor: SUSE
Software: SUSE Linux Enterprise Workstation Extension
Version: 12-SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_workstation_extension:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 351
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Workstation Extension version 12-SP5 SUSE Linux Enterprise Workstation Extension 12-SP5 is affected by 351 vulnerabilities: 35 high, 64 medium, 252 low Critical High Medium Low

Vulnerabilities (351)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72143 - Heap-based Buffer Overflow
CVE-2022-43634		 CWE-122 High
No
No
 - 13.02.2023 SB2022122905
SB2023021328
SB2023050133
and 6 more
#VU72079 - Resource Management Errors
CVE-2022-44267		 CWE-399 Low
Public exploit available
No
 - 09.02.2023 SB2023020911
SB2023021005
SB2023021560
and 16 more
#VU72078 - Exposure of sensitive information to an unauthorized actor
CVE-2022-44268		 CWE-200 Medium
Public exploit available
No
 - 09.02.2023 SB2023020911
SB2023021005
SB2023021560
and 16 more
#VU71541 - Improper Access Control
CVE-2022-4662		 CWE-284 Low
No
No
 - 25.01.2023 SB2023012561
SB2023012565
SB2023012626
and 38 more
#VU71539 - Unchecked Return Value
CVE-2022-3108		 CWE-252 Low
No
No
 - 25.01.2023 SB2023012560
SB2023012565
SB2023012626
and 30 more
#VU71538 - NULL Pointer Dereference
CVE-2022-3107		 CWE-476 Low
No
No
 - 25.01.2023 SB2023012560
SB2023012565
SB2023012626
and 20 more
#VU71478 - Type confusion
CVE-2023-23454		 CWE-843 Low
No
No
 - 24.01.2023 SB2023012443
SB2023012450
SB2023012626
and 91 more
#VU70538 - Heap-based Buffer Overflow
CVE-2022-45188		 CWE-122 High
No
No
 - 29.12.2022 SB2022122905
SB2022122912
SB2023011331
and 11 more
#VU69811 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-3567		 CWE-362 Low
No
No
 - 01.12.2022 SB2022120153
SB2022120156
SB2022120158
and 58 more
#VU69803 - Memory corruption
CVE-2022-3628		 CWE-119 Low
No
No
 - 01.12.2022 SB2022120133
SB2022120140
SB2022120150
and 67 more
#VU69799 - Use After Free
CVE-2022-3564		 CWE-416 Low
No
No
 - 01.12.2022 SB2022120131
SB2022120150
SB2022120156
and 97 more
#VU69594 - Out-of-bounds read
CVE-2022-39316		 CWE-125 Medium
No
No
 - 25.11.2022 SB2022112503
SB2022112505
SB2022112508
and 11 more
#VU69592 - Improper Validation of Array Index
CVE-2022-39317		 CWE-129 Medium
No
No
 - 25.11.2022 SB2022112503
SB2022112505
SB2022112508
and 11 more
#VU69590 - Out-of-bounds read
CVE-2022-41877		 CWE-125 Low
No
No
 - 25.11.2022 SB2022112503
SB2022112508
SB2023021343
and 12 more
#VU69589 - Out-of-bounds read
CVE-2022-39320		 CWE-125 Low
No
No
 - 25.11.2022 SB2022112503
SB2022112505
SB2022112508
and 11 more
#VU69588 - Absolute Path Traversal
CVE-2022-39347		 CWE-36 Medium
No
No
 - 25.11.2022 SB2022112503
SB2022112505
SB2022112508
and 11 more
#VU69398 - Use After Free
CVE-2022-3635		 CWE-416 Low
No
No
 - 17.11.2022 SB2022111717
SB2022111721
SB2022111722
and 39 more
#VU67750 - Externally-generated error message containing sensitive information
CVE-2022-39176		 CWE-211 Low
No
No
 - 29.09.2022 SB2022062042
SB2023012655
SB2023012656
and 5 more
#VU65221 - Processor optimization removal or modification of security-critical code
CVE-2022-28693		 CWE-1037 Low
No
No
 - 13.07.2022 SB2022071301
SB2022071302
SB2022081126
and 21 more
#VU64523 - Improper input validation
CVE-2022-39177		 CWE-20 Medium
No
No
 - 20.06.2022 SB2022062042
SB2022062043
SB2023012655
and 6 more


Showing elements 1 - 20 out of 351