What’s Vulnerable › Products

SUSE Linux Enterprise vulnerabilities

130 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your SUSE Linux Enterprise version is affected

Exploited SUSE Linux Enterprise vulnerabilities

• CVE-2016-3714 — ImageMagick Improper Input Validation Vulnerability
• CVE-2014-0196 — Linux Kernel Race Condition Vulnerability

Latest SUSE Linux Enterprise vulnerabilities

• CVE-2026-44933 — Path Traversal in Plugin Loading in libzypp (CVSS 7.8)
• CVE-2020-15707 — GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. (CVSS 6.4)
• CVE-2020-15706 — GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. (CVSS 6.4)
• CVE-2020-15705 — GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim (CVSS 6.4)
• CVE-2020-6449 — (CVSS 8.8)
• CVE-2020-6429 — (CVSS 8.8)
• CVE-2020-6428 — (CVSS 8.8)
• CVE-2020-6427 — (CVSS 8.8)
• CVE-2020-6426 — (CVSS 6.5)
• CVE-2020-6424 — (CVSS 8.8)
• CVE-2020-6422 — (CVSS 8.8)
• CVE-2019-15624 — (CVSS 4.9)
• CVE-2018-20105 — yast2-rmt exposes CA private key passhrase in log-file (CVSS 5.5)
• CVE-2020-5504 — (CVSS 8.8)
• CVE-2019-3688 — squid: /usr/sbin/pinger packaged with wrong permission (CVSS 7.1)
• CVE-2018-19655 — (CVSS 8.8)
• CVE-2018-12122 — (CVSS 7.5)
• CVE-2018-12116 — (CVSS 7.5)
• CVE-2018-19208 — (CVSS 6.5)
• CVE-2018-19052 — (CVSS 7.5)
• CVE-2018-6556 — The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files (CVSS 3.3)
• CVE-2011-4190 — Missing verification of host key for kdump server (CVSS 5.3)
• CVE-2011-3172 — unix2_chkpwd do not check for a valid account (CVSS 9.8)
• CVE-2017-14798 — local privilege escalation in SUSE postgresql init script (CVSS 7.0)
• CVE-2017-5753 — (CVSS 5.6)