SUSE Linux Enterprise Server 12
Approved changes feed: RSS · Atom
cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:*:*:*:*
part: o version: 12 update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Linux Enterprise Server (9fa172f9-cfd9-57ad-938b-d2032cbebf96) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:suse/suse |
purl2cpe | 2026-06-01 10:12:19.836641 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-8013 |
vulnerable | 2026-06-08 05:27:14.648215 |
permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim
LOW (2.2)
A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.
Published: 2020-03-02T16:35:13.188Z
Updated: 2024-09-16T17:23:50.476Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3689 |
not_vulnerable | 2026-06-08 05:13:55.342556 |
nfs-utils: root-owned files stored in insecure /var/lib/nfs directory
MEDIUM (5.1)
The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.
Published: 2019-09-19T13:27:58.449Z
Updated: 2024-09-17T04:14:20.947Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18903 |
vulnerable | 2026-06-08 05:13:12.539949 |
wicked: Use-after-free when receiving invalid DHCP6 IA_PD option
HIGH (7.5)
A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-28.26.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.9.1. openSUSE Factory wicked versions prior to 0.6.62.
Published: 2020-03-02T16:45:18.618Z
Updated: 2024-09-17T01:00:28.473Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18902 |
vulnerable | 2026-06-08 05:13:12.539373 |
wicked: Use-after-free when receiving invalid DHCP6 client options
HIGH (7.5)
A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-3.21.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.6.1. openSUSE Factory wicked versions prior to 0.6.62.
Published: 2020-03-02T16:45:18.218Z
Updated: 2024-09-17T02:41:08.903Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18901 |
vulnerable | 2026-06-08 05:13:12.538872 |
mysql-systemd-helper allows setting 640 permissions of arbitrary files
MEDIUM (5.1)
A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.
Published: 2020-03-02T16:10:13.772Z
Updated: 2024-09-17T01:16:43.090Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18897 |
vulnerable | 2026-06-08 05:13:12.525626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5239 |
vulnerable | 2026-06-08 05:06:49.315418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5006 |
vulnerable | 2026-06-08 05:06:48.514150 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0192 |
vulnerable | 2026-06-08 05:06:13.868702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.