GCVE - cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*

part: o version: 10.0 update: -

Vendor	Suse (`ec535637-432e-5a38-96dd-4ec1e0138f73`)
Product	Linux Enterprise (`7124ec89-fc28-5077-a86e-e56aae964408`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/suse/doc-sle`	purl2cpe	2026-06-01 10:12:20.487420

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2416`	vulnerable	2026-06-08 04:51:28.364823	Details available Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework. Published: 2009-08-11T18:00:00.000Z Updated: 2025-01-21T15:30:42.200Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-815-1 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html http://secunia.com/advisories/36631 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9262 http://www.networkworld.com/columnists/2009/080509-xml-flaw.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2408`	vulnerable	2026-06-08 04:51:28.241133	Details available Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5. Published: 2009-07-30T19:00:00.000Z Updated: 2024-08-07T05:52:14.734Z Open on db.gcve.eu Reference links http://secunia.com/advisories/36139 http://secunia.com/advisories/36157 http://www.securitytracker.com/id?1022632 http://www.mandriva.com/security/advisories?name=MDVSA-2009:197 http://www.novell.com/linux/security/advisories/2009_48_firefox.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0949`	vulnerable	2026-06-08 04:51:12.429947	Details available The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags. Published: 2009-06-09T17:00:00.000Z Updated: 2024-08-07T04:57:17.124Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/35169 http://www.debian.org/security/2009/dsa-1811 http://secunia.com/advisories/35340 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9631 https://bugzilla.redhat.com/show_bug.cgi?id=500972	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0040`	vulnerable	2026-06-08 04:51:07.208756	Details available The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables. Published: 2009-02-22T22:00:00.000Z Updated: 2024-08-07T04:17:10.449Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2009-0315.html http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html http://support.apple.com/kb/HT3757 http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html http://security.gentoo.org/glsa/glsa-200903-28.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4989`	vulnerable	2026-06-08 04:50:48.765363	Details available The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN). Published: 2008-11-13T00:00:00.000Z Updated: 2024-08-07T10:31:28.318Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2008:227 http://www.ubuntu.com/usn/usn-678-2 http://secunia.com/advisories/33694 http://security.gentoo.org/glsa/glsa-200901-10.xml http://www.redhat.com/support/errata/RHSA-2008-0982.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.