SUSE Linux Enterprise Server (SLES) 11 Service Pack 4
Approved changes feed: RSS · Atom
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*
part: o version: 11 update: sp4
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Suse Linux Enterprise Server (84060f20-415e-515d-a3de-5586a69d6e5e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6556 |
vulnerable | 2026-06-08 05:11:53.966253 |
The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files
lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a (read-only) open of special kernel files (ptmx, proc, sys). Affected releases are LXC: 2.0 versions above and including 2.0.9; 3.0 versions above and including 3.0.0, prior to 3.0.2.
Published: 2018-08-10T15:00:00.000Z
Updated: 2024-09-17T03:38:26.856Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19655 |
vulnerable | 2026-06-08 05:11:15.992531 |
Details available
A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.
Published: 2018-11-29T05:00:00.000Z
Updated: 2024-08-05T11:44:20.159Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19208 |
vulnerable | 2026-06-08 05:11:15.468447 |
Details available
In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.
Published: 2018-11-12T19:00:00.000Z
Updated: 2024-08-05T11:30:04.161Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19052 |
vulnerable | 2026-06-08 05:11:15.292738 |
Details available
An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character.
Published: 2018-11-07T05:00:00.000Z
Updated: 2024-08-05T11:30:04.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11053 |
not_vulnerable | 2026-06-08 05:10:37.747236 |
iSM: Dell EMC iDRAC Service Module Improper File Permission Vulnerability
MEDIUM (6.6)
Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system (/etc/hosts) to world writable. A malicious low privileged operating system user or process could modify the host file and potentially redirect traffic from the intended destination to sites hosting malicious or unwanted content.
Published: 2018-06-26T22:00:00.000Z
Updated: 2024-09-16T17:03:39.073Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5753 |
vulnerable | 2026-06-08 05:09:49.462143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.