GCVE - cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

part: o version: 8 update: *

Vendor	Suse (`ec535637-432e-5a38-96dd-4ec1e0138f73`)
Product	Linux Enterprise Server (`9fa172f9-cfd9-57ad-938b-d2032cbebf96`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:suse/suse`	purl2cpe	2026-06-01 10:12:19.852262

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-3620`	vulnerable	2026-06-08 04:51:43.155446	Details available The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls. Published: 2009-10-22T15:26:00.000Z Updated: 2024-08-07T06:31:10.635Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2009/10/19/3 http://www.redhat.com/support/errata/RHSA-2009-1671.html http://www.securityfocus.com/bid/36824 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9891 https://rhn.redhat.com/errata/RHSA-2009-1540.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4636`	not_vulnerable	2026-06-08 04:50:47.448595	Details available yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process. Published: 2008-11-27T00:00:00.000Z Updated: 2024-08-07T10:24:20.587Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32464 http://secunia.com/advisories/32832 http://osvdb.org/50284 https://exchange.xforce.ibmcloud.com/vulnerabilities/46879 http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6427`	vulnerable	2026-06-08 04:50:08.798952	Details available The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990. Published: 2008-01-18T22:00:00.000Z Updated: 2024-08-07T16:02:37.073Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372 http://secunia.com/advisories/28542 http://secunia.com/advisories/29139 http://www.securityfocus.com/bid/27336 http://www.vupen.com/english/advisories/2008/0184	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1285`	vulnerable	2026-06-08 04:49:41.993019	Details available The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines. Published: 2007-03-06T20:00:00.000Z Updated: 2024-08-07T12:50:35.022Z Open on db.gcve.eu Reference links https://launchpad.net/bugs/173043 http://www.securityfocus.com/bid/22764 http://rhn.redhat.com/errata/RHSA-2007-0154.html http://secunia.com/advisories/26048 http://www.securityfocus.com/archive/1/466166/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.