openSUSE Vulnerabilities and Affected Products
Vulnerabilities associated with openSUSE Leap 15.4.
Products
Clear product- Factory24 vulnerabilities
- Open Build Service13 vulnerabilities
- openSUSE Leap 15.113 vulnerabilities
- Leap 15.18 vulnerabilities
- Tumbleweed7 vulnerabilities
- openSUSE Leap 15.26 vulnerabilities
- openSUSE Leap 15.44 vulnerabilities
- leap3 vulnerabilities
- Leap 15.23 vulnerabilities
- openbuildservice3 vulnerabilities
- openSUSE Tumbleweed3 vulnerabilities
- libeconf2 vulnerabilities
- opensuse2 vulnerabilities
- openSUSE Backports SLE-15-SP32 vulnerabilities
- openSUSE Factory2 vulnerabilities
- openSUSE Leap 15.32 vulnerabilities
- Build service1 vulnerability
- buildservice1 vulnerability
- libsolv1 vulnerability
- obs-service-set_version1 vulnerability
- open-build-service1 vulnerability
- openSUSE Backports SLE-15-SP11 vulnerability
- openSUSE Backports SLE-15-SP21 vulnerability
- openSUSE Backports SLE-15-SP41 vulnerability
- openSUSE Leap Micro 5.21 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-45153HIGH | saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.slsAn Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphan… CWE-276Feb 15, 2023 | CVSS7.0v3.1 | EPSS0.223% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-31254HIGH | rmt-server-pubcloud allows to escalate from user _rmt to rootA Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4… CWE-276Feb 7, 2023 | CVSS7.8v3.1 | EPSS0.248% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-22643MEDIUM | libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` callsAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin… CWE-78Feb 7, 2023 | CVSS6.3v3.1 | EPSS2.45% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-31252MEDIUM | permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to … CWE-863Oct 6, 2022 | CVSS4.4v3.1 | EPSS0.143% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |