openSUSE Vulnerabilities and Affected Products
Vulnerabilities associated with opensuse.
Products
Clear product- Factory24 vulnerabilities
- Open Build Service13 vulnerabilities
- openSUSE Leap 15.113 vulnerabilities
- Leap 15.18 vulnerabilities
- Tumbleweed7 vulnerabilities
- openSUSE Leap 15.26 vulnerabilities
- openSUSE Leap 15.44 vulnerabilities
- leap3 vulnerabilities
- Leap 15.23 vulnerabilities
- openbuildservice3 vulnerabilities
- openSUSE Tumbleweed3 vulnerabilities
- libeconf2 vulnerabilities
- opensuse2 vulnerabilities
- openSUSE Backports SLE-15-SP32 vulnerabilities
- openSUSE Factory2 vulnerabilities
- openSUSE Leap 15.32 vulnerabilities
- Build service1 vulnerability
- buildservice1 vulnerability
- libsolv1 vulnerability
- obs-service-set_version1 vulnerability
- open-build-service1 vulnerability
- openSUSE Backports SLE-15-SP11 vulnerability
- openSUSE Backports SLE-15-SP21 vulnerability
- openSUSE Backports SLE-15-SP41 vulnerability
- openSUSE Leap Micro 5.21 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2016-3714HIGH | ImageMagick Improper Input Validation VulnerabilityThe (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick." CWE-20May 5, 2016 | CVSS8.4v3.1 | EPSS97.5% | PoCs13 | SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
opensuse opensuse Improper Input ValidationThe monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013. CWE-20Jan 2, 2014 | CVSS5.0v2.0 | EPSS97.5% | PoCs16 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |