Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
SUSE Linux Enterprise Server Number Of NVD 472 CRITICAL 27 HIGH 179 MEDIUM 215 LOW 51
URL https://www.suse.com/
Explanation Support is normally provided for 10 years after release, with service pack releases ending after about 8 years.
After 10 years, extended support is available for a fee, with yearly updates.
Tag
  • Linux
  • 商用ライセンス有り
Add Information URL
No Type Name URL
1 https://www.suse.com/lifecycle/
2 https://www.suse.com/support/policy/
3 https://www.suse.com/releasenotes/
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
361 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 SP5 May 22, 2023 July 16, 2018 July 31, 2028 July 31, 2031 3 8 2 1
362 SUSE Linux Enterprise Server 12 Service Pack 5 Dec. 9, 2019 Oct. 24, 2014 Oct. 31, 2024 Oct. 31, 2027 18 41 78 9
363 SUSE Linux Enterprise Server 11 March 24, 2009 March 31, 2019 March 31, 2022 15 149 148 31
364 SUSE Linux Enterprise Server 10 June 17, 2006 July 31, 2013 6 104 65 23
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
361 7.8
7.2 		HIGH
Local 		The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL poin… CWE-476
 NULL Pointer Dereference 		CVE-2012-1097 cpe:2.3:o:suse:linux_enterprise_server:11:sp2
cpe:2.3:o:suse:linux_enterprise_server:11:sp2
cpe:2.3:o:suse:linux_… 		2024-11-21 10:36
2012-05-17 		Show GitHub Exploit DB Packet Storm
362 5.5
4.9 		MEDIUM
Local 		The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO. CWE-20
 Improper Input Validation  		CVE-2012-1090 cpe:2.3:o:suse:linux_enterprise_server:11:sp2
cpe:2.3:o:suse:linux_enterprise_server:11:sp2
cpe:2.3:o:suse:linux_… 		2024-11-21 10:36
2012-05-17 		Show GitHub Exploit DB Packet Storm
363 5.5
4.9 		MEDIUM
Local 		The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by st… CWE-400
 Uncontrolled Resource Consumption 		CVE-2012-0879 cpe:2.3:o:suse:linux_enterprise_server:11:sp2
cpe:2.3:o:suse:linux_enterprise_server:11:sp1
cpe:2.3:o:suse:linux_… 		2024-11-21 10:35
2012-05-17 		Show GitHub Exploit DB Packet Storm
364 5.5
4.9 		MEDIUM
Local 		The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local … CWE-476
 NULL Pointer Dereference 		CVE-2012-1146 cpe:2.3:o:suse:linux_enterprise_server:11:sp2
cpe:2.3:o:suse:linux_enterprise_server:11:sp2 		2024-11-21 10:36
2012-05-17 		Show GitHub Exploit DB Packet Storm
365 9.8
7.5 		CRITICAL
Network 		sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which al… CWE-77
Command Injection 		CVE-2012-1823 cpe:2.3:o:suse:linux_enterprise_server:11:sp2
cpe:2.3:o:suse:linux_enterprise_server:11:sp2
cpe:2.3:o:suse:linux_… 		2026-04-22 05:28
2012-05-11 		Show GitHub Exploit DB Packet Storm
366 -
6.8 		MEDIUM Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigge… CWE-190
 Integer Overflow or Wraparound 		CVE-2011-3026 cpe:2.3:o:suse:linux_enterprise_server:11:sp1 2024-11-21 10:29
2012-02-17 		Show GitHub Exploit DB Packet Storm
367 -
4.3 		MEDIUM libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. CWE-125
Out-of-bounds Read 		CVE-2011-3970 cpe:2.3:o:suse:linux_enterprise_server:11:sp3
cpe:2.3:o:suse:linux_enterprise_server:11:sp3
cpe:2.3:o:suse:linux_… 		2024-11-21 10:31
2012-02-9 		Show GitHub Exploit DB Packet Storm
368 -
9.3 		HIGH Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0449 cpe:2.3:o:suse:linux_enterprise_server:11:sp1
cpe:2.3:o:suse:linux_enterprise_server:11:sp1
cpe:2.3:o:suse:linux_… 		2024-11-21 10:34
2012-02-2 		Show GitHub Exploit DB Packet Storm
369 -
10.0 		HIGH Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0444 cpe:2.3:o:suse:linux_enterprise_server:11:sp1
cpe:2.3:o:suse:linux_enterprise_server:11:sp1
cpe:2.3:o:suse:linux_… 		2024-11-21 10:34
2012-02-2 		Show GitHub Exploit DB Packet Storm
370 -
9.3 		HIGH Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote a… NVD-CWE-noinfo
CVE-2012-0442 cpe:2.3:o:suse:linux_enterprise_server:11:sp1
cpe:2.3:o:suse:linux_enterprise_server:11:sp1
cpe:2.3:o:suse:linux_… 		2024-11-21 10:34
2012-02-2 		Show GitHub Exploit DB Packet Storm