openSUSE Factory vulnerabilities

CVEs per yearBy the year they were published

1. 202010
2. 20201
3. 20212
4. 20224
5. 20227

Newest CVEs

• CVE-2022-31253

  openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself

  openSUSE · Factory

  High7.1
• CVE-2022-21946

  suddoers configuration for cscreen not restrictive enough

  openSUSE · Factory

  Medium5.3
• CVE-2022-21945

  cscreen: usage of fixed path /tmp/cscreen.debug

  openSUSE · Factory

  Medium5.1
• CVE-2022-21944

  watchman: chown in [email protected] unit allows symlink attack

  openSUSE · openSUSE Backports SLE-15-SP3

  High7.8
• CVE-2021-36781

  parsec: dangerous 777 permissions for /run/parsec

  openSUSE · Factory

  Medium5.9
• CVE-2021-32000

  clone-master-clean-up: dangerous file system operations

  SUSE · SUSE Linux Enterprise Server 12 SP3

  Low3.2
• CVE-2021-25321

  arpwatch: Local privilege escalation from runtime user to root

  SUSE · SUSE Linux Enterprise Server 11-SP4-LTSS

  High7.8
• CVE-2021-25322

  python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root

  openSUSE · Leap 15.2

  Medium6.8
• CVE-2021-31997

  python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root

  openSUSE · Leap 15.2

  Medium6.8
• CVE-2021-25317

  cups: ownership of /var/log/cups allows the lp user to create files as root

  SUSE · SUSE Linux Enterprise Server 11-SP4-LTSS

  Low3.3