[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffEkSRMi2FQZ_1EkHInWNqZbUMn7nEx4rFOgiN9BSjIk":3,"g5a-family:novell\u002Fsuse_linux":138,"g5a-ex:novell\u002Fsuse_linux@*":169},{"success":4,"data":5},true,{"product":6,"versions":36,"topVulnerabilitiesByEpss":45,"kevVulnerabilities":110,"seoMetadata":116,"meta":135},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":35},"novell","suse_linux",8,23,0,"2025-06-18",[14,17,20,23,25,28,31,33],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"10",3,{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},"10.0",6,{"version":24,"cve_count":19,"kev_count":11,"has_kev":16},"10.1",{"version":26,"cve_count":27,"kev_count":11,"has_kev":16},"11",9,{"version":29,"cve_count":30,"kev_count":11,"has_kev":16},"11.0",2,{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"9",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"9.3","Suse Linux by Novell is a technology product with 8 tracked versions and 23 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[37,38,39,40,41,42,43,44],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},{"version":24,"cve_count":19,"kev_count":11,"has_kev":16},{"version":26,"cve_count":27,"kev_count":11,"has_kev":16},{"version":29,"cve_count":30,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},[46,54,62,69,75,82,88,93,99,104],{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":16,"epssScore":53},"CVE-2024-12084","A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.","2025-01-15",9.8,"v3.1","Critical",0.72059,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":16,"epssScore":61},"CVE-2006-5229","OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via timing discrepancies in which responses take longer for valid usernames than invalid ones, as demonstrated by sshtime.  NOTE: as of 20061014, it appears that this issue is dependent on the use of manually-set passwords that causes delays when processing \u002Fetc\u002Fshadow due to an increased number of rounds.","2006-10-10",2.6,"v2","Low",0.58329,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":59,"severity":67,"isKev":16,"epssScore":68},"CVE-2013-4854","The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.","2013-07-29",7.8,"High",0.3415,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":51,"severity":67,"isKev":16,"epssScore":74},"CVE-2007-1285","The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.","2007-03-06",7.5,0.1883,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":59,"severity":80,"isKev":16,"epssScore":81},"CVE-2008-2025","Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \"insufficient quoting of parameters.\"","2009-04-09",4.3,"Medium",0.07911,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":51,"severity":80,"isKev":16,"epssScore":87},"CVE-2024-12088","A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.","2025-01-14",6.5,0.04745,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":66,"cvssVersion":51,"severity":67,"isKev":4,"epssScore":92},"CVE-2026-31431","In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings.  Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.","2026-04-22",0.03437,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":59,"severity":60,"isKev":16,"epssScore":98},"CVE-2015-2566","Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via vectors related to DML.","2015-04-16",2.8,0.02617,{"cveId":100,"description":101,"publishedDate":96,"cvssScore":102,"cvssVersion":59,"severity":60,"isKev":16,"epssScore":103},"CVE-2015-2567","Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges.",3.5,0.02479,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":108,"cvssVersion":59,"severity":80,"isKev":16,"epssScore":109},"CVE-2010-1507","WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key.","2010-09-03",5,0.02121,[111],{"cveId":89,"description":90,"publishedDate":91,"cvssScore":66,"severity":67,"isKev":4,"epssScore":92,"cisaVulnName":112,"cisaDateAdded":113,"cisaShortDescription":114,"cisaRequiredAction":115},"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","2026-05-01","Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.","\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":117,"metaDescription":118,"keywords":119,"structuredData":120},"Suse Linux by Novell - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Suse Linux by Novell covering 8 versions with 23 tracked vulnerabilities including 0 critical and 1 high-severity issues. Real-time threat intelligence, CVE tracking, and security recommendations.","Suse Linux vulnerabilities, Suse Linux security, Suse Linux CVE, Novell Suse Linux, Suse Linux threat intelligence, Novell security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":121,"@type":122,"name":123,"description":118,"url":124,"manufacturer":125,"applicationCategory":129,"softwareVersion":130,"mainEntity":131},"https:\u002F\u002Fschema.org","SoftwareApplication","Suse Linux","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnovell\u002Fsuse_linux",{"@type":126,"name":127,"url":128},"Organization","Novell","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnovell","Security Software","8 versions tracked",{"@type":132,"name":133,"description":134,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Suse Linux Security Vulnerabilities","Security vulnerabilities affecting Suse Linux by Novell",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":136,"apiVersion":137},"2026-10-17T20:40:47.454Z","3.0",[139,142,145,148,151,154,156,159,161,163,165,167],{"product":140,"cves":141},"suse_linux_enterprise_server",94,{"product":143,"cves":144},"suse_linux_enterprise_desktop",83,{"product":146,"cves":147},"suse_linux_enterprise_software_development_kit",65,{"product":149,"cves":150},"suse_linux_enterprise_real_time_extension",33,{"product":152,"cves":153},"suse_linux_enterprise_debuginfo",24,{"product":155,"cves":153},"suse_linux_enterprise_workstation_extension",{"product":157,"cves":158},"suse_linux_enterprise_live_patching",22,{"product":160,"cves":158},"suse_linux_enterprise_module_for_public_cloud",{"product":162,"cves":19},"suse_linux_enterprise_module_for_web_scripting",{"product":164,"cves":30},"suse_linux_sdk",{"product":166,"cves":30},"suse_linux_enterprise_module_for_legacy_software",{"product":168,"cves":30},"suse_linux_enterprise_point_of_sale",{"rows":170,"total":175,"capped":16,"failed":11},[171],{"cveId":89,"name":112,"severity":67,"cvss":66,"added":113,"epss":92,"published":172,"ranges":173,"checked":4,"hits":174,"covers":16},"2026-04-22T09:16:21.27",[],[],1]