Sign inStart freeBook a demo

Linux Enterprise vulnerabilitiesAnd the versions its exploited flaws hit.

Product4 known exploited6 versions
The short answer

Linux Enterprise is made by Suse. We track 139 published vulnerabilities listed under that exact name, across 6 versions. 4 of them are on the list of flaws known to be exploited, the newest added on 8 June 2022. Suse lists newer releases under their own names, such as Linux Enterprise Server, so check those pages too.

Check your version

The most recent Linux Enterprise flaw added to the known-exploited list is CVE-2009-3953, on 8 June 2022. We keep watching the known-exploited list.

Other names

Is Linux Enterprise listed under other names? Yes.

Suse also lists Linux Enterprise under more specific names, such as Linux Enterprise Server and Linux Enterprise Desktop. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.

Versions

Which versions of Linux Enterprise do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

Known exploited

Which Linux Enterprise vulnerabilities are being exploited?

4 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 8.8
    CVE-2009-3953HighKnown exploited
    Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

    Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.

    Chance of use83%Known exploited since8 Jun 2022
  2. 7.8
    CVE-2009-4324HighKnown exploited
    Adobe Acrobat and Reader Use-After-Free Vulnerability

    Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.

    Chance of use82%Known exploited since8 Jun 2022
  3. 7.8
    CVE-2010-1297HighKnown exploited
    Adobe Flash Player Memory Corruption Vulnerability

    Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

    Chance of use83%Known exploited since8 Jun 2022
  4. 7.8
    CVE-2011-0609HighKnown exploited
    Adobe Flash Player Unspecified Vulnerability

    Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

    Chance of use64%Known exploited since8 Jun 2022
Exploit likelihood

Which Linux Enterprise flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 83%
    CVE-2009-3953HighKnown exploited

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF...

    CVSS8.8Published13 Jan 2010
  2. 82%
    CVE-2009-4324HighKnown exploited

    Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary...

    CVSS7.8Published15 Dec 2009
  3. 31%
    CVE-2016-1960High

    Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of...

    CVSS8.8Published13 Mar 2016
  4. 20%
    CVE-2019-11730Medium

    A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed.

    CVSS6.5Published23 Jul 2019
  5. 20%
    CVE-2009-0949High

    The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference...

    CVSS7.5Published9 Jun 2009
  6. 12%
    CVE-2010-0013High

    Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a ..

    CVSS7.5Published9 Jan 2010
  7. 9.5%
    CVE-2010-4180Medium

    OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers...

    CVSS4.3Published6 Dec 2010
  8. 9.4%
    CVE-2019-7317Medium

    png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

    CVSS5.3Published4 Feb 2019
Precursor Intelligence

Running Linux Enterprise? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 139 published vulnerabilities listed under the name Linux Enterprise, across 6 versions. The most recent Linux Enterprise flaw added to the known-exploited list is CVE-2009-3953, on 8 June 2022.

4 are on the list of flaws known to be exploited. The most recently added are CVE-2009-3953, CVE-2009-4324 and CVE-2010-1297.

Suse also lists Linux Enterprise under more specific names, such as Linux Enterprise Server and Linux Enterprise Desktop. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.

Create a Precursor Intelligence account and track Linux Enterprise. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring