[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVdam4R7fw4dPlothUpmVtdVwsPmTDhYHN6ocStEI4PM":3,"g5a-family:suse\u002Flinux_enterprise_high_availability_extension":116,"g5a-ex:suse\u002Flinux_enterprise_high_availability_extension@*":117},{"success":4,"data":5},true,{"product":6,"versions":25,"topVulnerabilitiesByEpss":29,"kevVulnerabilities":88,"seoMetadata":94,"meta":113},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":24},"suse","linux_enterprise_high_availability_extension",3,28,1,"2021-04-14",[14,17,22],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},"11",26,{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},"12",2,0,false,{"version":23,"cve_count":11,"kev_count":20,"has_kev":21},"15","Linux Enterprise High Availability Extension by Suse is a technology product with 3 tracked versions and 28 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[26,27,28],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},{"version":23,"cve_count":11,"kev_count":20,"has_kev":21},[30,38,43,50,57,62,67,73,77,82],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":21,"epssScore":37},"CVE-2014-2323","SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.","2014-03-14",9.8,"v3.1","Critical",0.62752,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":21,"epssScore":42},"CVE-2017-18017","The tcpmss_mangle_packet function in net\u002Fnetfilter\u002Fxt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.","2018-01-03",0.52841,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":35,"severity":48,"isKev":4,"epssScore":49},"CVE-2014-3153","The futex_requeue function in kernel\u002Ffutex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.","2014-06-07",7.8,"High",0.37233,{"cveId":51,"description":52,"publishedDate":33,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":21,"epssScore":56},"CVE-2014-2324","Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.",5,"v2","Medium",0.29521,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":21,"epssScore":61},"CVE-2014-3467","Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.","2014-06-05",0.068,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":21,"epssScore":66},"CVE-2015-3281","The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.","2015-07-06",0.04357,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":54,"severity":48,"isKev":21,"epssScore":72},"CVE-2014-2706","Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and tx.c.","2014-04-14",7.1,0.04338,{"cveId":74,"description":75,"publishedDate":60,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":21,"epssScore":76},"CVE-2014-3469","The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument.",0.03817,{"cveId":78,"description":79,"publishedDate":60,"cvssScore":80,"cvssVersion":54,"severity":48,"isKev":21,"epssScore":81},"CVE-2014-3468","The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.",7.5,0.03789,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":54,"severity":48,"isKev":21,"epssScore":87},"CVE-2010-2959","Integer overflow in net\u002Fcan\u002Fbcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.","2010-09-08",7.2,0.03746,[89],{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"severity":48,"isKev":4,"epssScore":49,"cisaVulnName":90,"cisaDateAdded":91,"cisaShortDescription":92,"cisaRequiredAction":93},"Linux Kernel Privilege Escalation Vulnerability","2022-05-25","The futex_requeue function in kernel\u002Ffutex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.","Apply updates per vendor instructions.",{"title":95,"metaDescription":96,"keywords":97,"structuredData":98},"Linux Enterprise High Availability Extension by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Linux Enterprise High Availability Extension by Suse covering 3 versions with 28 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Linux Enterprise High Availability Extension vulnerabilities, Linux Enterprise High Availability Extension security, Linux Enterprise High Availability Extension CVE, Suse Linux Enterprise High Availability Extension, Linux Enterprise High Availability Extension threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Linux Enterprise High Availability Extension KEV, Linux Enterprise High Availability Extension exploited vulnerabilities",{"@context":99,"@type":100,"name":101,"description":96,"url":102,"manufacturer":103,"applicationCategory":107,"softwareVersion":108,"mainEntity":109},"https:\u002F\u002Fschema.org","SoftwareApplication","Linux Enterprise High Availability Extension","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Flinux_enterprise_high_availability_extension",{"@type":104,"name":105,"url":106},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","3 versions tracked",{"@type":110,"name":111,"description":112,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Linux Enterprise High Availability Extension Security Vulnerabilities","Security vulnerabilities affecting Linux Enterprise High Availability Extension by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":114,"apiVersion":115},"2026-10-17T12:13:03.398Z","3.0",[],{"rows":118,"total":11,"capped":21,"failed":20},[119],{"cveId":44,"name":90,"severity":48,"cvss":47,"added":91,"epss":49,"published":120,"ranges":121,"checked":4,"hits":123,"covers":21},"2014-06-07T14:55:27.24",[122],"11-sp3",[]]