Marcus Updateinfo to OVAL Converter 5.5 2023-10-19T04:57:20 SUSE Linux Enterprise Micro 5.5 NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection. Moderate CVE-2012-1096 SUSE bug 738073 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Knot DNS before 1.5.2 allows remote attackers to cause a denial of service (application crash) via a crafted DNS message. Moderate CVE-2014-0486 SUSE bug 891268 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet. Moderate CVE-2014-7141 SUSE bug 1040640 SUSE bug 891268 SUSE bug 895773 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size. Moderate CVE-2014-7142 SUSE bug 895773 SUSE bug 973782 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image. Low CVE-2015-8665 SUSE bug 1156749 SUSE bug 1156754 SUSE bug 1200195 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image. Low CVE-2015-8683 SUSE bug 1156749 SUSE bug 1156754 SUSE bug 1200195 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read. Moderate CVE-2016-10165 SUSE bug 1021364 SUSE bug 1064069 SUSE bug 1070162 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic. Moderate CVE-2016-1907 SUSE bug 1138392 SUSE bug 962495 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The einj_error_inject function in drivers/acpi/apei/einj.c in the Linux kernel allows local users to simulate hardware errors and consequently cause a denial of service by leveraging failure to disable APEI error injection through EINJ when securelevel is set. Low CVE-2016-3695 SUSE bug 1023051 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write. Low CVE-2016-3945 SUSE bug 974614 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp. Low CVE-2016-3990 SUSE bug 975069 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. Moderate CVE-2016-5320 SUSE bug 1007284 SUSE bug 984808 SUSE bug 987351 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image. Moderate CVE-2016-5321 SUSE bug 984813 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image. Moderate CVE-2016-5323 SUSE bug 984815 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client. Moderate CVE-2017-5200 SUSE bug 1011800 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. Low CVE-2017-5579 SUSE bug 1021741 SUSE bug 1022627 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Moderate CVE-2018-0735 SUSE bug 1113534 SUSE bug 1113651 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust. Moderate CVE-2019-13225 SUSE bug 1141157 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object. Low CVE-2019-18874 SUSE bug 1156525 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c. Low CVE-2019-6461 SUSE bug 1122338 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position. Moderate CVE-2020-14415 SUSE bug 1173109 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address. Low CVE-2020-15859 SUSE bug 1174373 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file. Moderate CVE-2020-18768 SUSE bug 1214574 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14834. Reason: This candidate is a reservation duplicate of CVE-2019-14834. Notes: All CVE users should reference CVE-2019-14834 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. Low CVE-2020-20145 SUSE bug 1214514 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks. Low CVE-2020-21047 SUSE bug 1214589 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. Low CVE-2020-29129 SUSE bug 1179466 SUSE bug 1179467 SUSE bug 1179477 SUSE bug 1179484 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate. Important CVE-2020-7919 SUSE bug 1164288 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. Low CVE-2021-20196 SUSE bug 1181361 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.) Low CVE-2021-28153 SUSE bug 1183533 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs. Moderate CVE-2021-34193 SUSE bug 1214591 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signature." RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources. Moderate CVE-2021-3521 SUSE bug 1191175 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service. Low CVE-2021-3527 SUSE bug 1186012 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality. Important CVE-2021-3698 SUSE bug 1189894 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination. Low CVE-2021-3700 SUSE bug 1189491 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition. Low CVE-2021-3930 SUSE bug 1192525 SUSE bug 1192526 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory, and thus allows writing to locations outside of the destination. Moderate CVE-2021-40153 SUSE bug 1189936 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create the symbolic link pointing outside the expected directory, and then the subsequent write operation will cause the unsquashfs process to write through the symbolic link elsewhere in the filesystem. Moderate CVE-2021-41072 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash. Moderate CVE-2021-41229 SUSE bug 1192760 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the `C` portion of the code (responsible for the based namespace setup of containers). In all versions of runc prior to 1.0.3, the encoder did not handle the possibility of an integer overflow in the 16-bit length field for the byte array attribute type, meaning that a large enough malicious byte array attribute could result in the length overflowing and the attribute contents being parsed as netlink messages for container configuration. This vulnerability requires the attacker to have some control over the configuration of the container and would allow the attacker to bypass the namespace restrictions of the container by simply adding their own netlink payload which disables all namespaces. The main users impacted are those who allow untrusted images with untrusted configurations to run on their machines (such as with shared cloud infrastructure). runc version 1.0.3 contains a fix for this bug. As a workaround, one may try disallowing untrusted namespace paths from your container. It should be noted that untrusted namespace paths would allow the attacker to disable namespace protections entirely even in the absence of this bug. Moderate CVE-2021-43784 SUSE bug 1193436 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used. Low CVE-2022-1210 SUSE bug 1198146 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0. Critical CVE-2022-1996 SUSE bug 1200528 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Low CVE-2022-21131 SUSE bug 1199633 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via local access. Low CVE-2022-21136 SUSE bug 1199632 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash. Moderate CVE-2022-2127 SUSE bug 1213174 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks. Moderate CVE-2022-31394 SUSE bug 1208551 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. Low CVE-2022-3535 SUSE bug 1204417 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A vulnerability was found in Linux Kernel. It has been declared as problematic. This vulnerability affects the function vsock_connect of the file net/vmw_vsock/af_vsock.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. VDB-211930 is the identifier assigned to this vulnerability. Low CVE-2022-3629 SUSE bug 1204635 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file fs/nilfs2/segment.c of the component BPF. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211961 was assigned to this vulnerability. Low CVE-2022-3646 SUSE bug 1204646 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Moderate CVE-2022-36648 SUSE bug 1214551 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS). Moderate CVE-2022-38457 SUSE bug 1203330 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. Moderate CVE-2022-40090 SUSE bug 1214680 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS). Moderate CVE-2022-40133 SUSE bug 1203329 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions. Moderate CVE-2022-45154 SUSE bug 1207598 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format. Moderate CVE-2022-48564 SUSE bug 1214677 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities. Moderate CVE-2022-48565 SUSE bug 1214685 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest. Moderate CVE-2022-48566 SUSE bug 1214691 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free. Moderate CVE-2023-0330 SUSE bug 1207205 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate verification. As suddenly enabling the policy check could break existing deployments it was decided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy() function. Instead the applications that require OpenSSL to perform certificate policy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly enable the policy check by calling X509_VERIFY_PARAM_set_flags() with the X509_V_FLAG_POLICY_CHECK flag argument. Certificate policy checks are disabled by default in OpenSSL and are not commonly used by applications. Moderate CVE-2023-0466 SUSE bug 1209873 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-1192 SUSE bug 1208995 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%. Moderate CVE-2023-1206 SUSE bug 1212703 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU. Important CVE-2023-1544 SUSE bug 1209554 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service. Moderate CVE-2023-1667 SUSE bug 1211188 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak. Low CVE-2023-1859 SUSE bug 1210169 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x. Moderate CVE-2023-1916 SUSE bug 1210231 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel. Moderate CVE-2023-2007 SUSE bug 1210448 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure. Moderate CVE-2023-20569 SUSE bug 1213287 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.? Moderate CVE-2023-20588 SUSE bug 1213927 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. Moderate CVE-2023-20593 SUSE bug 1213286 SUSE bug 1213616 SUSE bug 1215674 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service. Moderate CVE-2023-2177 SUSE bug 1210643 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2. Important CVE-2023-22652 SUSE bug 1211078 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK. Moderate CVE-2023-2283 SUSE bug 1211190 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition. Moderate CVE-2023-23559 SUSE bug 1207051 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753. Moderate CVE-2023-25435 SUSE bug 1212607 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience notable to very long delays when processing those messages, which may lead to a Denial of Service. An OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers - most of which have no size limit. OBJ_obj2txt() may be used to translate an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL type ASN1_OBJECT) to its canonical numeric text form, which are the sub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by periods. When one of the sub-identifiers in the OBJECT IDENTIFIER is very large (these are sizes that are seen as absurdly large, taking up tens or hundreds of KiBs), the translation to a decimal number in text may take a very long time. The time complexity is O(n^2) with 'n' being the size of the sub-identifiers in bytes (*). With OpenSSL 3.0, support to fetch cryptographic algorithms using names / identifiers in string form was introduced. This includes using OBJECT IDENTIFIERs in canonical numeric text form as identifiers for fetching algorithms. Such OBJECT IDENTIFIERs may be received through the ASN.1 structure AlgorithmIdentifier, which is commonly used in multiple protocols to specify what cryptographic algorithm should be used to sign or verify, encrypt or decrypt, or digest passed data. Applications that call OBJ_obj2txt() directly with untrusted data are affected, with any version of OpenSSL. If the use is for the mere purpose of display, the severity is considered low. In OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS. It also impacts anything that processes X.509 certificates, including simple things like verifying its signature. The impact on TLS is relatively low, because all versions of OpenSSL have a 100KiB limit on the peer's certificate chain. Additionally, this only impacts clients, or servers that have explicitly enabled client authentication. In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects, such as X.509 certificates. This is assumed to not happen in such a way that it would cause a Denial of Service, so these versions are considered not affected by this issue in such a way that it would be cause for concern, and the severity is therefore considered low. Moderate CVE-2023-2650 SUSE bug 1211430 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output. Important CVE-2023-26604 SUSE bug 1208958 SUSE bug 1210451 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS). Moderate CVE-2023-26964 SUSE bug 1210339 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. Important CVE-2023-26965 SUSE bug 1212398 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian. Moderate CVE-2023-26966 SUSE bug 1212881 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python. Moderate CVE-2023-27043 SUSE bug 1210638 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service. Moderate CVE-2023-2731 SUSE bug 1211478 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Important CVE-2023-2861 SUSE bug 1212968 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service. Moderate CVE-2023-2908 SUSE bug 1212888 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A stack overflow vulnerability exists in function econf_writeFile in file atlibeconf/lib/libeconf.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. Important CVE-2023-30078 SUSE bug 1214597 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. Important CVE-2023-30079 SUSE bug 1214598 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c. Moderate CVE-2023-30086 SUSE bug 1211252 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. Moderate CVE-2023-30775 SUSE bug 1210494 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-3164 SUSE bug 1212233 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ. Important CVE-2023-3180 SUSE bug 1213925 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2. Important CVE-2023-32181 SUSE bug 1211078 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents. Moderate CVE-2023-32360 SUSE bug 1214254 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones. Moderate CVE-2023-3316 SUSE bug 1212535 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distribution Center) over the network, as a way to verify the password. However, if a keytab is not provisioned on the system, pam_krb5 has no way to validate the response from the KDC, and essentially trusts the tgt provided over the network as being valid. In a non-default FreeBSD installation that leverages pam_krb5 for authentication and does not have a keytab provisioned, an attacker that is able to control both the password and the KDC responses can return a valid tgt, allowing authentication to occur for any user on the system. Important CVE-2023-3326 SUSE bug 1212615 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service. Important CVE-2023-3354 SUSE bug 1212850 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver. Moderate CVE-2023-34319 SUSE bug 1213546 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Important CVE-2023-34322 SUSE bug 1215145 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-34323 SUSE bug 1215744 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-34325 SUSE bug 1215747 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Important CVE-2023-34326 SUSE bug 1215746 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-34327 SUSE bug 1215748 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-34328 SUSE bug 1215748 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service. Low CVE-2023-3576 SUSE bug 1213273 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY` frame skips de-allocation of the bookkeeping structure and pending compressed header. The error return [code path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame. The clean-up code is right after the return statement, causing memory leak. Denial of service through memory exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11. Important CVE-2023-35945 SUSE bug 1215713 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which was not being checked for failure. This will likely crash the authenticated user's sftp server connection (if implemented as forking as recommended). For thread-based servers, this might also cause DoS for legitimate users. Given this code is not in any released versions, no security releases have been issued. Moderate CVE-2023-3603 SUSE bug 1213198 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795. Important CVE-2023-3610 SUSE bug 1213580 SUSE bug 1213584 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Important CVE-2023-37327 SUSE bug 1213128 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c. Moderate CVE-2023-37453 SUSE bug 1213123 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service. Moderate CVE-2023-3772 SUSE bug 1213666 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the "-check" option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue. Moderate CVE-2023-3817 SUSE bug 1213853 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** REJECT ** Not a Security Issue. Low CVE-2023-38288 SUSE bug 1213590 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** REJECT ** Not a Security Issue. Low CVE-2023-38289 SUSE bug 1213589 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-38470 SUSE bug 1215947 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means "let the host resolve the name" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long host name to the target buffer instead of copying just the resolved address there. The target buffer being a heap based buffer, and the host name coming from the URL that curl has been told to operate with. Important CVE-2023-38545 SUSE bug 1215888 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a function call that duplicates en easy handle called [curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html). If a transfer has cookies enabled when the handle is duplicated, the cookie-enable state is also cloned - but without cloning the actual cookies. If the source handle did not read any cookies from a specific file on disk, the cloned version of the handle would instead store the file name as `none` (using the four ASCII letters, no quotes). Subsequent use of the cloned handle that does not explicitly set a source to load cookies from would then inadvertently load cookies from a file named `none` - if such a file exists and is readable in the current directory of the program using libcurl. And if using the correct file format of course. Moderate CVE-2023-38546 SUSE bug 1215889 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue. Important CVE-2023-3863 SUSE bug 1213601 SUSE bug 1213603 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure. Moderate CVE-2023-39192 SUSE bug 1215858 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. Moderate CVE-2023-39193 SUSE bug 1215860 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure. Low CVE-2023-39194 SUSE bug 1215861 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-3961 SUSE bug 1215907 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input. Moderate CVE-2023-39615 SUSE bug 1214768 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly, there is a brief window where the SSLSocket instance will detect the socket as "not connected" and won't initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication, and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.) Important CVE-2023-40217 SUSE bug 1214692 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled. Moderate CVE-2023-40283 SUSE bug 1214233 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled. Moderate CVE-2023-40360 SUSE bug 1214287 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Important CVE-2023-40660 SUSE bug 1215762 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-40661 SUSE bug 1215761 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-4091 SUSE bug 1215904 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x. Moderate CVE-2023-41105 SUSE bug 1214693 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue. Moderate CVE-2023-4128 SUSE bug 1214149 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition. Moderate CVE-2023-4133 SUSE bug 1213970 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-4134 SUSE bug 1213971 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed. Moderate CVE-2023-4135 SUSE bug 1213975 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system. Important CVE-2023-4147 SUSE bug 1213968 SUSE bug 1215118 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Important CVE-2023-4154 SUSE bug 1215908 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`). Moderate CVE-2023-4155 SUSE bug 1214022 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate. Moderate CVE-2023-4194 SUSE bug 1214019 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately. Moderate CVE-2023-42467 SUSE bug 1215192 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-42669 SUSE bug 1215905 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-42670 SUSE bug 1215906 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack. Important CVE-2023-4273 SUSE bug 1214120 SUSE bug 1214123 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system. Moderate CVE-2023-42753 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system. Moderate CVE-2023-42754 SUSE bug 1215467 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Important CVE-2023-43040 SUSE bug 1215753 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system. Low CVE-2023-43785 SUSE bug 1215683 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition. Low CVE-2023-43786 SUSE bug 1215682 SUSE bug 1215684 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges. Low CVE-2023-43787 SUSE bug 1215682 SUSE bug 1215685 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `Cookie` header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly. This issue has been patched in urllib3 version 1.26.17 or 2.0.5. Moderate CVE-2023-43804 SUSE bug 1215968 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem. Moderate CVE-2023-4387 SUSE bug 1214350 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This issue may allow a local attacker with user privilege to crash the system or may lead to leaked internal kernel information. Moderate CVE-2023-4389 SUSE bug 1214351 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-4421 SUSE bug 1215312 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup. Moderate CVE-2023-4459 SUSE bug 1214451 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023. Important CVE-2023-4504 SUSE bug 1215204 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash. Important CVE-2023-4527 SUSE bug 1215280 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail." Moderate CVE-2023-45322 SUSE bug 1216129 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Low CVE-2023-4535 SUSE bug 1215763 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** REJECT ** This was assigned as a duplicate of CVE-2023-4244. Low CVE-2023-4563 SUSE bug 1214727 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause a double-deactivations of catchall elements, which results in a memory leak. Low CVE-2023-4569 SUSE bug 1214729 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body (like `POST`) to `GET` as is required by HTTP RFCs. Although this behavior is not specified in the section for redirects, it can be inferred by piecing together information from different sections and we have observed the behavior in other major HTTP client implementations like curl and web browsers. Because the vulnerability requires a previously trusted service to become compromised in order to have an impact on confidentiality we believe the exploitability of this vulnerability is low. Additionally, many users aren't putting sensitive data in HTTP request bodies, if this is the case then this vulnerability isn't exploitable. Both of the following conditions must be true to be affected by this vulnerability: 1. Using urllib3 and submitting sensitive information in the HTTP request body (such as form data or JSON) and 2. The origin service is compromised and starts redirecting using 301, 302, or 303 to a malicious peer or the redirected-to service becomes compromised. This issue has been addressed in versions 1.26.18 and 2.0.7 and users are advised to update to resolve this issue. Users unable to update should disable redirects for services that aren't expecting to respond with redirects with `redirects=False` and disable automatic redirects with `redirects=False` and handle 301, 302, and 303 redirects manually by stripping the HTTP request body. Moderate CVE-2023-45803 SUSE bug 1216377 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. Moderate CVE-2023-45853 SUSE bug 1216378 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c. Important CVE-2023-4622 SUSE bug 1215117 SUSE bug 1215442 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free. We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f. Important CVE-2023-4623 SUSE bug 1215115 SUSE bug 1215440 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Important CVE-2023-4692 SUSE bug 1215935 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-4693 SUSE bug 1215936 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Use After Free in GitHub repository vim/vim prior to 9.0.1840. Important CVE-2023-4733 SUSE bug 1215004 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. Moderate CVE-2023-4734 SUSE bug 1214925 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. Low CVE-2023-4735 SUSE bug 1214924 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. Important CVE-2023-4738 SUSE bug 1214922 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Use After Free in GitHub repository vim/vim prior to 9.0.1857. Important CVE-2023-4750 SUSE bug 1215005 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Use After Free in GitHub repository vim/vim prior to 9.0.1858. Important CVE-2023-4752 SUSE bug 1215006 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. Important CVE-2023-4781 SUSE bug 1215033 SUSE bug 1215457 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags. Moderate CVE-2023-4806 SUSE bug 1215281 SUSE bug 1215714 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge. Moderate CVE-2023-4813 SUSE bug 1215286 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** REJECT ** CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team. Moderate CVE-2023-4881 SUSE bug 1215221 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue(). We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8. Important CVE-2023-4921 SUSE bug 1215275 SUSE bug 1215300 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. Low CVE-2023-5156 SUSE bug 1215714 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. Low CVE-2023-5344 SUSE bug 1215940 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705. Moderate CVE-2023-5345 SUSE bug 1215899 SUSE bug 1215971 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Moderate CVE-2023-5388 SUSE bug 1216198 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960. Moderate CVE-2023-5441 SUSE bug 1216001 cpe:/o:suse:sle-micro:5.5 SUSE Linux Enterprise Micro 5.5 Use After Free in GitHub repository vim/vim prior to v9.0.2010. Important CVE-2023-5535 SUSE bug 1216167 cpe:/o:suse:sle-micro:5.5