Suse Linux vulnerabilities

2 known vulnerabilities in Suse Linux from Novell. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Red Hat Enterprise Linux 10: Out-of-bounds Write

  CVE-2024-12084Jan 15, 2025Red HatEPSS 72.5%

  A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bo

• 7.5 High severity

  Red Hat Enterprise Linux 10: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-12088Jan 14, 2025Red HatEPSS 4.65%

  A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may l