Linux Enterprise Debuginfo vulnerabilities

7 known vulnerabilities in Linux Enterprise Debuginfo from SUSE. 5 are rated high or critical, and 7 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 5.5 Medium severity

  ImageMagick Server-Side Request Forgery (SSRF) Exploited

  CVE-2016-3718May 5, 2016Red HatEPSS 75.6%

  The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

• 5.5 Medium severity

  ImageMagick Arbitrary File Deletion Exploited

  CVE-2016-3715May 5, 2016Red HatEPSS 75.3%

  The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

• 8.8 High severity

  Mozilla Firefox Security Feature Bypass Exploited

  CVE-2015-4495Aug 8, 2015MozillaEPSS 68.6%

  The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and

• 7.8 High severity

  ISC BIND Data Processing Errors Exploited

  CVE-2015-5477Jul 29, 2015Juniper NetworksEPSS 99.6%

  named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

• 9.8 Critical severity

  Oracle Java SE and Java SE Embedded Remote Code Execution Exploited

  CVE-2015-2590Jul 16, 2015OracleEPSS 25.5%

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-201

• 8.8 High severity

  Adobe Acrobat and Reader Universal 3D Remote Code Execution Exploited

  CVE-2009-3953Jan 13, 2010AdobeEPSS 83.2%

  The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclarat

• 7.8 High severity

  Adobe Acrobat and Reader Use-After-Free Exploited

  CVE-2009-4324Dec 15, 2009AdobeEPSS 81.9%

  Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compres