Linux Enterprise Server For SAP vulnerabilities

4 known vulnerabilities in Linux Enterprise Server For SAP from SUSE. 4 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Sudo Inclusion of Functionality from Untrusted Control Sphere Exploited

  CVE-2025-32463Jun 30, 2025Sudo ProjectEPSS 56.3%

  Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

• 7.8 High severity

  ghostscript: Out-of-bounds Read

  CVE-2024-46956Nov 10, 2024Artifex

  An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.

• 7.8 High severity

  ghostscript: Integer Overflow or Wraparound

  CVE-2024-46953Nov 10, 2024Artifex

  An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.

• 7.8 High severity

  ghostscript: Access of Uninitialized Pointer

  CVE-2024-46951Nov 10, 2024Artifex

  An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.