Suse Linux vulnerabilities

2 known vulnerabilities in Suse Linux from SUSE. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Red Hat Enterprise Linux 10: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-12087Jan 14, 2025Red HatEPSS 2.26%

  A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--in

• 7.5 High severity

  Red Hat Enterprise Linux 10: Use of Uninitialized Resource

  CVE-2024-12085Jan 14, 2025Red HatEPSS 8.64%

  A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialize