Vulnerabilities

SUSE CaaS Platform

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs

CVE-2017-18017

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

Published 2018-01-03 · Modified

10.0EPSS 0.528

CVE-2019-3682

Insecure API port exposed to all Master Node guest containers

Published 2020-01-17 · Modified

8.4EPSS 0.003

CVE-2026-31431

crypto: algif_aead - Revert to operating out-of-place

Published 2026-04-22 · Analyzed

7.8KEVEPSS 0.999

CVE-2022-27239

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

Published 2022-04-27 · Modified

7.8EPSS 0.006

CVE-2020-8030

skuba: Insecure /tmp usage when joining node to cluster

Published 2021-02-11 · Modified

4.4EPSS 0.003

CVE-2019-18900

libzypp stores cookies world readable

Published 2020-01-24 · Modified

4.0EPSS 0.003

CVE-2020-8029

skuba: Insecure handling of private key