What are the most common weakness types in SUSE linux enterprise software development kit CVEs?

SUSE linux enterprise software development kit's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-787 (Out-of-bounds Write), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

What is the average severity of SUSE linux enterprise software development kit CVEs?

The average CVSS base score across SUSE linux enterprise software development kit's scored CVEs is 6.7.

SUSE linux enterprise software development kit Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: SUSE linux enterprise software development kit vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

SUSE linux enterprise software development kit Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

SUSE linux enterprise software development kit has 303 published CVE records since 2007, of which 12 are in CISA's Known Exploited Vulnerabilities catalog and 101 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

Severity and exploitation

How the CVSS severity of SUSE linux enterprise software development kit's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical100

High42

Medium130

Low31

In CISA’s Known Exploited Vulnerabilities catalog

12 of SUSE linux enterprise software development kit's CVEs are confirmed exploited in the wild.

Public exploits

101

101 of SUSE linux enterprise software development kit's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every SUSE linux enterprise software development kit version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

11 <= v <= 11190 CVEs
12 <= v <= 12122 CVEs
10 <= v <= 1094 CVEs
11.0 <= v <= 11.03 CVEs
12.0 <= v <= 12.03 CVEs

Find a version

303 CVEs

Sort

High vulnerability · 2022-04-27
CVE-2022-27239
Patch
CWE-787
High · CVSS 7.8
EPSS 0.6% (46th pct)2022-04-27
outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
CVE-2020-8025
Public exploit
Patch
CWE-279
Critical · CVSS 9.3
EPSS 0.5% (40th pct)2020-08-07
Critical vulnerability · 2020-06-29
CVE-2019-3681
Public exploit
Patch
CWE-73
Critical · CVSS 9.8
EPSS 1.4% (72th pct)2020-06-29
Medium vulnerability · 2020-04-02
CVE-2020-8017
Patch
CWE-367
Medium · CVSS 6.3
EPSS 0.2% (10th pct)2020-04-02
High vulnerability · 2020-04-02
CVE-2020-8016
Public exploit
Patch
CWE-367
High · CVSS 7.0
EPSS 0.3% (20th pct)2020-04-02
High vulnerability · 2020-03-03
CVE-2019-3696
Public exploit
Patch
CWE-22
High · CVSS 8.4
EPSS 0.5% (38th pct)2020-03-03
pcp: Local privilege escalation from user pcp to root
CVE-2019-3695
Public exploit
Patch
CWE-94
High · CVSS 8.4
EPSS 0.5% (40th pct)2020-03-03
High vulnerability · 2020-02-17
CVE-2014-1947
Public exploit
Patch
CWE-787
High · CVSS 7.8
EPSS 7.0% (94th pct)2020-02-17
Medium vulnerability · 2020-01-23
CVE-2015-5239
Patch
CWE-835
Medium · CVSS 6.5
EPSS 3.6% (89th pct)2020-01-23
Medium vulnerability · 2020-01-23
CVE-2015-1931
Patch
CWE-312
Medium · CVSS 5.5
EPSS 0.2% (12th pct)2020-01-23
Uninitialized read in gdImageCreateFromXbm
CVE-2019-11038
Public exploit
Patch
CWE-457
Medium · CVSS 5.3
EPSS 4.3% (91th pct)2019-06-18
High vulnerability · 2019-03-17
CVE-2017-16232
Public exploit
Patch
CWE-772
High · CVSS 7.5
EPSS 5.6% (93th pct)2019-03-17
package builds could use directory traversal to write outside of target area
CVE-2017-14804
Patch
CWE-22
Critical · CVSS 9.9
EPSS 1.7% (77th pct)2018-03-01
Critical vulnerability · 2018-01-03
CVE-2017-18017
Patch
CWE-416
Critical · CVSS 9.8
EPSS 52.8% (99th pct)2018-01-03
High vulnerability · 2017-07-21
CVE-2015-5300
Patch
CWE-361
High · CVSS 7.5
EPSS 9.1% (95th pct)2017-07-21
High vulnerability · 2017-06-19
CVE-2017-1000366
Public exploit
Patch
CWE-119
High · CVSS 7.8
EPSS 2.7% (86th pct)2017-06-19
Critical vulnerability · 2017-06-08
CVE-2016-4473
Public exploit
Patch
CWE-416
Critical · CVSS 9.8
EPSS 7.8% (95th pct)2017-06-08
High vulnerability · 2017-04-13
CVE-2015-8567
Patch
CWE-401
High · CVSS 7.7
EPSS 5.6% (93th pct)2017-04-13
High vulnerability · 2017-04-12
CVE-2016-9959
Public exploit
Patch
CWE-125
High · CVSS 7.8
EPSS 2.3% (83th pct)2017-04-12
High vulnerability · 2017-04-12
CVE-2016-9958
Public exploit
Patch
CWE-119
High · CVSS 7.8
EPSS 2.3% (83th pct)2017-04-12
High vulnerability · 2017-04-12
CVE-2016-9957
Public exploit
Patch
CWE-119
High · CVSS 7.8
EPSS 1.9% (80th pct)2017-04-12
High vulnerability · 2017-04-05
CVE-2015-4680
Public exploit
Patch
CWE-295
High · CVSS 7.5
EPSS 1.8% (78th pct)2017-04-05
High vulnerability · 2017-03-24
CVE-2016-7797
Patch
CWE-254
High · CVSS 7.5
EPSS 3.3% (88th pct)2017-03-24
High vulnerability · 2017-03-23
CVE-2016-9398
Patch
CWE-617
High · CVSS 7.5
EPSS 6.0% (93th pct)2017-03-23
High vulnerability · 2017-03-17
CVE-2014-9854
Patch
CWE-399
High · CVSS 7.5
EPSS 3.7% (89th pct)2017-03-17
Medium vulnerability · 2017-03-17
CVE-2014-9853
Patch
CWE-399
Medium · CVSS 5.5
EPSS 1.8% (78th pct)2017-03-17
Critical vulnerability · 2017-03-17
CVE-2014-9852
Patch
CWE-913
Critical · CVSS 9.8
EPSS 2.9% (87th pct)2017-03-17
Medium vulnerability · 2017-03-15
CVE-2017-5898
Patch
CWE-190
Medium · CVSS 5.5
EPSS 0.4% (33th pct)2017-03-15
Medium vulnerability · 2017-02-03
CVE-2016-2318
Patch
CWE-476
Medium · CVSS 5.5
EPSS 1.9% (79th pct)2017-02-03
Medium vulnerability · 2017-02-03
CVE-2016-2317
Patch
CWE-119
Medium · CVSS 5.5
EPSS 2.0% (80th pct)2017-02-03

Showing 30 of 303

Common weakness types

The CWE weakness categories most often found in SUSE linux enterprise software development kit CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many SUSE linux enterprise software development kit CVEs were published each year.

2010

2011

2012

2013

2014

2015

2016

Other SUSE products

Browse vulnerabilities for other products by SUSE.

kernel-devel14,629 CVEs kernel-source14,463 CVEs kernel-macros14,095 CVEs kernel-default12,802 CVEs kernel-syms12,802 CVEs kernel-default-devel12,763 CVEs kernel-docs12,442 CVEs kernel-rt12,333 CVEs

Frequently asked questions

Common questions about SUSE linux enterprise software development kit vulnerabilities.

How many CVEs does SUSE linux enterprise software development kit have?: SUSE linux enterprise software development kit has 303 published CVE records since 2007.
How many SUSE linux enterprise software development kit CVEs are in CISA KEV?: Yes — 12 of SUSE linux enterprise software development kit's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for SUSE linux enterprise software development kit vulnerabilities?: Yes — 101 of SUSE linux enterprise software development kit's CVEs have a known public exploit.
Which versions of SUSE linux enterprise software development kit are affected?: 5 distinct SUSE linux enterprise software development kit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in SUSE linux enterprise software development kit CVEs?: SUSE linux enterprise software development kit's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-787 (Out-of-bounds Write), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
How many critical SUSE linux enterprise software development kit vulnerabilities are there?: SUSE linux enterprise software development kit has 100 critical and 42 high-severity CVEs.
What is the average severity of SUSE linux enterprise software development kit CVEs?: The average CVSS base score across SUSE linux enterprise software development kit's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track SUSE linux enterprise software development kit vulnerabilities

Get an alert for each new SUSE linux enterprise software development kit CVE, with AI-written analysis and remediation steps.

Create an account See pricing