Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

opensuse — Vulnerabilities & Security Advisories 52

Browse all 52 CVE security advisories affecting opensuse. AI-powered Chinese analysis, POCs, and references for each vulnerability.

openSUSE is a community-driven Linux distribution focused on providing a stable, secure, and flexible operating system for both desktop and server environments. Its core utility lies in offering a robust platform for developers and enterprises seeking customizable infrastructure. Historically, vulnerabilities within the openSUSE ecosystem have predominantly involved privilege escalation and remote code execution, often stemming from misconfigurations or outdated packages within the broader SUSE Linux Enterprise lineage. With fifty recorded CVEs, these issues typically highlight gaps in default security policies or unpatched dependencies rather than fundamental architectural flaws. Notable security characteristics include the integration of AppArmor for mandatory access control and regular automated updates via Zypper. While no catastrophic, widespread incidents have defined its history, the distribution maintains a strong reputation for transparency and rapid patch deployment, ensuring that security postures remain resilient against evolving threat landscapes without relying on proprietary restrictions.

CVE ID Title CVSS Severity Published
CVE-2020-8021 unauthorized read access to files where sourceaccess is disabled via a crafted _service file in Open Build Service — Open Build Service CWE-269 5.3 Medium 2020-05-19
CVE-2020-8020 Persistent XSS in markdown parser used by obs-server — open-build-service CWE-79 6.5 Medium 2020-05-13
CVE-2020-8015 Local privilege escalation in exim package from user mail to root — Factory CWE-59 8.4 High 2020-04-02
CVE-2019-3700 yast: Fallback to DES without configuration in /etc/login.def — Factory CWE-327 2.9 Low 2020-01-24
CVE-2019-3699 Local privilege escalation from user privoxy to root — Leap 15.1 CWE-59 7.7 High 2020-01-24
CVE-2019-3697 Local privilege escalation from user gnump3d to root — Leap 15.1 CWE-59 7.7 High 2020-01-24
CVE-2019-3694 Local privilege escalation from munin to root in the packaging of munin — Factory CWE-59 7.7 High 2020-01-24
CVE-2019-18899 apt-cacher-ng insecure use of /run/apt-cacher-ng — Leap 15.1 CWE-269 6.2 Medium 2020-01-23
CVE-2018-12479 Request controller allows to create requests with arbitrary request IDs — Open Build Service CWE-20 7.5 - 2018-10-09
CVE-2018-12478 obs-service-replace_using_package_version allows to specify arbitrary input files — Open Build Service CWE-20 6.5 - 2018-10-09
CVE-2018-12477 obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories — Open Build Service CWE-93 6.5 - 2018-10-09
CVE-2018-12474 Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm — Open Build Service CWE-20 8.8 - 2018-10-09
CVE-2018-12473 path traversal in obs-service-tar_scm — Open Build Service CWE-23 7.5 - 2018-10-02
CVE-2018-12467 delete package via link exploit in open buildservice — openbuildservice CWE-285 7.5 - 2018-08-01
CVE-2018-12466 openbuildservice allowed deleting packages via project links — openbuildservice CWE-285 6.5 - 2018-08-01
CVE-2014-0593 sed command injection — obs-service-set_version CWE-78 9.8 - 2018-06-08
CVE-2014-0594 CSRF protection incorrectly disabled — Open Build Service CWE-352 8.8 - 2018-06-08
CVE-2013-3703 No write permission check in change_role command — Open Build Service CWE-862 6.5 - 2018-06-08
CVE-2018-7688 Open Build Service accepts arbitrary reviews — Open Build Service CWE-862 6.5 - 2018-06-07
CVE-2018-7689 Open Build Service arbitrary package modification — Open Build Service CWE-862 6.5 - 2018-06-07
CVE-2011-3178 openbuildservice webui code injection — openbuildservice 8.8 - 2018-03-20
CVE-2017-5188 OBS worker VM escape via relative symbolic links — open build service 6.5 - 2018-03-01

This page lists every published CVE security advisory associated with opensuse. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.