Severity by source
Sources disagree (Medium–Critical)AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.
CVSS VectorVendor: glibc
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
7DescriptionCVE.org
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.
AnalysisAI
Heap buffer overflow in glibc scanf functions versions 2.7 through 2.43 allows remote unauthenticated attackers to execute arbitrary code by providing malicious input to applications using %mc format specifiers with width >1024. CVSS 9.8 indicates critical network-accessible impact, but EPSS score of 0.02% (5th percentile) suggests minimal real-world exploitation activity at time of analysis. No CISA KEV listing confirms this as a theoretical risk requiring specific application usage patterns rather than widespread active exploitation. Successful exploitation depends on target applications parsing attacker-controlled input through affected scanf family functions with specific format string configurations.
Technical ContextAI
The GNU C Library (glibc) is the foundational C standard library for Linux and Unix-like systems, providing core runtime functions including formatted input parsing. The vulnerability resides in the scanf family of functions (scanf, fscanf, sscanf) when using the POSIX-extension %mc (malloc'd character match) format specifier combined with explicit width specifiers exceeding 1024 characters. The %mc allocator is designed to dynamically allocate memory for matched character sequences, but the implementation contains a CWE-122 heap-based buffer overflow that writes one byte beyond the allocated buffer boundary when width >1024. This affects all glibc versions from 2.7 (released 2007) through 2.43, encompassing nearly two decades of library releases and impacting virtually all Linux distributions and embedded systems using glibc. The heap corruption occurs during the parsing phase before application-level validation, making it a low-level memory safety issue in critical system infrastructure.
RemediationAI
Upgrade to glibc version 2.44 or later when released by the glibc project, monitoring the official sourceware.org announcement list at https://inbox.sourceware.org/libc-announce/. Vendor-specific patched versions not independently confirmed at time of analysis-consult distribution security advisories for backported fixes to stable branches (RHEL, Ubuntu LTS, Debian stable typically backport critical glibc patches within 48-72 hours). Immediate compensating controls: (1) Audit application code for scanf family function usage with %mc format specifier-replace with safer alternatives like getline() with explicit buffer management or POSIX getdelim(); (2) If scanf usage is unavoidable, enforce format string validation to reject width specifiers >1024 or hardcode format strings without runtime construction; (3) Deploy memory safety mitigations including ASLR, stack canaries, and heap protections (already default in most distributions but verify enabled); (4) Network segmentation to limit exposure of services processing untrusted input through vulnerable parsing functions. Note that disabling %m scanf extensions entirely via compiler flags may break legitimate application functionality-test thoroughly before production deployment. Code review focusing on network-facing input handlers provides highest risk reduction with lowest operational impact compared to emergency glibc upgrades.
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
Local privilege escalation in GNU glibc 2.36 and newer arises from a heap-based buffer overflow in __vsyslog_internal, r
Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-depe
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-depende
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before th
sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. Rated critical seve
GNU Libc current is affected by: Mitigation bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely e
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer ove
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin
The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Se
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Heap Overflow
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SLES15-SP5-CHOST-BYOS-SAP-CCloud | Fixed |
| SLES15-SP6-CHOST-BYOS | Fixed |
| SLES15-SP6-CHOST-BYOS-Aliyun | Fixed |
| SLES15-SP6-CHOST-BYOS-Azure | Fixed |
| SLES15-SP6-CHOST-BYOS-EC2 | Fixed |
| SLES15-SP6-CHOST-BYOS-GCE | Fixed |
| SLES15-SP6-CHOST-BYOS-GDC | Fixed |
| SLES15-SP6-CHOST-BYOS-SAP-CCloud | Fixed |
| SLES15-SP7-CHOST-BYOS-Aliyun | Fixed |
| SLES15-SP7-CHOST-BYOS-Azure | Fixed |
| SLES15-SP7-CHOST-BYOS-EC2 | Fixed |
| SLES15-SP7-CHOST-BYOS-GCE | Fixed |
| SLES15-SP7-CHOST-BYOS-GDC | Fixed |
| SLES15-SP7-CHOST-BYOS-SAP-CCloud | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise Micro 5.2 | Fixed |
| SUSE Linux Enterprise Micro 5.3 | Fixed |
| SUSE Linux Enterprise Micro 5.4 | Fixed |
| SUSE Linux Enterprise Micro 5.5 | Fixed |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 16.0 | Fixed |
| SUSE Linux Enterprise Server 16.1 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Fixed |
| SUSE Linux Micro 6.0 | Fixed |
| SUSE Linux Micro 6.1 | Fixed |
| SUSE Linux Micro 6.2 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| SLES15-SP3-CHOST-BYOS-Aliyun | Fixed |
| SLES15-SP3-CHOST-BYOS-Azure | Fixed |
| SLES15-SP3-CHOST-BYOS-EC2 | Fixed |
| SLES15-SP3-CHOST-BYOS-GCE | Fixed |
| SLES15-SP3-CHOST-BYOS-SAP-CCloud | Fixed |
| SLES15-SP4-CHOST-BYOS | Fixed |
| SLES15-SP4-CHOST-BYOS-Aliyun | Fixed |
| SLES15-SP4-CHOST-BYOS-Azure | Fixed |
| SLES15-SP4-CHOST-BYOS-EC2 | Fixed |
| SLES15-SP4-CHOST-BYOS-GCE | Fixed |
| SLES15-SP4-CHOST-BYOS-SAP-CCloud | Fixed |
| SLES15-SP5-CHOST-BYOS-Aliyun | Fixed |
| SLES15-SP5-CHOST-BYOS-Azure | Fixed |
| SLES15-SP5-CHOST-BYOS-EC2 | Fixed |
| SLES15-SP5-CHOST-BYOS-GCE | Fixed |
| SLES15-SP5-CHOST-BYOS-GDC | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | Fixed |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | Fixed |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP5 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | Fixed |
| SUSE Linux Enterprise Server 12 SP5 | Fixed |
| SUSE Linux Enterprise Server 12 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security | Fixed |
| SUSE Linux Enterprise Server 15 SP4 | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5 | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Manager Proxy 4.3 | Fixed |
| SUSE Manager Proxy LTS 4.3 | Fixed |
| SUSE Manager Retail Branch Server 4.3 | Fixed |
| SUSE Manager Retail Branch Server LTS 4.3 | Fixed |
| SUSE Manager Server 4.3 | Fixed |
| SUSE Manager Server LTS 4.3 | Fixed |
| SUSE CaaS Platform 4.0 | Fixed |
| SUSE Enterprise Storage 6 | Fixed |
| SUSE Enterprise Storage 7 | Fixed |
| SUSE Enterprise Storage 7.1 | Fixed |
| SUSE Linux Enterprise Desktop 11 SP3 | Fixed |
| SUSE Linux Enterprise Desktop 11 SP4 | Fixed |
| SUSE Linux Enterprise Desktop 12 SP4 | Fixed |
| SUSE Linux Enterprise Desktop 15 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP1 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP2 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP3 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP4 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP5 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP1 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP2 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | Fixed |
| SUSE Linux Enterprise Micro 5.0 | Fixed |
| SUSE Linux Enterprise Micro 5.1 | Fixed |
| SUSE Linux Enterprise Module for Basesystem 15 | Fixed |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | Fixed |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | Fixed |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | Fixed |
| SUSE Linux Enterprise Module for Legacy 15 SP3 | Fixed |
| SUSE Linux Enterprise Point of Sale 11 SP3 | Fixed |
| SUSE Linux Enterprise Real Time 15 SP2 | Fixed |
| SUSE Linux Enterprise Real Time 15 SP3 | Fixed |
| SUSE Linux Enterprise Real Time 15 SP4 | Fixed |
| SUSE Linux Enterprise Server 11 SP3 | Fixed |
| SUSE Linux Enterprise Server 11 SP3-LTSS | Fixed |
| SUSE Linux Enterprise Server 11 SP4 | Fixed |
| SUSE Linux Enterprise Server 11 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 12 SP4 | Fixed |
| SUSE Linux Enterprise Server 12 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise Server 12 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 | Fixed |
| SUSE Linux Enterprise Server 15 SP1 | Fixed |
| SUSE Linux Enterprise Server 15 SP1-BCL | Fixed |
| SUSE Linux Enterprise Server 15 SP1-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP2 | Fixed |
| SUSE Linux Enterprise Server 15 SP2-BCL | Fixed |
| SUSE Linux Enterprise Server 15 SP2-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP3 | Fixed |
| SUSE Linux Enterprise Server 15 SP3-BCL | Fixed |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise Server 15-LTSS | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | Fixed |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | Fixed |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | Fixed |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | Fixed |
| SUSE Manager Proxy 4.0 | Fixed |
| SUSE Manager Proxy 4.1 | Fixed |
| SUSE Manager Proxy 4.2 | Fixed |
| SUSE Manager Retail Branch Server 4.0 | Fixed |
| SUSE Manager Retail Branch Server 4.1 | Fixed |
| SUSE Manager Retail Branch Server 4.2 | Fixed |
| SUSE Manager Server 4.0 | Fixed |
| SUSE Manager Server 4.1 | Fixed |
| SUSE Manager Server 4.2 | Fixed |
| SUSE OpenStack Cloud 9 | Fixed |
| SUSE OpenStack Cloud Crowbar 9 | Fixed |
| openSUSE Leap 15.3 | Fixed |
| openSUSE Leap 15.4 | Fixed |
| openSUSE Leap 15.5 | Fixed |
| openSUSE Leap Micro 5.2 | Fixed |
| openSUSE Leap Micro 5.3 | Fixed |
| openSUSE Leap Micro 5.4 | Fixed |
| openSUSE Leap Micro 5.5 | Fixed |
| SLES-CHOST-BYOS-Aliyun | Fixed |
| SLES-CHOST-BYOS-Azure | Fixed |
| SLES-CHOST-BYOS-EC2 | Fixed |
| SLES-CHOST-BYOS-GCE | Fixed |
| SLES-CHOST-BYOS-GDC | Fixed |
| SLES-CHOST-BYOS-SAP-CCloud | Fixed |
| SUSE Linux Micro Extras 6.2 | Fixed |
| bci/bci-base-fips:15.5 bci/bci-busybox:15.4 bci/bci-busybox:15.5 bci/bci-busybox:15.6 bci/bci-init:15.3 bci/bci-init:15.4 bci/bci-init:15.5 bci/bci-micro:15.3 bci/bci-micro:15.4 bci/bci-micro:15.5 bci/bci-minimal:15.3 bci/bci-minimal:15.4 bci/bci-minimal:15.5 bci/bci-sle15-kernel-module-devel:15.5 bci/dotnet-aspnet bci/dotnet-aspnet:3.1 bci/dotnet-aspnet:5.0 bci/dotnet-aspnet:6.0 bci/dotnet-aspnet:7.0 bci/dotnet-aspnet:8.0 bci/dotnet-aspnet:9.0 bci/dotnet-runtime bci/dotnet-runtime:3.1 bci/dotnet-runtime:5.0 bci/dotnet-runtime:6.0 bci/dotnet-runtime:7.0 bci/dotnet-runtime:8.0 bci/dotnet-runtime:9.0 bci/dotnet-sdk bci/dotnet-sdk:3.1 bci/dotnet-sdk:5.0 bci/dotnet-sdk:6.0 bci/dotnet-sdk:7.0 bci/dotnet-sdk:8.0 bci/dotnet-sdk:9.0 bci/gcc bci/golang bci/golang:1.16 bci/golang:1.17 bci/golang:1.18 bci/golang:1.19 bci/golang:1.20-openssl bci/golang:1.21 bci/golang:1.23 bci/golang:1.23-openssl bci/kiwi bci/node:12 bci/node:14 bci/node:16 bci/node:18 bci/node:22 bci/nodejs bci/openjdk bci/openjdk-devel bci/openjdk-devel:11 bci/openjdk-devel:17 bci/openjdk:11 bci/openjdk:17 bci/php bci/php-apache bci/php-apache:8 bci/php-fpm bci/php-fpm:8 bci/php:8 bci/python bci/python:3 bci/ruby bci/rust bci/rust:1.56 bci/rust:1.59 bci/rust:1.60 bci/rust:1.61 bci/rust:1.62 bci/rust:1.63 bci/rust:1.64 bci/rust:1.65 bci/rust:1.66 bci/rust:1.67 bci/rust:1.68 bci/rust:1.77 bci/rust:1.86 bci/spack:0.23 containers/apache-pulsar:3.3 containers/apache-tomcat:10.1-openjdk11 containers/apache-tomcat:10.1-openjdk17 containers/apache-tomcat:10.1-openjdk21 containers/apache-tomcat:9-openjdk11 containers/apache-tomcat:9-openjdk17 containers/apache-tomcat:9-openjdk21 containers/apache-tomcat:9-openjdk8 containers/lmcache-lmstack-router:0 containers/lmcache-vllm-openai:0 containers/milvus:2.4 containers/ollama:0 containers/open-webui-mcpo:0 containers/open-webui-pipelines:0 containers/open-webui:0 containers/python:3.11 containers/python:3.9 containers/pytorch:2-nvidia containers/pytorch:2.5.0 containers/suse-ai-observability-extension-runtime:1 containers/suse-ai-observability-extension-setup:1 containers/vllm-openai:0 kiwi-templates-Minimal kiwi-templates-Minimal-Cloud-sap kiwi-templates-Minimal-MS-HyperV-sap kiwi-templates-Minimal-VMware-sap kiwi-templates-Minimal-kvm-and-xen-sap private-registry/1.2/harbor-core private-registry/1.2/harbor-exporter private-registry/1.2/harbor-jobservice private-registry/1.2/harbor-portal private-registry/1.2/harbor-registry private-registry/1.2/harbor-registryctl private-registry/1.2/harbor-trivy-adapter private-registry/harbor-core private-registry/harbor-db private-registry/harbor-exporter private-registry/harbor-jobservice private-registry/harbor-nginx private-registry/harbor-portal private-registry/harbor-registry private-registry/harbor-registryctl private-registry/harbor-trivy-adapter private-registry/harbor-valkey rancher/elemental-builder-image/5.3 rancher/elemental-channel rancher/elemental-operator rancher/elemental-operator/5.3 rancher/elemental-rt-channel rancher/elemental-teal-iso/5.3 rancher/elemental-teal-iso/5.4 rancher/elemental-teal-rt/5.3 rancher/elemental-teal-rt/5.4 rancher/elemental-teal/5.3 rancher/elemental-teal/5.4 rancher/seedimage-builder rancher/seedimage-builder/5.3 ses/6/cephcsi/cephcsi ses/6/rook/ceph ses/7.1/ceph/grafana ses/7.1/ceph/haproxy ses/7.1/ceph/keepalived ses/7.1/ceph/prometheus-alertmanager ses/7.1/ceph/prometheus-node-exporter ses/7.1/ceph/prometheus-server ses/7.1/ceph/prometheus-snmp_notifier ses/7.1/cephcsi/cephcsi ses/7.1/cephcsi/csi-attacher:v4.1.0 ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 ses/7.1/cephcsi/csi-provisioner:v3.4.0 ses/7.1/cephcsi/csi-resizer:v1.7.0 ses/7.1/cephcsi/csi-snapshotter:v6.2.1 ses/7.1/rook/ceph ses/7/ceph/ceph ses/7/ceph/grafana ses/7/ceph/prometheus-alertmanager ses/7/ceph/prometheus-node-exporter ses/7/ceph/prometheus-server ses/7/cephcsi/cephcsi ses/7/cephcsi/csi-attacher:v2.1.0 ses/7/cephcsi/csi-attacher:v3.3.0 ses/7/cephcsi/csi-livenessprobe:v1.1.0 ses/7/cephcsi/csi-node-driver-registrar:v1.2.0 ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 ses/7/cephcsi/csi-provisioner:v1.6.0 ses/7/cephcsi/csi-provisioner:v3.0.0 ses/7/cephcsi/csi-resizer:v0.4.0 ses/7/cephcsi/csi-resizer:v1.3.0 ses/7/cephcsi/csi-snapshotter:v2.1.0 ses/7/cephcsi/csi-snapshotter:v2.1.1 ses/7/cephcsi/csi-snapshotter:v4.2.0 ses/7/prometheus-webhook-snmp ses/7/rook/ceph suse/389-ds suse/bind suse/cosign suse/git suse/git:2 suse/helm suse/hpc/warewulf4-x86_64/sle-hpc-node suse/kiosk/firefox-esr:esr suse/kiosk/pulseaudio:17 suse/kiosk/xorg:21 suse/kubectl suse/kubectl:1.31 suse/manager/4.3/proxy-httpd suse/manager/4.3/proxy-salt-broker suse/manager/4.3/proxy-squid suse/manager/4.3/proxy-ssh suse/manager/4.3/proxy-tftpd suse/manager/5.0/x86_64/proxy-httpd suse/manager/5.0/x86_64/proxy-salt-broker suse/manager/5.0/x86_64/proxy-squid suse/manager/5.0/x86_64/proxy-ssh suse/manager/5.0/x86_64/proxy-tftpd suse/manager/5.0/x86_64/server suse/manager/5.0/x86_64/server-attestation suse/manager/5.0/x86_64/server-hub-xmlrpc-api suse/manager/5.0/x86_64/server-migration-14-16 suse/mariadb-client:10.11 suse/mariadb:10.11 suse/multi-linux-manager/5.1/x86_64/proxy-httpd suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker suse/multi-linux-manager/5.1/x86_64/proxy-squid suse/multi-linux-manager/5.1/x86_64/proxy-ssh suse/multi-linux-manager/5.1/x86_64/proxy-tftpd suse/multi-linux-manager/5.1/x86_64/server suse/multi-linux-manager/5.1/x86_64/server-attestation suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api suse/multi-linux-manager/5.1/x86_64/server-migration-14-16 suse/multi-linux-manager/5.1/x86_64/server-postgresql suse/multi-linux-manager/5.1/x86_64/server-saline suse/multi-linux-manager/5.2/x86_64/proxy-httpd suse/multi-linux-manager/5.2/x86_64/proxy-salt-broker suse/multi-linux-manager/5.2/x86_64/proxy-squid suse/multi-linux-manager/5.2/x86_64/proxy-ssh suse/multi-linux-manager/5.2/x86_64/proxy-tftpd suse/multi-linux-manager/5.2/x86_64/server suse/multi-linux-manager/5.2/x86_64/server-attestation suse/multi-linux-manager/5.2/x86_64/server-database-migration suse/multi-linux-manager/5.2/x86_64/server-hub-xmlrpc-api suse/multi-linux-manager/5.2/x86_64/server-migration-14-16 suse/multi-linux-manager/5.2/x86_64/server-postgresql suse/multi-linux-manager/5.2/x86_64/server-saline suse/nginx suse/pcp suse/pcp:5 suse/pcp:6 suse/postgres suse/postgres:10 suse/postgres:12 suse/postgres:13 suse/postgres:14 suse/postgres:15 suse/postgres:16 suse/registry suse/registry:2.8 suse/rmt-mariadb suse/rmt-mariadb-client suse/rmt-nginx suse/rmt-server suse/sle-micro-rancher/5.2 suse/sle-micro-rancher/5.3 suse/sle-micro-rancher/5.4 suse/sle-micro/5.0/toolbox suse/sle-micro/5.1/toolbox suse/sle-micro/5.2/toolbox suse/sle-micro/5.3/toolbox suse/sle-micro/5.4/toolbox suse/sle-micro/5.5 suse/sle-micro/5.5/toolbox suse/sle-micro/base-5.5 suse/sle-micro/kvm-5.5 suse/sle-micro/rt-5.5 suse/sle15:15.0 suse/sle15:15.1 suse/sle15:15.2 suse/sle15:15.3 suse/sle15:15.4 suse/sle15:15.5 suse/sles/15.2/virt-api:0.38.1 suse/sles/15.2/virt-controller:0.38.1 suse/sles/15.2/virt-handler:0.38.1 suse/sles/15.2/virt-launcher:0.38.1 suse/sles/15.2/virt-operator:0.38.1 suse/sles/15.3/cdi-apiserver:1.37.1 suse/sles/15.3/cdi-cloner:1.37.1 suse/sles/15.3/cdi-controller:1.37.1 suse/sles/15.3/cdi-importer:1.37.1 suse/sles/15.3/cdi-operator:1.37.1 suse/sles/15.3/cdi-uploadproxy:1.37.1 suse/sles/15.3/cdi-uploadserver:1.37.1 suse/sles/15.3/libguestfs-tools:0.45.0 suse/sles/15.3/virt-api:0.45.0 suse/sles/15.3/virt-controller:0.45.0 suse/sles/15.3/virt-handler:0.45.0 suse/sles/15.3/virt-launcher:0.45.0 suse/sles/15.3/virt-operator:0.45.0 suse/sles/15.4/cdi-apiserver:1.43.0 suse/sles/15.4/cdi-cloner:1.43.0 suse/sles/15.4/cdi-controller:1.43.0 suse/sles/15.4/cdi-importer:1.43.0 suse/sles/15.4/cdi-operator:1.43.0 suse/sles/15.4/cdi-uploadproxy:1.43.0 suse/sles/15.4/cdi-uploadserver:1.43.0 suse/sles/15.4/libguestfs-tools:0.49.0 suse/sles/15.4/virt-api:0.49.0 suse/sles/15.4/virt-controller:0.49.0 suse/sles/15.4/virt-handler:0.49.0 suse/sles/15.4/virt-launcher:0.49.0 suse/sles/15.4/virt-operator:0.49.0 suse/sles/15.5/cdi-apiserver:1.55.0 suse/sles/15.5/cdi-cloner:1.55.0 suse/sles/15.5/cdi-controller:1.55.0 suse/sles/15.5/cdi-importer:1.55.0 suse/sles/15.5/cdi-operator:1.55.0 suse/sles/15.5/cdi-uploadproxy:1.55.0 suse/sles/15.5/cdi-uploadserver:1.55.0 suse/sles/15.5/libguestfs-tools:0.58.0 suse/sles/15.5/virt-api:0.58.0 suse/sles/15.5/virt-controller:0.58.0 suse/sles/15.5/virt-exportproxy:0.58.0 suse/sles/15.5/virt-exportserver:0.58.0 suse/sles/15.5/virt-handler:0.58.0 suse/sles/15.5/virt-launcher:0.58.0 suse/sles/15.5/virt-operator:0.58.0 suse/sles/15.6/cdi-apiserver:1.58.0 suse/sles/15.6/cdi-cloner:1.58.0 suse/sles/15.6/cdi-controller:1.58.0 suse/sles/15.6/cdi-importer:1.58.0 suse/sles/15.6/cdi-operator:1.58.0 suse/sles/15.6/cdi-uploadproxy:1.58.0 suse/sles/15.6/cdi-uploadserver:1.58.0 suse/sles/15.6/libguestfs-tools:1.1.1 suse/sles/15.6/pr-helper:1.1.1 suse/sles/15.6/virt-api:1.1.1 suse/sles/15.6/virt-controller:1.1.1 suse/sles/15.6/virt-exportproxy:1.1.1 suse/sles/15.6/virt-exportserver:1.1.1 suse/sles/15.6/virt-handler:1.1.1 suse/sles/15.6/virt-launcher:1.1.1 suse/sles/15.6/virt-operator:1.1.1 suse/sles/15.7/cdi-apiserver:1.58.0 suse/sles/15.7/cdi-cloner:1.58.0 suse/sles/15.7/cdi-controller:1.58.0 suse/sles/15.7/cdi-importer:1.58.0 suse/sles/15.7/cdi-operator:1.58.0 suse/sles/15.7/cdi-uploadproxy:1.58.0 suse/sles/15.7/cdi-uploadserver:1.58.0 suse/sles/15.7/libguestfs-tools:1.5.0 suse/sles/15.7/pr-helper:1.5.0 suse/sles/15.7/virt-api:1.5.0 suse/sles/15.7/virt-controller:1.5.0 suse/sles/15.7/virt-exportproxy:1.5.0 suse/sles/15.7/virt-exportserver:1.5.0 suse/sles/15.7/virt-handler:1.5.0 suse/sles/15.7/virt-launcher:1.5.0 suse/sles/15.7/virt-operator:1.5.0 suse/sles/16.0/toolbox suse/sles12sp4 suse/sles12sp5 suse/stunnel suse/valkey trento/trento-db trento/trento-runner trento/trento-wanda trento/trento-web | Fixed |
Share
External POC / Exploit Code
Leaving vuln.today
EUVD-2026-23978
GHSA-v898-xg3c-w4rj