PackageKit (SUSE:Linux Enterprise Module for Desktop Applications 15 SP1) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 package PackageKit, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2018-20532 — CVSS 6.5 (medium): There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a…
• CVE-2018-20533 — CVSS 6.5 (medium): There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that…
• CVE-2018-20534 — CVSS 6.5 (medium): There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third…
• CVE-2020-16121 — CVSS 3.3 (low): PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that…