Linux Enterprise Software Development Kit

by Suse

Take action — actively targeted

Linux Enterprise Software Development Kit is actively targeted by attackers. A significant proportion of its known vulnerabilities are being exploited.

What to do
  1. Apply all available updates immediately
  2. Review your exposure — is this internet-facing?
  3. Monitor vendor advisories for this product

What Attackers Target

Vulnerabilities with high exploit probability 30.8%
Confirmed actively exploited (CISA) 14.1%
Public exploit code available 10.3%
Based on 78 known vulnerabilities. Percentages show the proportion that are actively dangerous — a low percentage means most vulnerabilities in this product are not being exploited.

Most Dangerous Vulnerabilities

CVE CVSS Exploit Probability Confirmed
CVE-2012-1823 9.8 94.4% Yes
CVE-2014-6271 9.8 94.2% Yes
CVE-2016-3427 9.8 94.0% Yes
CVE-2015-7547 8.1 94.0%
CVE-2015-4000 3.7 93.9%
CVE-2012-0507 9.8 93.6% Yes
CVE-2013-2465 9.8 93.2% Yes
CVE-2014-2323 9.8 91.0%
CVE-2014-7169 9.8 90.1% Yes
CVE-2016-3718 5.5 83.8% Yes
CVE-2016-3715 5.5 77.7% Yes
CVE-2015-4495 8.8 71.6% Yes
CVE-2016-1285 6.8 69.0%
CVE-2016-1286 8.6 53.6%
CVE-2013-1690 8.8 47.1% Yes
CVE-2015-5300 7.5 36.8%
CVE-2017-18017 9.8 34.3%
CVE-2016-5118 9.8 31.8%
CVE-2016-2324 9.8 22.1%
CVE-2016-2315 9.8 17.7%
63
/ 100
high-risk
Active Threat 43/50 · Critical
Exploit Availability 20/50 · Moderate

Score uses Wilson score intervals to account for sample size. Products with few CVEs are scored conservatively.