🟠 High ⏱ 15–60 min Last verified: 1 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6629 CVE-2013-6630 CVE-2014-9092 CVE-2016-3616 CVE-2017-15232 CVE-2018-11212 CVE-2018-11213 CVE-2018-11214 +9 more Upstream summary: The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-221 Related CVEs: CVE-2023-29323 Upstream summary: ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable through 7.0.0-portable, can abort upon a connection […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-4039 Upstream summary: **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-1614 CVE-2018-7727 CVE-2018-16548 CVE-2018-17828 CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5977 +12 more Upstream summary: pkgsrc audit-packages flagged zziplib<0.10.82nb3 for vulnerability class 'buffer-overflow'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1614 Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 1 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2942 CVE-2013-1912 CVE-2013-2175 CVE-2014-6269 CVE-2015-3281 CVE-2016-5360 CVE-2018-10184 CVE-2018-11469 +12 more Upstream summary: Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged t1utils<1.39 for vulnerability class 'buffer-overflow'. Reference: https://github.com/kohler/t1utils/issues/4 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟠 High ⏱ 15–60 min Last verified: 1 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4770 CVE-2007-4771 CVE-2008-1036 CVE-2009-0153 CVE-2011-4599 CVE-2013-0900 CVE-2013-1569 CVE-2013-2383 +12 more Upstream summary: libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2MOCK2-2025-001 Related CVEs: CVE-2023-6395 Upstream summary: The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4120 CVE-2018-9275 Upstream summary: Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-4400 CVE-2017-15923 CVE-2009-5050 Upstream summary: pkgsrc audit-packages flagged konversation<1.0.1nb8 for vulnerability class 'arbitrary-command-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4400 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
