🟡 Medium ⏱ 10–30 min Last verified: 11 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3700 CVE-2009-3826 CVE-2015-8936 Upstream summary: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 5.4.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-ujson 5.4.0-r0 Related CVEs: CVE-2022-31116 CVE-2022-31117 CVE-2021-45958 Upstream summary: Alpine community repository for vv3.18 ships py3-ujson 5.4.0-r0 which addresses CVE-2022-31116. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 11 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0914 CVE-2002-1311 CVE-2003-0040 CVE-2004-0224 CVE-2004-0591 CVE-2004-0777 CVE-2004-2313 CVE-2005-1308 +7 more Upstream summary: Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1078-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-2494 CVE-2024-2496 CVE-2023-3750 CVE-2023-2700 CVE-2024-1441 Upstream summary: A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates […]
🟠 High ⏱ 15–60 min Last verified: 11 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6809-1 Related CVEs: CVE-2022-3563 CVE-2023-27349 CVE-2023-45866 https://launchpad.net/bugs/1977968 CVE-2022-0204 CVE-2019-8922 CVE-2021-3658 CVE-2021-41229 +6 more Upstream summary: It was discovered that BlueZ could be made to dereference invalid memory. An attacker could […]
🟢 Low ⏱ 5–15 min Last verified: 11 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6210-1 Related CVEs: CVE-2023-34246 Upstream summary: It was discovered that Doorkeeper incorrectly performed authorization checks for public clients that have been previous approved. An attacker could potentially exploit these in […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2401-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13225 Upstream summary: A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing […]
🟡 Medium ⏱ 10–30 min Last verified: 11 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6408-1 Related CVEs: CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 Upstream summary: Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2024:0560-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-37460 Upstream summary: Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` […]
🟠 High ⏱ 15–60 min Last verified: 11 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-6947 Related CVEs: CVE-2024-34156 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
