🟢 Low ⏱ 5–15 min Last verified: 4 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-42934 Upstream summary: OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7203 CVE-2018-16976 CVE-2018-20683 Upstream summary: gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1002 CVE-2006-2194 CVE-2008-5366 CVE-2008-5367 CVE-2014-3158 CVE-2015-3310 CVE-2018-11574 CVE-2020-8597 +2 more Upstream summary: Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-6410 Upstream summary: kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7024-1 Related CVEs: CVE-2024-45751 Upstream summary: It was discovered that tgt attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.4.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-jwt 2.4.0-r0 Related CVEs: CVE-2022-29217 Upstream summary: Alpine community repository for vv3.19 ships py3-jwt 2.4.0-r0 which addresses CVE-2022-29217. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7647-1 Related CVEs: CVE-2021-3693 CVE-2021-3731 CVE-2024-23831 CVE-2021-3882 CVE-2021-3694 Upstream summary: It was discovered that LedgerSMB did not check the origin of HTML fragments. An attacker could possibly use this issue […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 20.08.0-r1 📖 ~4 min read • Source: Alpine secdb entry — ark 20.08.0-r1 Related CVEs: CVE-2020-24654 CVE-2020-16116 Upstream summary: Alpine community repository for vv3.19 ships ark 20.08.0-r1 which addresses CVE-2020-24654. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:4569 Related CVEs: CVE-2023-34969 CVE-2022-42010 CVE-2022-42011 CVE-2022-42012 Upstream summary: D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2024:6184 (see also SUSE bugzilla) Related CVEs: CVE-2024-40897 Upstream summary: Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially […]
