🟠 High ⏱ 15–60 min Last verified: 27 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-0478 CVE-2020-36129 CVE-2020-36130 CVE-2020-36131 CVE-2020-36133 CVE-2020-36135 CVE-2021-30473 CVE-2021-30474 +4 more Upstream summary: In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing […]
🟡 Medium ⏱ 10–30 min Last verified: 27 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4571 CVE-2012-5577 CVE-2012-5578 Upstream summary: Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4130 CVE-2013-4282 CVE-2015-3247 CVE-2015-5260 CVE-2015-5261 CVE-2016-0749 CVE-2016-2150 CVE-2016-9577 +7 more Upstream summary: The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2746 Related CVEs: CVE-2024-47606 Upstream summary: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:2689-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-38185 CVE-2023-7207 CVE-2014-9112 CVE-2016-2037 CVE-2019-14866 CVE-2015-1197 Upstream summary: GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of […]
🟡 Medium ⏱ 10–30 min Last verified: 27 April 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6640-1 Related CVEs: CVE-2023-4641 https://launchpad.net/bugs/1998169 CVE-2013-4235 CVE-2017-12424 CVE-2018-7169 https://launchpad.net/bugs/1690820 CVE-2016-6252 CVE-2017-2616 Upstream summary: It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1572-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-34069 CVE-2023-25577 CVE-2019-14806 Upstream summary: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-24963 CVE-2021-35940 CVE-2023-49582 CVE-2011-0419 CVE-2011-1928 CVE-2021-3594 Upstream summary: Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12991 Related CVEs: CVE-2023-23583 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 27 April 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-20406 Related CVEs: CVE-2024-28956 CVE-2024-36350 CVE-2024-36357 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
