🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 23.1.2-r0 📖 ~4 min read • Source: Alpine secdb entry — cloud-init 23.1.2-r0 Related CVEs: CVE-2023-1786 CVE-2022-2084 CVE-2021-3429 Upstream summary: Alpine community repository for vedge ships cloud-init 23.1.2-r0 which addresses CVE-2023-1786. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2024-187 Related CVEs: CVE-2022-48666 CVE-2024-41090 CVE-2024-41091 CVE-2024-39480 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free (CVE-2022-48666) kernel: virtio-net: tap: mlx5_core short […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4754 CVE-2007-4755 CVE-2009-3637 CVE-2010-3439 Upstream summary: Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a […]
🟠 High ⏱ 15–60 min Last verified: 29 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-3204 CVE-2019-11840 CVE-2019-11841 CVE-2020-29652 CVE-2020-9283 CVE-2021-43565 CVE-2022-27191 CVE-2022-30636 +12 more Upstream summary: The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4796 CVE-2008-7313 CVE-2014-5008 Upstream summary: The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 5.3.5-r2 📖 ~4 min read • Source: Alpine secdb entry — lua5.3 5.3.5-r2 Related CVEs: CVE-2019-6706 Upstream summary: Alpine main repository for vv3.19 ships lua5.3 5.3.5-r2 which addresses CVE-2019-6706. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7055-1 Related CVEs: CVE-2024-3596 CVE-2019-17185 CVE-2022-41860 CVE-2022-41861 Upstream summary: Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl discovered that FreeRADIUS incorrectly authenticated certain responses. […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4060-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-42811 CVE-2023-22895 Upstream summary: aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 12.3.0-r0 📖 ~4 min read • Source: Alpine secdb entry — open-vm-tools 12.3.0-r0 Related CVEs: CVE-2023-20900 CVE-2023-20867 CVE-2022-31676 Upstream summary: Alpine community repository for vv3.18 ships open-vm-tools 12.3.0-r0 which addresses CVE-2023-20900. Table of contents Symptom & […]
