🟡 Medium ⏱ 10–30 min Last verified: 26 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-7225 CVE-2021-43177 CVE-2024-8796 Upstream summary: Tinfoil Devise-two-factor before 2.0.0 does not strictly follow section 5.2 of RFC 6238 and does not "burn" a successfully validated one-time password (aka […]
🟡 Medium ⏱ 10–30 min Last verified: 26 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-25021 CVE-2018-25022 CVE-2021-44847 Upstream summary: The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to […]
🟢 Low ⏱ 5–15 min Last verified: 26 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16779 Upstream summary: In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 5.8.2-r0 📖 ~4 min read • Source: Alpine secdb entry — radare2 5.8.2-r0 Related CVEs: CVE-2023-0302 CVE-2022-4398 CVE-2022-34520 CVE-2022-34502 CVE-2022-1437 CVE-2022-1444 CVE-2022-1451 CVE-2022-1452 +12 more Upstream summary: Alpine community repository for vv3.19 ships radare2 5.8.2-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 26 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0127 CVE-2020-25657 CVE-2023-50781 Upstream summary: M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify, and ECDSA_do_verify functions, which might allow remote attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 26 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7437-1 Related CVEs: CVE-2022-1325 CVE-2024-26540 CVE-2018-7587 CVE-2018-7588 CVE-2018-7589 Upstream summary: It was discovered that the CImg library did not properly check the size of images before loading them. An attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.2.12-r2 📖 ~4 min read • Source: Alpine secdb entry — zlib 1.2.12-r2 Related CVEs: CVE-2022-37434 CVE-2018-25032 CVE-2023-45853 CVE-2023-6992 Upstream summary: Alpine main repository for vv3.18 ships zlib 1.2.12-r2 which addresses CVE-2022-37434. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 26 March 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-20095 Related CVEs: CVE-2024-40939 CVE-2024-46841 CVE-2024-56597 CVE-2024-53165 CVE-2024-53181 CVE-2024-53150 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 26 March 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-11193 Related CVEs: CVE-2024-10573 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:3021-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4039 Upstream summary: ** DISPUTED ** **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an […]
