🟡 Medium ⏱ 10–30 min Last verified: 19 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:11237 Related CVEs: CVE-2024-50612 CVE-2022-33065 Upstream summary: libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: Segmentation […]
🟠 High ⏱ 15–60 min Last verified: 19 March 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:1474-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-42260 CVE-2023-34194 Upstream summary: TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a […]
🟠 High ⏱ 15–60 min Last verified: 19 March 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-5749 Related CVEs: CVE-2023-44487 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.17.4-r1 📖 ~4 min read • Source: Alpine secdb entry — cairo 1.17.4-r1 Related CVEs: CVE-2019-6462 CVE-2020-35492 CVE-2018-19876 Upstream summary: Alpine main repository for vv3.19 ships cairo 1.17.4-r1 which addresses CVE-2019-6462. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2024-027 Related CVEs: CVE-2024-1086 CVE-2024-23849 Upstream summary: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-34490 Upstream summary: In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local […]
🟠 High ⏱ 15–60 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6426 CVE-2019-12046 CVE-2019-13031 CVE-2019-15941 CVE-2019-19791 CVE-2020-16093 CVE-2020-24660 CVE-2021-35472 +11 more Upstream summary: LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:4420 Related CVEs: CVE-2024-4467 CVE-2022-40284 CVE-2023-3354 CVE-2020-35517 CVE-2020-10756 CVE-2020-14364 CVE-2019-20382 CVE-2020-8608 +12 more Upstream summary: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel […]
🟠 High ⏱ 15–60 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1227 CVE-2005-2977 CVE-2009-0579 CVE-2009-0887 CVE-2009-3232 CVE-2010-3316 CVE-2010-3430 CVE-2010-3431 +12 more Upstream summary: PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0878 Upstream summary: Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access […]
