🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1994 Related CVEs: CVE-2022-48303 CVE-2019-9923 CVE-2023-39804 Upstream summary: GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0241 Upstream summary: The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service (guest crash or hang) via a SPICE […]
🟡 Medium ⏱ 10–30 min Last verified: 14 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24300 CVE-2022-24301 CVE-2022-35978 Upstream summary: Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7216-1 Related CVEs: CVE-2024-34062 Upstream summary: It was discovered that tqdm did not properly sanitize non-boolean CLI Arguments. A local attacker could possibly use this issue to execute arbitrary code […]
🟠 High ⏱ 15–60 min Last verified: 14 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7231-1 Related CVEs: CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786 CVE-2023-27787 CVE-2023-27788 CVE-2023-27789 CVE-2023-4256 +12 more Upstream summary: It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. A remote […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:4501-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-47466 CVE-2018-11439 Upstream summary: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an […]
🟠 High ⏱ 15–60 min Last verified: 14 March 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-4256 Related CVEs: CVE-2024-32487 CVE-2022-48624 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 14 March 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-8124 Related CVEs: CVE-2024-21208 CVE-2024-21235 CVE-2024-21210 CVE-2024-21217 CVE-2023-48161 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2024-22033 Upstream summary: The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that […]
🟠 High ⏱ 15–60 min Last verified: 14 March 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-1908 Related CVEs: CVE-2023-21939 CVE-2023-21968 CVE-2023-21954 CVE-2023-21930 CVE-2023-21938 CVE-2023-21967 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
