🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3111 Upstream summary: The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13508 Upstream summary: FreeTDS through 1.1.11 has a Buffer Overflow. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1832 CVE-2018-1313 CVE-2022-46337 Upstream summary: XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1395 Upstream summary: Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5838 CVE-2024-47606 Upstream summary: The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed […]
🟡 Medium ⏱ 10–30 min Last verified: 8 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:9128 Related CVEs: CVE-2024-8235 CVE-2024-4418 CVE-2024-2496 CVE-2024-1441 CVE-2024-2494 CVE-2023-3750 CVE-2023-2700 CVE-2022-0897 Upstream summary: Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14339-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-7055 CVE-2023-51794 CVE-2023-50010 CVE-2023-49502 CVE-2023-51793 CVE-2024-31578 CVE-2020-22027 CVE-2021-38291 +11 more Upstream summary: A vulnerability was found in FFmpeg up to 7.0.1. It has been […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2023:602-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-26112 Upstream summary: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** […]
🟡 Medium ⏱ 10–30 min Last verified: 8 March 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-12580 Related CVEs: CVE-2023-31315 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.22.4-r0 📖 ~4 min read • Source: Alpine secdb entry — gst-plugins-good 1.22.4-r0 Related CVEs: CVE-2023-37327 CVE-2022-1920 CVE-2022-1921 CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925 CVE-2022-2122 +11 more Upstream summary: Alpine community repository for vv3.18 ships gst-plugins-good 1.22.4-r0 which […]
