🟢 Low ⏱ 5–15 min Last verified: 17 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-58266 Upstream summary: The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7248-1 Related CVEs: CVE-2024-5564 Upstream summary: It was discovered that libndp incorrectly handled certain malformed IPv6 router advertisement packets. A local attacker could possibly use this issue to cause NetworkManager […]
🟠 High ⏱ 15–60 min Last verified: 17 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6474-1 Related CVEs: CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483 +6 more Upstream summary: It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6179-1 Related CVEs: CVE-2023-1436 CVE-2022-40149 CVE-2022-40150 CVE-2022-45685 CVE-2022-45693 Upstream summary: It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening […]
🟠 High ⏱ 15–60 min Last verified: 17 February 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3289-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-50186 Upstream summary: GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.8.0-r0 📖 ~4 min read • Source: Alpine secdb entry — kubo 0.8.0-r0 Related CVEs: CVE-2020-26279 CVE-2020-26283 Upstream summary: Alpine community repository for vv3.18 ships kubo 0.8.0-r0 which addresses CVE-2020-26279. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 17 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-12261 Related CVEs: CVE-2023-39326 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14362-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-35255 Upstream summary: Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:1844-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3685 CVE-2024-22034 CVE-2015-0778 CVE-2019-3681 CVE-2012-1095 Upstream summary: Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0253-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33863 CVE-2023-33864 CVE-2023-33865 Upstream summary: SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) […]
