🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2024-703 Related CVEs: CVE-2024-29040 CVE-2023-22745 Upstream summary: tpm2-tss: arbitrary quote data may go undetected by Fapi_VerifyQuote (CVE-2024-29040) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:5994 Related CVEs: CVE-2023-40217 CVE-2023-24329 CVE-2022-40897 CVE-2022-48560 CVE-2022-48565 CVE-2023-43804 CVE-2024-22195 CVE-2023-32681 +12 more Upstream summary: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-31485 Upstream summary: GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks. Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-147 Related CVEs: CVE-2023-3609 CVE-2023-3776 Upstream summary: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202401-16 Related CVEs: CVE-2022-39316 CVE-2022-39317 CVE-2022-39318 CVE-2022-39319 CVE-2022-39320 CVE-2022-39347 CVE-2022-41877 CVE-2023-39350 +12 more Upstream summary: Multiple vulnerabilities have been discovered in FreeRDP. Please review the CVE identifiers referenced below for details. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5591 CVE-2019-1000021 CVE-2022-45197 Upstream summary: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-6758 CVE-2018-7490 CVE-2020-11984 CVE-2021-36160 CVE-2024-24795 Upstream summary: The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length. Table […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6670-1 Related CVEs: CVE-2022-24775 CVE-2023-29197 Upstream summary: It was discovered that php-guzzlehttp-psr7 incorrectly parsed HTTP headers. A remote attacker could possibly use these issues to perform an HTTP header injection […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.11.1-r2 📖 ~4 min read • Source: Alpine secdb entry — taglib 1.11.1-r2 Related CVEs: CVE-2017-12678 CVE-2018-11439 Upstream summary: Alpine community repository for vv3.19 ships taglib 1.11.1-r2 which addresses CVE-2017-12678. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.2.4-r0 📖 ~4 min read • Source: Alpine secdb entry — rpcbind 0.2.4-r0 Related CVEs: CVE-2017-8779 Upstream summary: Alpine main repository for vv3.19 ships rpcbind 0.2.4-r0 which addresses CVE-2017-8779. Table of contents Symptom & Impact Environment […]
