🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-27811 Upstream summary: GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename. Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6721 CVE-2011-3389 CVE-2013-0169 CVE-2013-1624 CVE-2015-6644 CVE-2015-7940 CVE-2016-1000338 CVE-2016-1000339 +12 more Upstream summary: The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto […]
🟡 Medium ⏱ 10–30 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14462 CVE-2019-14463 CVE-2022-0367 CVE-2024-10918 CVE-2024-36843 CVE-2024-36844 CVE-2024-36845 Upstream summary: An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the […]
🟡 Medium ⏱ 10–30 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1987 CVE-2016-7949 CVE-2016-7950 Upstream summary: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-13421 Upstream summary: Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 3.4.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-paramiko 3.4.0-r0 Related CVEs: CVE-2023-48795 CVE-2018-1000805 CVE-2018-7750 Upstream summary: Alpine community repository for vv3.19 ships py3-paramiko 3.4.0-r0 which addresses CVE-2023-48795. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9584 Upstream summary: libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-12435 CVE-2018-20187 CVE-2018-9127 CVE-2018-9860 CVE-2021-24115 CVE-2021-40529 CVE-2022-43705 CVE-2024-34702 +7 more Upstream summary: Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6808-1 Related CVEs: CVE-2023-52076 Upstream summary: It was discovered that Atril was vulnerable to a path traversal attack. An attacker could possibly use this vulnerability to create arbitrary files on […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8191-1 Related CVEs: CVE-2024-47554 Upstream summary: It was discovered that Apache Commons IO's XmlStreamReader class could excessively consume CPU resources under certain circumstances. An attacker could possibly use this issue […]
