🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-244 Related CVEs: CVE-2022-4899 Upstream summary: In zstd, supplying an empty string as an argument to either –output-dir-flat or –output-dir-mirror may cause a buffer overrun. (CVE-2022-4899) Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 7 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0238 CVE-2007-1084 CVE-2008-5985 CVE-2010-3312 CVE-2014-3566 CVE-2017-1000025 CVE-2018-11396 CVE-2018-12016 +8 more Upstream summary: The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-48795 Upstream summary: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16026 CVE-2023-28155 Upstream summary: Request is an http client. If a request is made using “`multipart“`, and the body type is a “`number“`, then the specified number of […]
🟠 High ⏱ 15–60 min Last verified: 7 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-37331 CVE-2022-41793 CVE-2022-42885 CVE-2022-43467 CVE-2022-43607 CVE-2022-44451 CVE-2022-46280 CVE-2022-46289 +12 more Upstream summary: An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25573 Upstream summary: An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.56.3-r0 📖 ~4 min read • Source: Alpine secdb entry — librsvg 2.56.3-r0 Related CVEs: CVE-2023-38633 RUSTSEC-2020-0146 CVE-2019-20446 Upstream summary: Alpine community repository for vv3.18 ships librsvg 2.56.3-r0 which addresses CVE-2023-38633. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1320 Upstream summary: Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23520 CVE-2021-23521 Upstream summary: The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.10.0-r0 📖 ~4 min read • Source: Alpine secdb entry — libbsd 0.10.0-r0 Related CVEs: CVE-2019-20367 Upstream summary: Alpine main repository for vv3.18 ships libbsd 0.10.0-r0 which addresses CVE-2019-20367. Table of contents Symptom & Impact Environment […]
