🟢 Low ⏱ 5–15 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0381 CVE-2005-3342 Upstream summary: Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-145 Related CVEs: CVE-2023-3609 CVE-2023-3776 Upstream summary: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will […]
🟡 Medium ⏱ 10–30 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1624 CVE-2016-1968 CVE-2020-8927 Upstream summary: Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7231 CVE-2019-3866 CVE-2022-0718 Upstream summary: The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask […]
🟡 Medium ⏱ 10–30 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1697 CVE-2002-1746 CVE-2002-1747 Upstream summary: Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.9.23-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-impacket 0.9.23-r0 Related CVEs: CVE-2021-31800 Upstream summary: Alpine community repository for vv3.18 ships py3-impacket 0.9.23-r0 which addresses CVE-2021-31800. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23413 CVE-2022-48285 Upstream summary: This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results […]
🟢 Low ⏱ 5–15 min Last verified: 18 November 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7040-1 Related CVEs: CVE-2023-26112 Upstream summary: It was discovered that ConfigObj contains regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a regular […]
🟠 High ⏱ 15–60 min Last verified: 18 November 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-4499 Related CVEs: CVE-2023-4049 CVE-2023-4056 CVE-2023-4046 CVE-2023-4047 CVE-2023-4057 CVE-2023-4045 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 3.6.1-r0 📖 ~4 min read • Source: Alpine secdb entry — helm 3.6.1-r0 Related CVEs: CVE-2021-32690 CVE-2021-21303 Upstream summary: Alpine community repository for vv3.18 ships helm 3.6.1-r0 which addresses CVE-2021-32690. Table of contents Symptom & Impact […]
