🟡 Medium ⏱ 10–30 min Last verified: 10 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10886 CVE-2020-11979 CVE-2020-1945 CVE-2021-36373 CVE-2021-36374 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟢 Low ⏱ 5–15 min Last verified: 10 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2200 CVE-2014-2892 Upstream summary: Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 10 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2232 Upstream summary: The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 10 July 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-5072 Upstream summary: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7146-1 Related CVEs: CVE-2017-7537 CVE-2020-25715 CVE-2022-2414 Upstream summary: Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to […]
🟠 High ⏱ 15–60 min Last verified: 10 July 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5895-1 Related CVEs: CVE-2022-38850 CVE-2022-38851 CVE-2022-38855 CVE-2022-38858 CVE-2022-38860 CVE-2022-38861 CVE-2022-38863 CVE-2022-38864 +2 more Upstream summary: It was discovered that MPlayer could be made to divide by zero when processing certain […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6067-1 Related CVEs: CVE-2021-20267 CVE-2021-38598 CVE-2021-40085 CVE-2021-40797 CVE-2022-3277 Upstream summary: David Sinquin discovered that OpenStack Neutron incorrectly handled the default Open vSwitch firewall rules. An attacker could possibly use this […]
🟠 High ⏱ 15–60 min Last verified: 10 July 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:0480-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-19637 CVE-2018-19639 CVE-2022-45154 CVE-2018-19640 CVE-2018-19638 Upstream summary: Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems […]
🟠 High ⏱ 15–60 min Last verified: 10 July 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:1736-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29217 Upstream summary: PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the JWT […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.079-r0 📖 ~4 min read • Source: Alpine secdb entry — perl-cryptx 0.079-r0 Related CVEs: CVE-2019-17362 Upstream summary: Alpine community repository for vv3.18 ships perl-cryptx 0.079-r0 which addresses CVE-2019-17362. Table of contents Symptom & Impact Environment […]
