🟡 Medium ⏱ 10–30 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 CVE-2010-4336 CVE-2016-6254 CVE-2017-16820 CVE-2017-7401 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4895 CVE-2018-13420 Upstream summary: Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 12.3.0-r0 📖 ~4 min read • Source: Alpine secdb entry — open-vm-tools 12.3.0-r0 Related CVEs: CVE-2023-20900 CVE-2023-20867 CVE-2022-31676 Upstream summary: Alpine community repository for vedge ships open-vm-tools 12.3.0-r0 which addresses CVE-2023-20900. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32708 Upstream summary: Flysystem is an open source file storage library for PHP. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-40823 CVE-2022-36059 CVE-2022-39236 CVE-2022-39249 CVE-2022-39250 CVE-2022-39251 CVE-2023-28427 CVE-2023-29529 +4 more Upstream summary: A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-5873 Upstream summary: Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0742-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-51765 Upstream summary: sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with […]
🟡 Medium ⏱ 10–30 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 CVE-2014-8502 CVE-2014-8503 CVE-2014-8504 CVE-2014-8737 CVE-2014-8738 Upstream summary: The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-14332 CVE-2021-40826 CVE-2021-40827 Upstream summary: An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1034 CVE-2002-1049 CVE-2002-1050 CVE-2003-0886 CVE-2004-1182 CVE-2005-3069 CVE-2005-3070 CVE-2005-3538 +3 more Upstream summary: Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format […]
