🟡 Medium ⏱ 10–30 min Last verified: 9 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-3476 CVE-2007-3477 CVE-2007-3996 CVE-2009-3546 CVE-2021-32773 Upstream summary: Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202408-26 Related CVEs: CVE-2020-36428 CVE-2021-36977 Upstream summary: Multiple vulnerabilities have been discovered in matio. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 9 June 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6243-1 Related CVEs: CVE-2017-18638 CVE-2022-4728 CVE-2022-4729 CVE-2022-4730 Upstream summary: It was discovered that Graphite-Web incorrectly handled certain inputs. If a user or an automated system were tricked into opening a […]
🟢 Low ⏱ 5–15 min Last verified: 9 June 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7625-1 Related CVEs: CVE-2018-19960 CVE-2022-21689 Upstream summary: It was discovered that OnionShare could be exploited when run with the –debug argument. A local attacker could possibly use this issue to […]
🟢 Low ⏱ 5–15 min Last verified: 9 June 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5195-1 Related CVEs: CVE-2021-27229 Upstream summary: It was discovered that the Mumble client supported websites for public servers with arbitrary URL schemes. If a user were tricked into visiting a […]
🟠 High ⏱ 15–60 min Last verified: 9 June 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-33815 CVE-2019-11338 CVE-2019-11339 CVE-2019-15942 CVE-2018-7751 CVE-2020-35964 Upstream summary: dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked. […]
🟠 High ⏱ 15–60 min Last verified: 9 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9465 Related CVEs: CVE-2022-28737 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1897-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41724 CVE-2022-41723 CVE-2022-41717 CVE-2022-41720 CVE-2022-2879 CVE-2022-2880 CVE-2022-27664 CVE-2022-41725 +3 more Upstream summary: Large handshake records may cause panics in crypto/tls. Both clients and servers may […]
🟡 Medium ⏱ 10–30 min Last verified: 8 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-3968 Related CVEs: CVE-2024-28180 CVE-2024-28176 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2196 CVE-2009-3736 Upstream summary: Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled […]
