Linux

🟡 Medium   ⏱ 10–30 min  Last verified: 18 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-11723 CVE-2018-20348 CVE-2020-18897 Upstream summary: The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a […]

🟠 High   ⏱ 15–60 min  Last verified: 18 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2305 CVE-2019-14871 CVE-2019-14872 CVE-2019-14873 CVE-2019-14874 CVE-2019-14875 CVE-2019-14876 CVE-2019-14877  +3 more Upstream summary: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 […]

🟠 High   ⏱ 15–60 min  Last verified: 18 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-2768 CVE-2005-2096 CVE-2010-0396 CVE-2010-1679 CVE-2011-0402 CVE-2014-0471 CVE-2014-3127 CVE-2014-3227  +8 more Upstream summary: dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-0565 Upstream summary: NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]