Linux

🟠 High   ⏱ 15–60 min  Last verified: 1 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-6441 CVE-2015-1331 CVE-2015-1334 CVE-2015-1335 CVE-2016-10124 CVE-2016-8649 CVE-2017-18641 CVE-2017-5985  +4 more Upstream summary: The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-6687 CVE-2025-23016 Upstream summary: FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-2561 Upstream summary: OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1389 CVE-2003-0435 CVE-2005-0105 CVE-2006-1515 CVE-2007-6220 Upstream summary: Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input. Table of contents Symptom & […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-2385 Upstream summary: The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 November 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-21670 CVE-2025-7969 Upstream summary: markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-46823 CVE-2025-61911 CVE-2025-61912 Upstream summary: python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression […]