🟢 Low ⏱ 5–15 min Last verified: 18 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-20001 CVE-2023-49298 Upstream summary: An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a […]
🟢 Low ⏱ 5–15 min Last verified: 18 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24839 Upstream summary: org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. […]
🟠 High ⏱ 15–60 min Last verified: 18 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4807 CVE-2005-4808 CVE-2006-2362 CVE-2008-2310 CVE-2012-3509 CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 +12 more Upstream summary: Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1269 Upstream summary: GNUMail 1.1.2 and earlier does not properly use the –status-fd argument when invoking GnuPG, which prevents GNUMail from visually distinguishing between signed and unsigned portions […]
🟠 High ⏱ 15–60 min Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38425 CVE-2023-24010 CVE-2023-39534 CVE-2023-39945 CVE-2023-39946 CVE-2023-39947 CVE-2023-39948 CVE-2023-39949 +12 more Upstream summary: eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8971 CVE-2018-20167 Upstream summary: Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2064 Upstream summary: Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to […]
🟠 High ⏱ 15–60 min Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1287 CVE-2005-1194 CVE-2008-2719 CVE-2008-7177 CVE-2017-10686 CVE-2017-11111 CVE-2017-14228 CVE-2017-17810 +12 more Upstream summary: Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute […]
🟢 Low ⏱ 5–15 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-39365 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
