🟢 Low ⏱ 5–15 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6562 Upstream summary: Multiple stack-based buffer overflows in the use of FD_SET in TCPreen before 1.4.4 allow remote attackers to cause a denial of service via multiple concurrent […]
🟡 Medium ⏱ 10–30 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3146 CVE-2013-1881 CVE-2015-7557 CVE-2015-7558 CVE-2016-4348 CVE-2016-6163 CVE-2017-11464 CVE-2019-20446 +1 more Upstream summary: librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent […]
🟠 High ⏱ 15–60 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2864 CVE-2012-5129 CVE-2013-1872 CVE-2013-1993 CVE-2019-5068 CVE-2023-45913 CVE-2023-45919 CVE-2023-45922 +2 more Upstream summary: Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series […]
🟡 Medium ⏱ 10–30 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2037 CVE-2020-11078 CVE-2021-21240 Upstream summary: httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in […]
🟢 Low ⏱ 5–15 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15131 Upstream summary: It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This […]
🟢 Low ⏱ 5–15 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1000033 CVE-2017-1000024 Upstream summary: Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle […]
🟢 Low ⏱ 5–15 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-25858 Upstream summary: The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular […]
🟢 Low ⏱ 5–15 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-1502 Upstream summary: Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or […]
🟠 High ⏱ 15–60 min Last verified: 16 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4048 CVE-2006-4800 CVE-2008-3162 CVE-2008-3230 CVE-2008-4610 CVE-2008-4866 CVE-2008-4867 CVE-2009-0385 +12 more Upstream summary: Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-36489 Upstream summary: Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegro_image addon. Table of contents […]
