Debian 11

🟢 Low   ⏱ 5–15 min  Last verified: 2 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0564 Upstream summary: Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the […]

🟠 High   ⏱ 15–60 min  Last verified: 2 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-2235 CVE-2008-3972 CVE-2009-0368 CVE-2009-1603 CVE-2010-4523 CVE-2018-16391 CVE-2018-16392 CVE-2018-16393  +12 more Upstream summary: OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-3803 Upstream summary: nth-check is vulnerable to Inefficient Regular Expression Complexity Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-4683 CVE-2006-0512 Upstream summary: PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-7653 Upstream summary: The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-3257 CVE-2009-0547 CVE-2009-0582 CVE-2009-0587 CVE-2016-10727 CVE-2018-12422 CVE-2020-14928 CVE-2020-16117  +1 more Upstream summary: Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0188 Upstream summary: lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious […]

🟠 High   ⏱ 15–60 min  Last verified: 1 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1344 CVE-2002-1565 CVE-2004-1487 CVE-2004-1488 CVE-2004-2014 CVE-2005-3185 CVE-2006-6719 CVE-2009-3490  +12 more Upstream summary: Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-4399 Upstream summary: A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. […]