Debian 11

🟡 Medium   ⏱ 10–30 min  Last verified: 29 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-4261 CVE-2014-5247 CVE-2015-7944 CVE-2015-7945 Upstream summary: Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2.0.4, and 2.1.0 before 2.1.0~rc2 allow (1) […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0021 CVE-2003-0068 CVE-2003-0382 CVE-2008-1692 CVE-2021-33477 Upstream summary: The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-36465 Upstream summary: An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-13867 Upstream summary: Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target (and for the backup directory and backup files). Table of contents Symptom & Impact Environment & […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5899 Upstream summary: Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4510 Upstream summary: Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-13797 Upstream summary: The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than […]

🟠 High   ⏱ 15–60 min  Last verified: 27 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-0508 CVE-2015-0250 CVE-2017-5662 CVE-2018-8013 CVE-2019-17566 CVE-2020-11987 CVE-2022-38398 CVE-2022-38648  +5 more Upstream summary: Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via […]