Debian 11

🟡 Medium   ⏱ 10–30 min  Last verified: 10 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5846 CVE-2017-5847 CVE-2023-38103 CVE-2023-38104 CVE-2026-2920 CVE-2026-2922 Upstream summary: The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-10936 CVE-2020-13692 CVE-2022-21724 CVE-2022-26520 CVE-2022-31197 CVE-2022-41946 CVE-2024-1597 CVE-2026-42198 Upstream summary: A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-0155 CVE-2022-0536 CVE-2023-26159 CVE-2024-28849 CVE-2026-40895 Upstream summary: follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor Table of contents Symptom & Impact Environment & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-9267 CVE-2015-9268 CVE-2023-37378 CVE-2025-43715 CVE-2026-42171 Upstream summary: Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-20433 CVE-2019-5427 CVE-2026-27830 Upstream summary: c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-19886 CVE-2019-25043 CVE-2020-15598 CVE-2021-42717 CVE-2022-48279 CVE-2023-38285 CVE-2024-1019 CVE-2026-30923  +1 more Upstream summary: Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-0047 CVE-2006-3913 CVE-2010-2445 CVE-2012-5645 CVE-2012-6083 CVE-2022-39047 CVE-2026-33250 Upstream summary: packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3575 CVE-2009-3617 CVE-2010-1512 CVE-2019-3500 CVE-2026-8367 Upstream summary: Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service (crash) […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-18077 CVE-2025-5889 CVE-2026-25547 CVE-2026-33750 Upstream summary: index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-0218 Upstream summary: When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, […]