Debian 11

🟠 High   ⏱ 15–60 min  Last verified: 19 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-4192 CVE-2009-1438 CVE-2009-1513 CVE-2011-1574 CVE-2011-1761 CVE-2011-2911 CVE-2011-2912 CVE-2011-2913  +4 more Upstream summary: Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-6232 Upstream summary: Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-2053 CVE-2021-40926 Upstream summary: getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial […]

🟠 High   ⏱ 15–60 min  Last verified: 19 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 CVE-2021-20229 CVE-2021-23214 CVE-2021-23222 CVE-2021-32027 CVE-2021-32028  +12 more Upstream summary: A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-1804 CVE-2008-0008 CVE-2009-1299 CVE-2009-1894 CVE-2014-3970 Upstream summary: PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LENGTH value of FRAME_SIZE_MAX_ALLOW sent […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-3191 CVE-2017-7186 CVE-2017-8786 CVE-2019-20454 CVE-2022-1586 CVE-2022-1587 CVE-2022-41409 Upstream summary: The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2001-0735 CVE-2013-1049 Upstream summary: Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in […]

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0885 CVE-2003-1294 CVE-2003-1295 CVE-2004-2655 CVE-2007-1859 CVE-2007-5585 CVE-2011-2187 CVE-2015-8025  +2 more Upstream summary: Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-0357 Upstream summary: A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption. Table of […]