🟢 Low ⏱ 5–15 min Last verified: 23 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4973 Upstream summary: Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks […]
🟢 Low ⏱ 5–15 min Last verified: 23 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2208 Upstream summary: tpp 1.3.1 allows remote attackers to execute arbitrary commands via a –exec command in a TPP template file. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5201 CVE-2014-3495 Upstream summary: The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to […]
🟡 Medium ⏱ 10–30 min Last verified: 22 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9258 CVE-2017-9259 CVE-2017-9260 CVE-2018-1000223 CVE-2018-14044 CVE-2018-14045 CVE-2018-17096 CVE-2018-17097 +1 more Upstream summary: The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of […]
🟠 High ⏱ 15–60 min Last verified: 22 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0661 CVE-2011-1428 CVE-2012-5534 CVE-2012-5854 CVE-2017-14727 CVE-2017-8073 CVE-2020-8955 CVE-2020-9759 +3 more Upstream summary: Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service […]
🟠 High ⏱ 15–60 min Last verified: 22 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-10868 CVE-2017-10869 CVE-2017-10872 CVE-2017-10908 CVE-2018-0608 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 +5 more Upstream summary: H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2001 Upstream summary: Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted […]
🟠 High ⏱ 15–60 min Last verified: 22 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1377 CVE-2004-1138 CVE-2005-0069 CVE-2005-2368 CVE-2007-2438 CVE-2007-2953 CVE-2008-2712 CVE-2008-3074 +12 more Upstream summary: vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the […]
🟡 Medium ⏱ 10–30 min Last verified: 21 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15256 CVE-2021-23434 CVE-2021-3805 Upstream summary: A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to the `includeInheritedProps` mode […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3999 Upstream summary: The Horde_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN. Table of contents […]
