🟠 High ⏱ 15–60 min Last verified: 16 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2096 CVE-2005-4889 CVE-2006-5466 CVE-2010-2059 CVE-2010-2197 CVE-2010-2198 CVE-2010-2199 CVE-2011-3378 +12 more Upstream summary: zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32708 Upstream summary: Flysystem is an open source file storage library for PHP. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2653 Upstream summary: arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root […]
🟢 Low ⏱ 5–15 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4012 Upstream summary: Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to […]
🟢 Low ⏱ 5–15 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0014 Upstream summary: Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20349 Upstream summary: The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) […]
🟠 High ⏱ 15–60 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-7587 CVE-2018-7588 CVE-2018-7589 CVE-2018-7637 CVE-2018-7638 CVE-2018-7639 CVE-2018-7640 CVE-2018-7641 +7 more Upstream summary: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that […]
🟡 Medium ⏱ 10–30 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1438 CVE-2013-1441 CVE-2015-3885 CVE-2015-8366 Upstream summary: Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1932 CVE-2011-4675 Upstream summary: Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . (dot) characters in a pathname […]
🟡 Medium ⏱ 10–30 min Last verified: 13 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0727 CVE-2013-7273 CVE-2015-7496 CVE-2016-1000002 CVE-2017-12164 CVE-2018-14424 CVE-2019-3825 CVE-2020-16125 +1 more Upstream summary: GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary […]
