🟠 High ⏱ 15–60 min Last verified: 13 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1634 CVE-2010-2089 CVE-2010-3492 CVE-2011-1521 CVE-2011-3389 CVE-2011-4940 CVE-2011-4944 CVE-2012-0845 +12 more Upstream summary: Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 […]
🟡 Medium ⏱ 10–30 min Last verified: 12 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-21722 CVE-2020-21723 CVE-2020-21724 Upstream summary: Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 12 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1990 CVE-2013-1999 CVE-2016-7953 Upstream summary: Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟢 Low ⏱ 5–15 min Last verified: 12 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0390 Upstream summary: Multiple buffer overflows in Options Parsing Tool (OPT) shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 12 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9130 CVE-2017-18342 CVE-2019-20477 CVE-2020-14343 CVE-2020-1747 Upstream summary: scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 12 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1384 CVE-2007-1385 CVE-2007-1799 CVE-2008-5905 CVE-2008-5906 Upstream summary: Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a […]
🟢 Low ⏱ 5–15 min Last verified: 11 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-29939 Upstream summary: An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if size_hint provides certain anomalous data. […]
🟢 Low ⏱ 5–15 min Last verified: 11 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1326 Upstream summary: python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file. […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1172 CVE-2013-0292 Upstream summary: DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-24025 Upstream summary: Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path. Table of […]
