🟢 Low ⏱ 5–15 min Last verified: 12 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-10141 Upstream summary: An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is […]
🟢 Low ⏱ 5–15 min Last verified: 12 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1935 Upstream summary: 9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 11 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3386 Upstream summary: usttrace in LTTng Userspace Tracer (aka UST) 0.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a […]
🟠 High ⏱ 15–60 min Last verified: 11 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0107 CVE-2004-0797 CVE-2005-1849 CVE-2005-2096 CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 +5 more Upstream summary: Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or […]
🟠 High ⏱ 15–60 min Last verified: 11 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1227 CVE-2005-2977 CVE-2009-0579 CVE-2009-0887 CVE-2009-3232 CVE-2010-3316 CVE-2010-3430 CVE-2010-3431 +12 more Upstream summary: PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows […]
🟢 Low ⏱ 5–15 min Last verified: 11 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0283 CVE-2021-3480 Upstream summary: The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service […]
🟠 High ⏱ 15–60 min Last verified: 11 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0129 CVE-2004-1055 CVE-2004-1147 CVE-2004-1148 CVE-2004-2630 CVE-2004-2631 CVE-2004-2632 CVE-2005-0459 +12 more Upstream summary: Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 9 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35921 Upstream summary: An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 9 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2063 CVE-2016-7951 CVE-2016-7952 Upstream summary: Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors […]
🟠 High ⏱ 15–60 min Last verified: 9 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1438 CVE-2013-1439 CVE-2013-2126 CVE-2015-3885 CVE-2015-8366 CVE-2015-8367 CVE-2017-13735 CVE-2017-14265 +12 more Upstream summary: Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, […]
