Debian 11

🟠 High   ⏱ 15–60 min  Last verified: 3 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-1443 CVE-2009-1769 CVE-2009-2166 CVE-2009-3040 CVE-2009-3042 CVE-2010-1594 CVE-2010-1595 CVE-2010-1733  +11 more Upstream summary: Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-4349 CVE-2021-42523 Upstream summary: Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0391 Upstream summary: Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-3728 CVE-2020-36604 Upstream summary: hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'applyToDefaults' functions, which […]

🟠 High   ⏱ 15–60 min  Last verified: 2 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3564 CVE-2010-0156 CVE-2011-0528 CVE-2011-3848 CVE-2011-3869 CVE-2011-3870 CVE-2011-3871 CVE-2011-3872  +12 more Upstream summary: puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-39358 Upstream summary: In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-27211 Upstream summary: steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data. Table of contents Symptom & Impact […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-3239 Upstream summary: Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes. Table of contents […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-18936 Upstream summary: UniValue::read() in UniValue before 1.0.5 allow attackers to cause a denial of service (the class internal data reaches an inconsistent state) via input data that […]