🟡 Medium ⏱ 10–30 min Last verified: 26 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4425 CVE-2013-4324 CVE-2016-3066 CVE-2017-12194 CVE-2018-10873 CVE-2018-10893 CVE-2020-14355 Upstream summary: libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to […]
🟡 Medium ⏱ 10–30 min Last verified: 26 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2098 CVE-2018-11771 CVE-2018-1324 CVE-2019-12402 CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 CVE-2021-36090 +1 more Upstream summary: Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress […]
🟠 High ⏱ 15–60 min Last verified: 26 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2097 CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 +12 more Upstream summary: xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local […]
🟠 High ⏱ 15–60 min Last verified: 25 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0853 CVE-2003-0854 CVE-2005-1039 CVE-2007-4998 CVE-2008-1946 CVE-2014-9471 CVE-2015-1865 CVE-2016-2781 +3 more Upstream summary: An integer overflow in ls in the fileutils or coreutils packages may allow local users to […]
🟠 High ⏱ 15–60 min Last verified: 25 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000852 CVE-2018-8784 CVE-2018-8785 CVE-2018-8786 CVE-2018-8787 CVE-2018-8788 CVE-2018-8789 CVE-2019-17177 +12 more Upstream summary: FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that […]
🟠 High ⏱ 15–60 min Last verified: 24 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-2888 CVE-2019-13616 CVE-2019-13626 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 +10 more Upstream summary: An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A […]
🟢 Low ⏱ 5–15 min Last verified: 24 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-14150 CVE-2020-24240 Upstream summary: GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used […]
🟡 Medium ⏱ 10–30 min Last verified: 24 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-2959 CVE-2009-2967 CVE-2019-12300 CVE-2019-7313 Upstream summary: Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 24 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0857 CVE-2015-0858 Upstream summary: Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file […]
🟡 Medium ⏱ 10–30 min Last verified: 24 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14267 CVE-2019-14934 CVE-2020-20740 CVE-2020-9549 CVE-2021-3508 Upstream summary: PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled. Table […]
