Debian 11

🟠 High   ⏱ 15–60 min  Last verified: 7 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-0012 CVE-2014-1402 CVE-2016-10745 CVE-2019-10906 CVE-2019-8341 CVE-2020-28493 CVE-2024-22195 CVE-2024-34064  +2 more Upstream summary: FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-6095 CVE-2024-44331 Upstream summary: An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-0838 Upstream summary: There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-45940 CVE-2021-45941 CVE-2022-3534 CVE-2022-3606 CVE-2025-29481 Upstream summary: libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c). Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-26243 CVE-2021-21401 CVE-2024-53984 Upstream summary: Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-6503 CVE-2017-6504 CVE-2019-13640 CVE-2023-30801 CVE-2024-51774 CVE-2025-54310 Upstream summary: WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-23566 CVE-2024-55565 Upstream summary: The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 June 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-2529 CVE-2025-47268 Upstream summary: Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service (hang) […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 June 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0070 CVE-2005-0023 CVE-2010-2713 CVE-2011-2198 CVE-2012-2738 CVE-2024-37535 Upstream summary: VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 June 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-69662 Upstream summary: SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function being used to write GeoDataFrames to a […]