Debian 11

🟡 Medium   ⏱ 10–30 min  Last verified: 27 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-0774 CVE-2007-1860 CVE-2008-5519 CVE-2014-8111 CVE-2018-11759 CVE-2023-41081 CVE-2024-46544 Upstream summary: Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-27088 Upstream summary: es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-3693 CVE-2021-3694 CVE-2021-3731 CVE-2024-23831 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-40647 Upstream summary: sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variables to be passed to subprocesses […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-20189 CVE-2024-22871 Upstream summary: In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrary code upon deserialization. This is relevant if a […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-4972 CVE-2024-29156 Upstream summary: OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-42282 CVE-2024-29415 Upstream summary: The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-45590 Upstream summary: body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-40818 CVE-2021-45379 CVE-2022-27240 CVE-2022-29967 CVE-2023-49208 CVE-2024-25715 Upstream summary: scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webauthn registration. Table of […]