🟢 Low ⏱ 5–15 min Last verified: 27 August 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-38517 CVE-2024-39684 Upstream summary: Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 August 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7447 CVE-2014-1949 CVE-2024-6655 Upstream summary: Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly […]
🟢 Low ⏱ 5–15 min Last verified: 19 August 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-38394 Upstream summary: Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic allow a physically proximate […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-13939 Upstream summary: String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string. As stated in […]
🟡 Medium ⏱ 10–30 min Last verified: 8 August 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1200 CVE-2007-6437 CVE-2008-5110 CVE-2011-0343 CVE-2011-1951 CVE-2022-38725 CVE-2024-47619 Upstream summary: Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track […]
🟢 Low ⏱ 5–15 min Last verified: 5 August 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-32570 CVE-2024-1580 Upstream summary: VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 4 August 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-37271 CVE-2023-41039 CVE-2024-47532 Upstream summary: RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into […]
🟡 Medium ⏱ 10–30 min Last verified: 31 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-13693 CVE-2017-13694 CVE-2017-13695 CVE-2024-24856 Upstream summary: The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack […]
🟠 High ⏱ 15–60 min Last verified: 28 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-2794 CVE-2023-4232 CVE-2023-4233 CVE-2023-4234 CVE-2023-4235 CVE-2024-7537 CVE-2024-7538 CVE-2024-7539 +8 more Upstream summary: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25032 CVE-2024-1681 CVE-2024-6839 CVE-2024-6844 CVE-2024-6866 Upstream summary: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private […]
