🟡 Medium ⏱ 10–30 min Last verified: 2 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-8729 CVE-2016-9601 CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 CVE-2017-9216 CVE-2020-12268 CVE-2023-46361 Upstream summary: An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF […]
🟢 Low ⏱ 5–15 min Last verified: 2 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-40577 Upstream summary: Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint […]
🟠 High ⏱ 15–60 min Last verified: 28 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2529 CVE-2011-4862 CVE-2014-3634 CVE-2019-0053 CVE-2020-10188 CVE-2021-40491 CVE-2022-39028 CVE-2023-40303 +4 more Upstream summary: Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote […]
🟡 Medium ⏱ 10–30 min Last verified: 27 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19391 CVE-2020-15890 CVE-2020-24372 CVE-2024-25176 CVE-2024-25177 CVE-2024-25178 Upstream summary: In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-18609 CVE-2023-35789 Upstream summary: An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-31636 Upstream summary: An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-28820 Upstream summary: Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2.0.4 allows attackers with a valid LDAP […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-39780 Upstream summary: A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for getting, setting, and deleting parameters of a dynamically […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-34078 Upstream summary: html-sanitizer is an allowlist-based HTML cleaner. If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some […]
🟡 Medium ⏱ 10–30 min Last verified: 25 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6354 CVE-2007-6355 CVE-2007-6356 CVE-2023-50671 CVE-2024-42851 Upstream summary: Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an […]
