🟡 Medium ⏱ 10–30 min Last verified: 26 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4055 CVE-2017-18214 CVE-2022-24785 CVE-2022-31129 Upstream summary: The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) […]
🟠 High ⏱ 15–60 min Last verified: 22 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1704 CVE-2005-1705 CVE-2006-4146 CVE-2011-4355 CVE-2014-8501 CVE-2014-9939 CVE-2017-9778 CVE-2023-39128 +2 more Upstream summary: Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and […]
🟡 Medium ⏱ 10–30 min Last verified: 20 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-3774 CVE-2020-8124 CVE-2021-27515 CVE-2021-3664 CVE-2022-0512 CVE-2022-0639 CVE-2022-0686 CVE-2022-0691 Upstream summary: Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8855 CVE-2022-25883 Upstream summary: The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a […]
🟢 Low ⏱ 5–15 min Last verified: 8 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-29651 CVE-2022-42969 Upstream summary: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 7 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24953 Upstream summary: The Crypt_GPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions. […]
🟠 High ⏱ 15–60 min Last verified: 6 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0974 CVE-2008-5718 CVE-2018-1160 CVE-2021-31439 CVE-2022-0194 CVE-2022-22995 CVE-2022-23121 CVE-2022-23122 +12 more Upstream summary: The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows […]
🟡 Medium ⏱ 10–30 min Last verified: 5 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7231 CVE-2019-3866 CVE-2022-0718 Upstream summary: The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask […]
🟠 High ⏱ 15–60 min Last verified: 5 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-5389 CVE-2019-10155 CVE-2019-12312 CVE-2020-1763 CVE-2022-23094 CVE-2023-23009 CVE-2023-30570 CVE-2023-38710 +3 more Upstream summary: The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. […]
🟡 Medium ⏱ 10–30 min Last verified: 4 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-7860 CVE-2017-7861 CVE-2017-8359 CVE-2017-9431 CVE-2023-32732 CVE-2023-33953 CVE-2023-44487 CVE-2023-4785 +1 more Upstream summary: Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to […]
