🟡 Medium ⏱ 10–30 min Last verified: 8 April 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2469 CVE-2021-20314 CVE-2021-33912 CVE-2021-33913 CVE-2023-42118 Upstream summary: Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-25076 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 5 April 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5180 CVE-2017-1000381 CVE-2020-14354 CVE-2020-22217 CVE-2020-8277 CVE-2021-3672 CVE-2022-4904 CVE-2023-31124 +4 more Upstream summary: Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16516 CVE-2022-24795 CVE-2023-33460 Upstream summary: In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a […]
🟡 Medium ⏱ 10–30 min Last verified: 28 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3429 CVE-2015-4707 CVE-2015-5607 CVE-2015-6938 CVE-2018-8768 CVE-2022-21699 Upstream summary: IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 26 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-36177 Upstream summary: An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-7749 CVE-2023-46445 CVE-2023-46446 CVE-2023-48795 Upstream summary: The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized […]
🟢 Low ⏱ 5–15 min Last verified: 25 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-37365 Upstream summary: Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer. Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-31153 CVE-2021-31154 CVE-2021-31155 CVE-2023-46277 Upstream summary: please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via […]
🟡 Medium ⏱ 10–30 min Last verified: 23 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-5583 CVE-2014-4172 CVE-2017-1000071 CVE-2022-39369 Upstream summary: phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName […]
