🟢 Low ⏱ 5–15 min Last verified: 17 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-47022 Upstream summary: An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. Table […]
🟠 High ⏱ 15–60 min Last verified: 17 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-20107 CVE-2019-20907 CVE-2020-10735 CVE-2020-26116 CVE-2020-27619 CVE-2021-23336 CVE-2021-28861 CVE-2021-29921 +12 more Upstream summary: In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0855 CVE-2008-2363 Upstream summary: Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address. […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-41915 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3153 CVE-2011-3349 CVE-2011-4105 CVE-2012-1111 CVE-2013-4331 CVE-2015-8316 Upstream summary: dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10195 Upstream summary: lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4429 CVE-2017-8779 CVE-2018-14622 CVE-2021-46828 Upstream summary: Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-7501 Upstream summary: Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4905 CVE-2014-3576 CVE-2014-3600 CVE-2014-3612 CVE-2015-5254 CVE-2015-6524 CVE-2015-7559 CVE-2016-0782 +12 more Upstream summary: Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-21704 Upstream summary: log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders […]
