🟡 Medium ⏱ 10–30 min Last verified: 14 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16516 CVE-2022-24795 CVE-2023-33460 Upstream summary: In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a […]
🟢 Low ⏱ 5–15 min Last verified: 14 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0453 Upstream summary: Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) […]
🟠 High ⏱ 15–60 min Last verified: 14 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9243 CVE-2018-10903 CVE-2020-25659 CVE-2020-36242 CVE-2023-23931 CVE-2023-49083 CVE-2023-50782 CVE-2024-26130 +2 more Upstream summary: HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than […]
🟢 Low ⏱ 5–15 min Last verified: 14 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10195 Upstream summary: lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t […]
🟢 Low ⏱ 5–15 min Last verified: 14 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16119 Upstream summary: Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1994 Upstream summary: Multiple integer overflows in X.org libchromeXvMC and libchromeXvMCPro in openChrome 0.3.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3351 Upstream summary: startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0214 CVE-2014-7209 Upstream summary: run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 13 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0012 CVE-2014-1402 CVE-2016-10745 CVE-2019-10906 CVE-2019-8341 CVE-2020-28493 CVE-2024-22195 CVE-2024-34064 +3 more Upstream summary: FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain […]
🟡 Medium ⏱ 10–30 min Last verified: 13 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1442 CVE-2004-0045 CVE-2012-3523 Upstream summary: Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long […]
