Debian 12 Bookworm

🟠 High   ⏱ 15–60 min  Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5188 CVE-2017-9268 CVE-2018-12466 CVE-2018-12467 CVE-2018-12479 CVE-2018-7688 CVE-2018-7689 CVE-2020-8020  +2 more Upstream summary: The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-13794 Upstream summary: A heap-based buffer overflow exists in stbi__bmp_load_cont in stb_image.h in catimg 2.4.0. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7039 CVE-2020-8608 Upstream summary: tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-42612 CVE-2021-42613 CVE-2021-42614 Upstream summary: A use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-8242 Upstream summary: librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-3068 Upstream summary: Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit." Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-6401 CVE-2016-4425 CVE-2020-36325 Upstream summary: Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial […]

🟠 High   ⏱ 15–60 min  Last verified: 6 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-10684 CVE-2017-10685 CVE-2017-11112 CVE-2017-11113 CVE-2017-13728 CVE-2017-13729 CVE-2017-13730 CVE-2017-13731  +12 more Upstream summary: In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input […]