🟢 Low ⏱ 5–15 min Last verified: 2 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-8859 Upstream summary: Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) […]
🟠 High ⏱ 15–60 min Last verified: 2 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1381 CVE-2004-0399 CVE-2004-0400 CVE-2005-0021 CVE-2005-0022 CVE-2010-2023 CVE-2010-2024 CVE-2010-4344 +12 more Upstream summary: Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim […]
🟠 High ⏱ 15–60 min Last verified: 2 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-34670 CVE-2022-34674 CVE-2022-34675 CVE-2022-34677 CVE-2022-34679 CVE-2022-34680 CVE-2022-34682 CVE-2022-34684 +12 more Upstream summary: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where […]
🟠 High ⏱ 15–60 min Last verified: 2 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7443 CVE-2015-3414 CVE-2015-3415 CVE-2015-3416 CVE-2016-6153 CVE-2017-10989 CVE-2017-13685 CVE-2017-15286 +12 more Upstream summary: Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-16472 CVE-2021-23518 Upstream summary: A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2479 CVE-2010-4183 Upstream summary: Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-20204 Upstream summary: A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-24361 Upstream summary: SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13351 Upstream summary: posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed […]
🟢 Low ⏱ 5–15 min Last verified: 31 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4184 Upstream summary: Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
