🟡 Medium ⏱ 10–30 min Last verified: 17 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25791 CVE-2020-25792 CVE-2020-25793 CVE-2020-25794 CVE-2020-25795 CVE-2020-25796 Upstream summary: An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is […]
🟡 Medium ⏱ 10–30 min Last verified: 17 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-6360 CVE-2020-19824 CVE-2021-30145 Upstream summary: mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, […]
🟠 High ⏱ 15–60 min Last verified: 17 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4619 CVE-2007-6277 CVE-2007-6278 CVE-2007-6279 CVE-2014-8962 CVE-2014-9028 CVE-2017-6888 CVE-2020-0499 +2 more Upstream summary: Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp […]
🟠 High ⏱ 15–60 min Last verified: 17 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3737 CVE-2005-3885 CVE-2007-1463 CVE-2007-1464 CVE-2012-5656 CVE-2012-6076 CVE-2021-42700 CVE-2021-42702 +2 more Upstream summary: Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers […]
🟠 High ⏱ 15–60 min Last verified: 17 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000002 CVE-2018-10920 CVE-2018-1110 CVE-2019-10190 CVE-2019-10191 CVE-2019-19331 CVE-2020-12667 CVE-2021-40083 +6 more Upstream summary: Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-5694 CVE-2015-5695 Upstream summary: Designate does not enforce the DNS protocol limit concerning record set sizes Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-48682 Upstream summary: In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1802 Upstream summary: The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks […]
🟠 High ⏱ 15–60 min Last verified: 16 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0391 CVE-2002-1235 CVE-2002-2443 CVE-2003-0028 CVE-2003-0058 CVE-2003-0059 CVE-2003-0060 CVE-2003-0072 +12 more Upstream summary: Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or […]
🟢 Low ⏱ 5–15 min Last verified: 15 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-38283 Upstream summary: In OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by a potentially distant remote actor may cause the system […]
