🟡 Medium ⏱ 10–30 min Last verified: 10 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4490 CVE-2015-1548 CVE-2017-17663 CVE-2018-18778 Upstream summary: mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, […]
🟠 High ⏱ 15–60 min Last verified: 10 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1028 CVE-2011-4124 CVE-2011-4125 CVE-2011-4126 CVE-2016-10187 CVE-2018-7889 CVE-2021-44686 CVE-2023-46303 +12 more Upstream summary: Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla […]
🟢 Low ⏱ 5–15 min Last verified: 10 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-5042 Upstream summary: python-docutils allows insecure usage of temporary files Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟢 Low ⏱ 5–15 min Last verified: 10 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-7291 Upstream summary: gri before 2.12.18 generates temporary files in an insecure way. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 10 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-45710 CVE-2023-22466 Upstream summary: An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed […]
🟢 Low ⏱ 5–15 min Last verified: 9 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10539 Upstream summary: negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when […]
🟡 Medium ⏱ 10–30 min Last verified: 9 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1382 CVE-2009-2459 CVE-2024-40446 Upstream summary: Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file […]
🟠 High ⏱ 15–60 min Last verified: 9 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0853 CVE-2003-0854 CVE-2005-1039 CVE-2007-4998 CVE-2008-1946 CVE-2014-9471 CVE-2015-1865 CVE-2016-2781 +3 more Upstream summary: An integer overflow in ls in the fileutils or coreutils packages may allow local users to […]
🟢 Low ⏱ 5–15 min Last verified: 8 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-30536 Upstream summary: slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline (\n) into both […]
🟢 Low ⏱ 5–15 min Last verified: 8 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2002 CVE-2013-2005 Upstream summary: Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via […]
