🟠 High ⏱ 15–60 min Last verified: 8 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-20107 CVE-2019-20907 CVE-2020-10735 CVE-2020-26116 CVE-2020-27619 CVE-2021-23336 CVE-2021-28861 CVE-2021-29921 +12 more Upstream summary: In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into […]
🟡 Medium ⏱ 10–30 min Last verified: 7 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1090 CVE-2010-1192 CVE-2010-1194 CVE-2019-19977 Upstream summary: Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3216 Upstream summary: The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-3376 CVE-2007-3476 CVE-2007-3477 CVE-2007-3996 CVE-2009-1364 CVE-2009-3546 CVE-2015-0848 CVE-2015-4588 +3 more Upstream summary: Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-1605 CVE-2005-0490 CVE-2005-3185 CVE-2005-4077 CVE-2006-1061 CVE-2007-3564 CVE-2009-0037 CVE-2009-2417 +12 more Upstream summary: curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 6 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7751 Upstream summary: pathval before version 1.1.1 is vulnerable to prototype pollution. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 6 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8270 CVE-2015-8271 CVE-2015-8272 Upstream summary: The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and […]
🟢 Low ⏱ 5–15 min Last verified: 6 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-0496 Upstream summary: Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 (as well as in RTsoft's Dink Smallwood HD / ProtonSDK version) before 3.14 allow […]
🟡 Medium ⏱ 10–30 min Last verified: 6 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11922 CVE-2021-24031 CVE-2021-24032 CVE-2022-4899 Upstream summary: A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out […]
🟡 Medium ⏱ 10–30 min Last verified: 5 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0360 CVE-2009-0361 CVE-2020-10595 CVE-2023-3326 Upstream summary: Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows […]
