🟢 Low ⏱ 5–15 min Last verified: 22 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1293 Upstream summary: ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1034 CVE-2006-0051 Upstream summary: Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0645 CVE-2006-4513 Upstream summary: Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-4447 CVE-2006-7236 CVE-2008-2383 CVE-2021-27135 CVE-2022-24130 CVE-2022-45063 CVE-2023-40359 Upstream summary: X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-3866 Upstream summary: An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-20307 CVE-2021-33293 Upstream summary: Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 20 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0577 CVE-2003-0865 CVE-2004-0805 CVE-2004-0982 CVE-2004-0991 CVE-2004-1284 CVE-2006-1655 CVE-2006-3355 +10 more Upstream summary: mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code […]
🟡 Medium ⏱ 10–30 min Last verified: 20 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15108 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 Upstream summary: spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1263 CVE-2014-3564 Upstream summary: GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP […]
🟡 Medium ⏱ 10–30 min Last verified: 20 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1438 CVE-2015-3885 CVE-2015-8366 CVE-2018-19565 CVE-2018-19566 CVE-2018-19567 CVE-2018-19568 CVE-2018-19655 +1 more Upstream summary: Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, […]
