🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2504 Upstream summary: Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current […]
🟡 Medium ⏱ 10–30 min Last verified: 17 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3601 CVE-2011-3602 CVE-2011-3604 CVE-2011-3605 Upstream summary: Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to execute arbitrary code or […]
🟡 Medium ⏱ 10–30 min Last verified: 17 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16378 CVE-2019-20790 CVE-2020-12272 CVE-2020-12460 CVE-2021-34555 CVE-2024-25768 Upstream summary: OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-25189 Upstream summary: libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel. Table […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3389 CVE-2014-3566 Upstream summary: The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts […]
🟡 Medium ⏱ 10–30 min Last verified: 16 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6685 CVE-2019-5477 CVE-2020-26247 CVE-2022-23476 CVE-2022-24836 CVE-2022-29181 Upstream summary: Nokogiri before 1.5.4 is vulnerable to XXE attacks Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 16 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-4000 CVE-2012-4427 CVE-2013-7220 CVE-2013-7221 CVE-2014-7300 CVE-2017-8288 CVE-2019-3820 CVE-2020-17489 +2 more Upstream summary: gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000248 Upstream summary: Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 15 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35863 CVE-2021-21299 CVE-2021-32714 CVE-2021-32715 CVE-2022-31394 Upstream summary: An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-4472 Upstream summary: The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files […]
