🟢 Low ⏱ 5–15 min Last verified: 9 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-40897 Upstream summary: Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with […]
🟠 High ⏱ 15–60 min Last verified: 9 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0844 CVE-2003-0015 CVE-2003-0977 CVE-2004-0180 CVE-2004-0396 CVE-2004-0405 CVE-2004-0414 CVE-2004-0416 +10 more Upstream summary: Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to […]
🟠 High ⏱ 15–60 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0509 CVE-2006-5072 CVE-2006-6104 CVE-2007-5197 CVE-2008-3422 CVE-2008-3906 CVE-2009-0217 CVE-2009-0689 +10 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0647 CVE-2005-2317 Upstream summary: shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file. […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-3125 Upstream summary: Array index error in tetrinet.c in gtetrinet 0.7.8 and earlier allows remote attackers to execute arbitrary code via a packet specifying a negative number of […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3111 Upstream summary: The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13508 Upstream summary: FreeTDS through 1.1.11 has a Buffer Overflow. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1832 CVE-2018-1313 CVE-2022-46337 Upstream summary: XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1395 Upstream summary: Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary […]
🟡 Medium ⏱ 10–30 min Last verified: 7 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4261 CVE-2014-5247 CVE-2015-7944 CVE-2015-7945 Upstream summary: Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2.0.4, and 2.1.0 before 2.1.0~rc2 allow (1) […]
