🟢 Low ⏱ 5–15 min Last verified: 7 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-27650 Upstream summary: A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers […]
🟢 Low ⏱ 5–15 min Last verified: 7 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0687 CVE-2006-3251 Upstream summary: Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format […]
🟢 Low ⏱ 5–15 min Last verified: 7 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28502 Upstream summary: This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr.open), malicious user input flowing into […]
🟢 Low ⏱ 5–15 min Last verified: 7 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-12135 Upstream summary: bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14823 CVE-2021-4213 CVE-2022-4132 Upstream summary: A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0825 Upstream summary: Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1935 CVE-2019-15161 CVE-2019-15162 CVE-2019-15163 CVE-2019-15164 CVE-2019-15165 CVE-2023-7256 CVE-2024-8006 +1 more Upstream summary: pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might […]
🟢 Low ⏱ 5–15 min Last verified: 5 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10537 Upstream summary: backbone is a module that adds in structure to a JavaScript heavy application through key-value pairs and custom events connecting to your RESTful API through […]
🟡 Medium ⏱ 10–30 min Last verified: 5 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14842 CVE-2021-20286 CVE-2022-0485 CVE-2023-5215 CVE-2024-7383 Upstream summary: Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds […]
🟢 Low ⏱ 5–15 min Last verified: 5 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2131 CVE-2014-6262 Upstream summary: Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) […]
