🟢 Low ⏱ 5–15 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3357 Upstream summary: gnome-subtitles 1.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-33038 Upstream summary: An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration […]
🟡 Medium ⏱ 10–30 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4321 CVE-2009-0362 CVE-2009-5023 CVE-2012-5642 CVE-2013-2178 CVE-2013-7176 CVE-2013-7177 CVE-2021-32749 Upstream summary: fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0885 CVE-2003-1294 CVE-2003-1295 CVE-2004-2655 CVE-2007-1859 CVE-2007-5585 CVE-2011-2187 CVE-2015-8025 +2 more Upstream summary: Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-5389 CVE-2019-10155 CVE-2019-12312 CVE-2020-1763 CVE-2022-23094 CVE-2023-23009 CVE-2023-30570 CVE-2023-38710 +4 more Upstream summary: The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4807 CVE-2005-4808 CVE-2006-2362 CVE-2008-2310 CVE-2012-3509 CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 +12 more Upstream summary: Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in […]
🟠 High ⏱ 15–60 min Last verified: 25 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10117 CVE-2016-10118 CVE-2016-10119 CVE-2016-10120 CVE-2016-10121 CVE-2016-10122 CVE-2016-10123 CVE-2016-9016 +10 more Upstream summary: Firejail does not restrict access to –tmpfs, which allows local users to gain privileges, as demonstrated […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1982 Upstream summary: Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0288 Upstream summary: nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-20795 Upstream summary: iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a […]
