🟢 Low ⏱ 5–15 min Last verified: 30 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24803 Upstream summary: Asciidoctor-include-ext is Asciidoctor’s standard include processor reimplemented as an extension. Versions prior to 0.4.0, when used to render user-supplied input in AsciiDoc markup, may allow […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-2211 Upstream summary: A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0023 CVE-2009-1955 CVE-2009-1956 CVE-2009-2412 CVE-2010-1623 CVE-2017-12618 CVE-2022-25147 Upstream summary: The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-8754 Upstream summary: The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data […]
🟠 High ⏱ 15–60 min Last verified: 30 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2305 CVE-2019-14871 CVE-2019-14872 CVE-2019-14873 CVE-2019-14874 CVE-2019-14875 CVE-2019-14876 CVE-2019-14877 +3 more Upstream summary: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 […]
🟠 High ⏱ 15–60 min Last verified: 30 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-10868 CVE-2017-10869 CVE-2017-10872 CVE-2017-10908 CVE-2018-0608 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 +5 more Upstream summary: H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the […]
🟠 High ⏱ 15–60 min Last verified: 30 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-1705 CVE-2022-1962 CVE-2022-27664 CVE-2022-2879 CVE-2022-2880 CVE-2022-30630 CVE-2022-30631 CVE-2022-30632 +12 more Upstream summary: Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and […]
🟢 Low ⏱ 5–15 min Last verified: 29 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-34095 Upstream summary: cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In versions 1.0 through 2.0b4, cpdb-libs is vulnerable to buffer overflows […]
🟠 High ⏱ 15–60 min Last verified: 29 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0967 CVE-2003-0968 CVE-2004-0938 CVE-2004-0960 CVE-2004-0961 CVE-2005-1454 CVE-2005-1455 CVE-2005-4744 +12 more Upstream summary: rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) […]
🟢 Low ⏱ 5–15 min Last verified: 29 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-36568 Upstream summary: Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation. Table of contents Symptom & […]
