🟠 High ⏱ 5–30 min Last verified: 23 June 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5374 CVE-2012-3410 CVE-2012-6711 CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 +8 more Upstream summary: bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? […]
🟡 Medium ⏱ 10–30 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 CVE-2010-4336 CVE-2016-6254 CVE-2017-16820 CVE-2017-7401 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4895 CVE-2018-13420 Upstream summary: Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32708 Upstream summary: Flysystem is an open source file storage library for PHP. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-5873 Upstream summary: Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial […]
🟡 Medium ⏱ 10–30 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 CVE-2014-8502 CVE-2014-8503 CVE-2014-8504 CVE-2014-8737 CVE-2014-8738 Upstream summary: The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-14332 CVE-2021-40826 CVE-2021-40827 Upstream summary: An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1034 CVE-2002-1049 CVE-2002-1050 CVE-2003-0886 CVE-2004-1182 CVE-2005-3069 CVE-2005-3070 CVE-2005-3538 +3 more Upstream summary: Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0129 CVE-2004-1055 CVE-2004-1147 CVE-2004-1148 CVE-2004-2630 CVE-2004-2631 CVE-2004-2632 CVE-2005-0459 +12 more Upstream summary: Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary […]
