🟡 Medium ⏱ 10–30 min Last verified: 14 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4408 CVE-2007-4410 CVE-2007-4411 Upstream summary: ircu 2.10.12.05 and earlier ignores timestamps in bounces, which allows remote attackers to take over a channel during a netjoin by causing a […]
🟠 High ⏱ 15–60 min Last verified: 13 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1869 CVE-2007-1870 CVE-2007-3946 CVE-2007-3947 CVE-2007-3948 CVE-2007-3949 CVE-2007-3950 CVE-2007-4727 +12 more Upstream summary: lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource […]
🟠 High ⏱ 15–60 min Last verified: 12 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5617 CVE-2008-5618 CVE-2011-1488 CVE-2011-1489 CVE-2011-1490 CVE-2011-3200 CVE-2011-4623 CVE-2014-3634 +8 more Upstream summary: The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, […]
🟢 Low ⏱ 5–15 min Last verified: 12 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1243 CVE-2016-1244 Upstream summary: Stack-based buffer overflow in the extractTree function in unADF allows remote attackers to execute arbitrary code via a long pathname. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 12 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-24038 Upstream summary: The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content with certain style attributes. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 12 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17459 CVE-2020-24614 CVE-2021-36377 Upstream summary: http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh […]
🟢 Low ⏱ 5–15 min Last verified: 11 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-4140 Upstream summary: An excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The patch […]
🟢 Low ⏱ 5–15 min Last verified: 11 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-18609 CVE-2023-35789 Upstream summary: An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the […]
🟢 Low ⏱ 5–15 min Last verified: 11 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-5254 CVE-2014-5255 Upstream summary: xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 11 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6303 Upstream summary: Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a […]
