🟢 Low ⏱ 5–15 min Last verified: 9 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38173 Upstream summary: Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 9 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-6085 Upstream summary: Kile before 1.9.3 does not assign a backup file the same permissions as the original file, which might allow local users to obtain sensitive information. […]
🟢 Low ⏱ 5–15 min Last verified: 9 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-2148 Upstream summary: Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 8 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2387 Upstream summary: Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟡 Medium ⏱ 10–30 min Last verified: 8 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-30688 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Upstream summary: needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters […]
🟠 High ⏱ 15–60 min Last verified: 8 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2531 CVE-2005-2532 CVE-2005-2533 CVE-2005-2534 CVE-2005-3393 CVE-2005-3409 CVE-2006-1629 CVE-2008-3459 +12 more Upstream summary: OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush […]
🟡 Medium ⏱ 10–30 min Last verified: 8 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0380 CVE-2019-11365 CVE-2019-11366 CVE-2020-6097 CVE-2021-41054 CVE-2021-46671 Upstream summary: Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial […]
🟡 Medium ⏱ 10–30 min Last verified: 8 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10751 CVE-2022-0430 CVE-2022-24737 CVE-2023-48052 Upstream summary: All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15216 CVE-2020-7711 Upstream summary: In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2831 Upstream summary: Buffer overflow in das_watchdog 0.9.0 allows local users to execute arbitrary code with root privileges via a large string in the XAUTHORITY environment variable. Table […]
