🟢 Low ⏱ 5–15 min Last verified: 20 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0606 CVE-2004-0451 Upstream summary: sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 20 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1494 CVE-2020-13757 CVE-2020-25658 Upstream summary: The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via […]
🟠 High ⏱ 15–60 min Last verified: 20 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5935 CVE-2007-5936 CVE-2007-5937 CVE-2007-5940 CVE-2009-1284 CVE-2010-0739 CVE-2010-0827 CVE-2010-1440 +12 more Upstream summary: Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted […]
🟠 High ⏱ 15–60 min Last verified: 20 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2069 CVE-2006-4251 CVE-2006-4252 CVE-2008-1637 CVE-2008-3217 CVE-2009-4009 CVE-2009-4010 CVE-2014-3614 +12 more Upstream summary: The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32952 Upstream summary: go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-59088 CVE-2025-59089 Upstream summary: If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-27638 CVE-2025-24356 Upstream summary: receive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets with an invalid type code. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4973 Upstream summary: Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by […]
🟠 High ⏱ 15–60 min Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-0014 CVE-2010-2940 CVE-2010-4341 CVE-2012-3462 CVE-2013-0219 CVE-2013-0220 CVE-2014-0249 CVE-2015-5292 +10 more Upstream summary: System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5661 CVE-2024-28168 Upstream summary: In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send […]
