🟢 Low ⏱ 5–15 min Last verified: 14 September 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-40690 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 14 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-33430 CVE-2021-34141 CVE-2021-41495 CVE-2021-41496 Upstream summary: A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4987 Upstream summary: xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related […]
🟠 High ⏱ 15–60 min Last verified: 13 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8842 CVE-2017-8843 CVE-2017-8844 CVE-2017-8845 CVE-2017-8846 CVE-2017-8847 CVE-2017-9928 CVE-2017-9929 +12 more Upstream summary: The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2277 CVE-2016-10374 Upstream summary: The make_temporary_filename function in perltidy 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symlink attack, […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0630 CVE-2004-1076 Upstream summary: Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10937 Upstream summary: IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 11 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-31800 Upstream summary: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to […]
🟢 Low ⏱ 5–15 min Last verified: 11 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9433 Upstream summary: Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx. Table of […]
🟠 High ⏱ 15–60 min Last verified: 11 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16933 CVE-2018-6532 CVE-2018-6533 CVE-2018-6534 CVE-2018-6535 CVE-2018-6536 CVE-2020-14004 CVE-2020-29663 +8 more Upstream summary: etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable […]
