Debian

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8978 Upstream summary: In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2704 Upstream summary: realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response. Table of contents Symptom & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1984 CVE-2013-1995 CVE-2013-1998 CVE-2016-7945 CVE-2016-7946 Upstream summary: Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-6019 Upstream summary: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-20108 CVE-2016-5697 CVE-2017-11428 CVE-2024-45409 CVE-2025-25291 CVE-2025-25292 CVE-2025-25293 CVE-2025-54572 Upstream summary: xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-1251 CVE-2019-19920 Upstream summary: Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-1753 Upstream summary: A cron job in fcheck before 2.7.59 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Table of contents […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-3340 Upstream summary: The tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors. Table of contents Symptom & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-25050 CVE-2022-25051 CVE-2022-27419 CVE-2025-34450 Upstream summary: rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode(). This vulnerability allows attackers to cause a Denial of […]

🟠 High   ⏱ 15–60 min  Last verified: 30 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-45336 CVE-2024-45340 CVE-2024-45341 CVE-2024-8244 CVE-2025-22865 CVE-2025-22866 CVE-2025-22870 CVE-2025-22871  +12 more Upstream summary: The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to […]