Debian

🟡 Medium   ⏱ 10–30 min  Last verified: 7 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-17689 CVE-2017-9604 CVE-2018-19516 CVE-2019-10732 CVE-2021-31855 CVE-2025-69412 Upstream summary: The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-46228 Upstream summary: zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. Table of contents Symptom & Impact Environment & Reproduction […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4184 Upstream summary: Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-1136 CVE-2021-36081 Upstream summary: In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-21897 Upstream summary: A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-23451 CVE-2022-23452 CVE-2022-3100 Upstream summary: An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-14332 CVE-2021-40826 CVE-2021-40827 Upstream summary: An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL […]

🟠 High   ⏱ 15–60 min  Last verified: 7 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0397 CVE-2004-0413 CVE-2004-0749 CVE-2004-1438 CVE-2006-1564 CVE-2007-2448 CVE-2009-2411 CVE-2010-3315  +12 more Upstream summary: Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers […]

🟠 High   ⏱ 15–60 min  Last verified: 7 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-1051 CVE-2004-1689 CVE-2005-1119 CVE-2005-1993 CVE-2005-2959 CVE-2005-4158 CVE-2005-4890 CVE-2006-0151  +12 more Upstream summary: sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-18197 Upstream summary: In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView. Table […]