Debian

🟡 Medium   ⏱ 10–30 min  Last verified: 28 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-0042 CVE-2019-12412 CVE-2022-22728 Upstream summary: Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-1751 CVE-2005-1759 CVE-2009-2942 Upstream summary: Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-16082 Upstream summary: A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-4140 Upstream summary: An excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The patch set […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-27470 Upstream summary: SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-5007 Upstream summary: create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a (1) /tmp/lazarus.tgz temporary file or a […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-40905 Upstream summary: WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 28 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-16981 CVE-2019-13217 CVE-2019-13218 CVE-2019-13219 CVE-2019-13220 CVE-2019-13221 CVE-2019-13222 CVE-2019-13223  +12 more Upstream summary: stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow […]

🟠 High   ⏱ 15–60 min  Last verified: 28 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-4330 CVE-2016-4331 CVE-2016-4332 CVE-2016-4333 CVE-2017-17505 CVE-2017-17506 CVE-2017-17507 CVE-2017-17508  +12 more Upstream summary: In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array […]