Debian

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-16487 CVE-2018-3721 CVE-2019-1010266 CVE-2019-10744 CVE-2020-28500 CVE-2020-8203 CVE-2021-23337 CVE-2025-13465  +2 more Upstream summary: A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 February 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-7883 Upstream summary: When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-6426 CVE-2013-6428 CVE-2014-3801 CVE-2015-5295 CVE-2016-9185 CVE-2023-1625 CVE-2024-7319 Upstream summary: The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-8556 Upstream summary: A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-34457 Upstream summary: wb2osz/direwolf (Dire Wolf) versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kiss_rec_byte() located in […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-25467 Upstream summary: Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-47111 CVE-2022-47112 CVE-2023-31102 CVE-2023-40481 CVE-2023-52168 CVE-2023-52169 CVE-2024-11612 CVE-2025-11001  +3 more Upstream summary: 7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 February 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-0743 CVE-2011-0001 CVE-2024-45751 Upstream summary: Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-32570 CVE-2024-1580 Upstream summary: VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit. Table of contents Symptom & […]

🟠 High   ⏱ 15–60 min  Last verified: 21 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-3907 CVE-2021-3909 CVE-2021-43114 CVE-2021-43173 CVE-2024-45234 CVE-2024-45235 CVE-2024-45236 CVE-2024-45237  +5 more Upstream summary: OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to […]