🟢 Low ⏱ 5–15 min Last verified: 5 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-29469 Upstream summary: Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could […]
🟡 Medium ⏱ 10–30 min Last verified: 5 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-6394 CVE-2015-8859 CVE-2024-43799 Upstream summary: visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 4 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3206 Upstream summary: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 4 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0565 Upstream summary: NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟢 Low ⏱ 5–15 min Last verified: 4 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3385 CVE-2020-14940 Upstream summary: TuxGuitar 1.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in […]
🟠 High ⏱ 15–60 min Last verified: 4 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0784 CVE-2009-2911 CVE-2009-4273 CVE-2010-0411 CVE-2010-0412 CVE-2010-4170 CVE-2010-4171 CVE-2011-1769 +4 more Upstream summary: Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr […]
🟢 Low ⏱ 5–15 min Last verified: 4 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-45590 Upstream summary: body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35573 CVE-2021-35525 Upstream summary: srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a long timestamp tag in an SRS […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-35515 Upstream summary: Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-39254 Upstream summary: matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from […]
