🟢 Low ⏱ 5–15 min Last verified: 1 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-6508 CVE-2022-3275 Upstream summary: Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2001 Upstream summary: Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3359 Upstream summary: If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
🟡 Medium ⏱ 10–30 min Last verified: 1 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0077 CVE-2013-7490 CVE-2013-7491 CVE-2014-10401 CVE-2014-10402 CVE-2019-20919 CVE-2020-14392 CVE-2020-14393 Upstream summary: The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20839 Upstream summary: systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or […]
🟢 Low ⏱ 5–15 min Last verified: 31 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0855 Upstream summary: The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 31 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11189 CVE-2017-11190 CVE-2017-14120 CVE-2017-14121 CVE-2017-14122 Upstream summary: unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash), which […]
🟢 Low ⏱ 5–15 min Last verified: 31 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-0665 CVE-2008-0666 Upstream summary: wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file. Table […]
🟢 Low ⏱ 5–15 min Last verified: 31 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4987 Upstream summary: xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related […]
