🟢 Low ⏱ 5–15 min Last verified: 16 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2673 CVE-2016-9427 Upstream summary: Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) […]
🟢 Low ⏱ 5–15 min Last verified: 16 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7598 CVE-2021-44906 Upstream summary: minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 15 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-12951 CVE-2019-13503 CVE-2019-19307 CVE-2020-25756 CVE-2020-25887 CVE-2021-26528 CVE-2021-26529 CVE-2021-26530 +12 more Upstream summary: An issue was discovered in Mongoose before 6.15. The parse_mqtt() function in mg_mqtt.c has a critical […]
🟢 Low ⏱ 5–15 min Last verified: 15 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0283 CVE-2021-3480 Upstream summary: The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 15 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-34363 Upstream summary: The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature. […]
🟡 Medium ⏱ 10–30 min Last verified: 15 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1340 CVE-2005-0108 CVE-2015-9542 Upstream summary: Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, which allows local users to obtain sensitive information. Table […]
🟠 High ⏱ 15–60 min Last verified: 15 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2023-27985 CVE-2023-27986 CVE-2023-28617 CVE-2024-30202 +7 more Upstream summary: GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of […]
🟠 High ⏱ 15–60 min Last verified: 15 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-5379 CVE-2012-0946 CVE-2012-0951 CVE-2012-0952 CVE-2012-0953 CVE-2012-4225 CVE-2013-0131 CVE-2013-5986 +12 more Upstream summary: The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-36039 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-29465 Upstream summary: SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files with the privileges of a […]
