🟡 Medium ⏱ 10–30 min Last verified: 3 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-0100 CVE-2008-0101 CVE-2017-17518 Upstream summary: Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via […]
🟠 High ⏱ 15–60 min Last verified: 3 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4803 CVE-2008-4555 CVE-2009-3736 CVE-2014-0978 CVE-2014-1235 CVE-2014-1236 CVE-2014-9157 CVE-2018-10196 +3 more Upstream summary: graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary […]
🟠 High ⏱ 15–60 min Last verified: 2 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0391 CVE-2007-1507 CVE-2007-6599 CVE-2009-1250 CVE-2009-1251 CVE-2011-0430 CVE-2011-0431 CVE-2013-1794 +12 more Upstream summary: Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or […]
🟡 Medium ⏱ 10–30 min Last verified: 2 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-8729 CVE-2016-9601 CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 CVE-2017-9216 CVE-2020-12268 CVE-2023-46361 Upstream summary: An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF […]
🟢 Low ⏱ 5–15 min Last verified: 2 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3845 Upstream summary: libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 2 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3862 CVE-2006-0950 Upstream summary: Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 2 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2024 Upstream summary: Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unusual HTML messages" or (2) "certain malformed […]
🟢 Low ⏱ 5–15 min Last verified: 2 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-40577 Upstream summary: Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint […]
🟡 Medium ⏱ 10–30 min Last verified: 1 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1505 CVE-2002-1755 CVE-2013-1428 CVE-2018-16737 CVE-2018-16738 CVE-2018-16758 Upstream summary: tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 1 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0048 Upstream summary: Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an […]
