🟢 Low ⏱ 5–15 min Last verified: 1 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-7883 Upstream summary: When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-46228 Upstream summary: zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 31 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-23491 CVE-2023-37920 CVE-2024-39689 Upstream summary: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35450 Upstream summary: Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-26237 Upstream summary: Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A malicious HTML code block can […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10932 Upstream summary: lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8418 Upstream summary: RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5104 Upstream summary: The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by […]
🟠 High ⏱ 15–60 min Last verified: 30 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14178 CVE-2019-11502 CVE-2019-11503 CVE-2019-7303 CVE-2019-7304 CVE-2020-11934 CVE-2020-27352 CVE-2021-3155 +10 more Upstream summary: In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-27211 Upstream summary: steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data. Table of contents Symptom & Impact […]
