Debian

Debian 12 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0380 CVE-2002-1350 CVE-2003-0093 CVE-2003-0108 CVE-2003-0145 CVE-2003-0989 CVE-2003-1029 CVE-2004-0055  +12 more Upstream summary: Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service […]

Read more
Debian 12 — xbindkeys-config — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — xbindkeys-config — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-9513 Upstream summary: Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
Debian 12 — python-pyramid — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — python-pyramid — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-40587 Upstream summary: Pyramid is an open source Python web framework. A path traversal vulnerability in Pyramid versions 2.0.0 and 2.0.1 impacts users of Python 3.11 that are […]

Read more
Debian 12 — libxcb — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libxcb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-2064 Upstream summary: Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to […]

Read more
Debian 12 — dbus-glib — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — dbus-glib — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-1172 CVE-2013-0292 Upstream summary: DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial […]

Read more
Debian 12 — perdition — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — perdition — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-5740 CVE-2013-4584 Upstream summary: The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an […]

Read more
Debian 11 — json-smart — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — json-smart — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-31684 CVE-2023-1370 Upstream summary: A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) […]

Read more
Debian 12 — linux-atm — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — linux-atm — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0396 Upstream summary: Buffer overflow in les for ATM on Linux (linux-atm) before 2.4.1, if used setuid, allows local users to gain privileges via a long -f command […]

Read more
Debian 11 — proftpd-mod-proxy — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — proftpd-mod-proxy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-48795 Upstream summary: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that […]

Read more
Debian 12 — golang-github-seccomp-libseccomp-golang — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — golang-github-seccomp-libseccomp-golang — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-18367 Upstream summary: libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified […]

Read more
CHAT