🟡 Medium ⏱ 10–30 min Last verified: 25 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-36148 CVE-2022-37781 CVE-2023-34823 CVE-2023-34824 Upstream summary: fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader.c. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-45948 CVE-2022-38528 CVE-2022-45748 CVE-2024-40724 CVE-2024-45679 CVE-2024-46632 CVE-2024-48423 CVE-2024-48424 +12 more Upstream summary: Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-28144 Upstream summary: KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls. Table […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4349 CVE-2021-42523 Upstream summary: Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors […]
🟠 High ⏱ 15–60 min Last verified: 24 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2450 CVE-2014-6051 CVE-2014-6052 CVE-2014-6053 CVE-2014-6054 CVE-2014-6055 CVE-2016-9941 CVE-2016-9942 +12 more Upstream summary: auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1884 Upstream summary: Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4460 Upstream summary: The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6089 CVE-2012-6090 CVE-2017-17524 Upstream summary: Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-1095 CVE-2015-0778 CVE-2017-9274 CVE-2019-3681 CVE-2024-22034 Upstream summary: osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build […]
🟢 Low ⏱ 5–15 min Last verified: 23 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000022 CVE-2018-6353 Upstream summary: Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC interface that can result in Bitcoin […]
