Debian

🟠 High   ⏱ 15–60 min  Last verified: 23 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3050 CVE-2019-19630 CVE-2021-20308 CVE-2021-23158 CVE-2021-23165 CVE-2021-23180 CVE-2021-23191 CVE-2021-23206  +12 more Upstream summary: Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-0675 Upstream summary: In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-42392 CVE-2022-23221 CVE-2022-45868 Upstream summary: The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-28054 Upstream summary: Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1154 Upstream summary: anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-21797 CVE-2024-34997 Upstream summary: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the […]

🟠 High   ⏱ 15–60 min  Last verified: 23 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-2901 CVE-2014-2902 CVE-2014-2903 CVE-2014-2904 CVE-2014-3566 CVE-2015-6925 CVE-2015-7744 CVE-2016-7438  +12 more Upstream summary: wolfssl before 3.2.0 does not properly issue certificates for a server's hostname. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1444 Upstream summary: A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink […]

🟠 High   ⏱ 15–60 min  Last verified: 22 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-1516 CVE-2016-1517 CVE-2017-1000450 CVE-2017-12597 CVE-2017-12598 CVE-2017-12599 CVE-2017-12600 CVE-2017-12601  +12 more Upstream summary: OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-1293 Upstream summary: ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote […]