🟢 Low ⏱ 5–15 min Last verified: 3 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0771 Upstream summary: Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8326 Upstream summary: The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4931 Upstream summary: gpw generates shorter passwords than required Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-21704 Upstream summary: log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders […]
🟡 Medium ⏱ 10–30 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2659 CVE-2005-2930 CVE-2005-3318 CVE-2006-3178 CVE-2007-0619 Upstream summary: Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4739 Upstream summary: reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1113 Upstream summary: SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) sender or (2) recipient […]
🟠 High ⏱ 15–60 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4676 CVE-2007-6353 CVE-2008-2696 CVE-2014-9449 CVE-2017-11591 CVE-2017-11683 CVE-2017-14859 CVE-2017-14862 +12 more Upstream summary: Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-9514 CVE-2023-26964 Upstream summary: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and […]
🟠 High ⏱ 15–60 min Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9527 CVE-2018-10191 CVE-2018-10199 CVE-2018-11743 CVE-2018-12248 CVE-2018-12249 CVE-2018-14337 CVE-2020-15866 +12 more Upstream summary: The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of […]
