Debian

🟡 Medium   ⏱ 10–30 min  Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-1000418 CVE-2017-11661 CVE-2017-11662 CVE-2017-11663 CVE-2017-11664 Upstream summary: The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service (heap-based buffer overflow and […]

🟠 High   ⏱ 15–60 min  Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-4078 CVE-2009-4079 CVE-2009-4459 CVE-2011-4927 CVE-2011-4928 CVE-2011-4929 CVE-2012-0327 CVE-2012-2054  +12 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-45707 Upstream summary: An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-28282 Upstream summary: Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-33546 Upstream summary: Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5208 CVE-2017-5331 CVE-2017-5332 CVE-2017-5333 CVE-2017-6009 CVE-2017-6010 CVE-2017-6011 Upstream summary: Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2656 Upstream summary: Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service (disk consumption) and possibly perform […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-7306 Upstream summary: Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue […]

🟠 High   ⏱ 15–60 min  Last verified: 29 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-4192 CVE-2009-1438 CVE-2009-1513 CVE-2011-1574 CVE-2011-1761 CVE-2011-2911 CVE-2011-2912 CVE-2011-2913  +4 more Upstream summary: Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-41334 Upstream summary: Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to […]