Debian

🟠 High   ⏱ 15–60 min  Last verified: 25 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-9811 CVE-2017-5837 CVE-2017-5839 CVE-2017-5842 CVE-2017-5844 CVE-2019-9928 CVE-2021-3522 CVE-2023-37328  +12 more Upstream summary: The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-2132 CVE-2024-5629 Upstream summary: bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-16159 Upstream summary: BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0828 Upstream summary: Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables. Table of contents Symptom & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-1006 CVE-2011-1022 CVE-2018-14348 Upstream summary: Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local […]

🟠 High   ⏱ 15–60 min  Last verified: 24 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-21795 CVE-2024-21812 CVE-2024-22097 CVE-2024-23305 CVE-2024-23310 CVE-2024-23313 CVE-2024-23606 CVE-2024-23809  +12 more Upstream summary: A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig […]

🟠 High   ⏱ 15–60 min  Last verified: 24 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-45888 CVE-2022-49034 CVE-2023-31083 CVE-2023-45896 CVE-2023-52658 CVE-2023-52760 CVE-2023-52812 CVE-2023-52857  +12 more Upstream summary: An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-1107 CVE-2012-1108 CVE-2012-1584 CVE-2012-2396 CVE-2017-12678 CVE-2018-11439 CVE-2023-47466 Upstream summary: The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-4398 Upstream summary: Multiple CRLF injection vulnerabilities in the (1) now-playing.rb and (2) xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0107 CVE-2004-0108 CVE-2018-19416 CVE-2018-19517 CVE-2019-16167 CVE-2019-19725 CVE-2022-39377 CVE-2023-33204 Upstream summary: The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary […]