🟢 Low ⏱ 5–15 min Last verified: 27 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000376 Upstream summary: libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by […]
🟡 Medium ⏱ 5–30 min Last verified: 26 November 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 26 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7144 CVE-2015-1852 CVE-2015-7546 CVE-2022-2447 Upstream summary: OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a […]
🟢 Low ⏱ 5–15 min Last verified: 26 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1983 CVE-2016-7944 Upstream summary: Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related […]
🟢 Low ⏱ 5–15 min Last verified: 26 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3535 Upstream summary: Buffer overflow in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 26 November 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-22895 Upstream summary: The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in […]
🟠 High ⏱ 15–60 min Last verified: 26 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3547 CVE-2008-3576 CVE-2008-3577 CVE-2009-4007 CVE-2010-0401 CVE-2010-0402 CVE-2010-0406 CVE-2010-2534 +7 more Upstream summary: Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause […]
🟢 Low ⏱ 5–15 min Last verified: 25 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-14001 CVE-2021-28834 Upstream summary: The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") […]
🟢 Low ⏱ 5–15 min Last verified: 25 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-2452 Upstream summary: Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via […]
🟡 Medium ⏱ 10–30 min Last verified: 25 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0536 CVE-2005-0869 CVE-2005-0870 CVE-2005-3347 CVE-2005-3348 CVE-2006-3360 CVE-2007-4048 CVE-2023-49006 Upstream summary: Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to […]
