🟢 Low ⏱ 5–15 min Last verified: 12 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-44940 Upstream summary: Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 12 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4112 CVE-2016-2141 Upstream summary: The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute […]
🟡 Medium ⏱ 10–30 min Last verified: 12 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7969 CVE-2016-7970 CVE-2016-7972 CVE-2020-24994 CVE-2020-26682 CVE-2020-36430 Upstream summary: The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) […]
🟢 Low ⏱ 5–15 min Last verified: 11 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6114 Upstream summary: The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 11 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14731 CVE-2017-2816 CVE-2019-9656 Upstream summary: ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a […]
🟢 Low ⏱ 5–15 min Last verified: 11 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0438 Upstream summary: eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files. […]
🟢 Low ⏱ 5–15 min Last verified: 11 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-25222 Upstream summary: SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers […]
🟢 Low ⏱ 5–15 min Last verified: 11 November 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-52354 Upstream summary: chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟢 Low ⏱ 5–15 min Last verified: 11 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32614 CVE-2021-3548 Upstream summary: A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xCC bytes from it. […]
🟠 High ⏱ 15–60 min Last verified: 11 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0034 CVE-2006-0987 CVE-2006-2073 CVE-2006-4095 CVE-2006-4096 CVE-2007-0493 CVE-2007-0494 CVE-2007-2241 +12 more Upstream summary: An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows […]
