🟢 Low ⏱ 5–15 min Last verified: 9 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0012 CVE-2009-2294 Upstream summary: Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a […]
🟡 Medium ⏱ 10–30 min Last verified: 9 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1405 CVE-2004-1617 CVE-2005-3120 CVE-2016-9179 CVE-2017-1000211 CVE-2021-38165 Upstream summary: CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request […]
🟢 Low ⏱ 5–15 min Last verified: 9 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4968 Upstream summary: The (1) rccs and (2) STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff.##### temporary […]
🟡 Medium ⏱ 10–30 min Last verified: 9 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2738 CVE-2013-2739 CVE-2013-2745 CVE-2020-12695 CVE-2020-28926 CVE-2022-26505 CVE-2023-33476 CVE-2023-47430 +1 more Upstream summary: minidlna has SQL Injection that may allow retrieval of arbitrary files Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 9 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2723 CVE-2006-4310 CVE-2006-5462 CVE-2006-5463 CVE-2006-5464 CVE-2006-5633 CVE-2006-5747 CVE-2006-5748 +12 more Upstream summary: Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via […]
🟡 Medium ⏱ 5–30 min Last verified: 8 November 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 7 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-53161 Upstream summary: The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 7 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-37365 Upstream summary: Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer. Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 15–60 min Last verified: 7 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-4244 CVE-2006-4731 CVE-2006-4798 CVE-2006-5872 CVE-2007-0667 CVE-2007-1329 CVE-2007-1436 CVE-2007-1437 +12 more Upstream summary: SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches […]
🟢 Low ⏱ 5–15 min Last verified: 7 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7545 CVE-2018-1063 Upstream summary: SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call. Table of contents Symptom & […]
