🔴 Critical ⏱ 5–30 min Last verified: 1 November 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 1 November 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6426 CVE-2013-6428 CVE-2014-3801 CVE-2015-5295 CVE-2016-9185 CVE-2023-1625 Upstream summary: The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy […]
🟢 Low ⏱ 5–15 min Last verified: 1 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-4070 Upstream summary: Off-by-one Error in GitHub repository v2fly/v2ray-core prior to 4.44.0. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 1 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0129 CVE-2005-0130 CVE-2005-0131 CVE-2007-4400 CVE-2009-5050 CVE-2014-8483 CVE-2017-15923 Upstream summary: The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name […]
🟢 Low ⏱ 5–15 min Last verified: 1 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7115 Upstream summary: Buffer overflow in the handle_packet function in mactelnet.c in the client in MAC-Telnet 0.4.3 and earlier allows remote TELNET servers to execute arbitrary code via […]
🟢 Low ⏱ 5–15 min Last verified: 1 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6318 Upstream summary: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges […]
🟢 Low ⏱ 5–15 min Last verified: 31 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9970 Upstream summary: jasypt before 1.9.2 allows a timing attack against the password hash comparison. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🔴 Critical ⏱ 5–30 min Last verified: 31 October 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 31 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0385 Upstream summary: Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 31 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-3106 CVE-2007-4029 CVE-2007-4065 CVE-2007-4066 CVE-2008-1419 CVE-2008-1423 CVE-2008-2009 CVE-2009-2663 +3 more Upstream summary: lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a […]
