🟢 Low ⏱ 5–15 min Last verified: 15 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-13135 Upstream summary: A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure. […]
🔴 Critical ⏱ 5–30 min Last verified: 14 September 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 14 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-4259 CVE-2017-11568 CVE-2017-11569 CVE-2017-11570 CVE-2017-11571 CVE-2017-11572 CVE-2017-11573 CVE-2017-11574 +12 more Upstream summary: Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-29197 Upstream summary: guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline […]
🟠 High ⏱ 15–60 min Last verified: 13 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0201 CVE-2006-6107 CVE-2008-0595 CVE-2008-3834 CVE-2008-4311 CVE-2009-1189 CVE-2010-4352 CVE-2011-2200 +12 more Upstream summary: D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address […]
🟡 Medium ⏱ 10–30 min Last verified: 13 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0645 CVE-2005-2964 CVE-2005-2972 CVE-2006-4513 CVE-2017-17529 Upstream summary: Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1628 CVE-2015-5186 Upstream summary: Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a […]
🟡 Medium ⏱ 10–30 min Last verified: 13 September 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4575 CVE-2022-41853 CVE-2023-1183 Upstream summary: HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database […]
🟠 High ⏱ 15–60 min Last verified: 13 September 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-43280 CVE-2022-43281 CVE-2022-43282 CVE-2022-43283 CVE-2023-27115 CVE-2023-27116 CVE-2023-27117 CVE-2023-27119 +12 more Upstream summary: wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-13797 Upstream summary: The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than […]
