🟢 Low ⏱ 5–15 min Last verified: 11 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-5155 CVE-2018-17942 Upstream summary: In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of […]
🟢 Low ⏱ 5–15 min Last verified: 11 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-45972 Upstream summary: The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. […]
🟡 Medium ⏱ 10–30 min Last verified: 11 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-25023 CVE-2019-15551 CVE-2019-15554 CVE-2021-25900 Upstream summary: An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including […]
🟡 Medium ⏱ 5–30 min Last verified: 10 September 2023 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🔴 Critical ⏱ 5–30 min Last verified: 10 September 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 10 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0048 CVE-2003-0069 CVE-2004-1008 CVE-2004-1440 CVE-2005-0467 CVE-2006-7162 CVE-2011-4607 CVE-2013-4206 +12 more Upstream summary: PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could […]
🟢 Low ⏱ 5–15 min Last verified: 10 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-29264 Upstream summary: An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 10 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-2810 Upstream summary: An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. […]
🟡 Medium ⏱ 10–30 min Last verified: 10 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1686 CVE-2009-0314 CVE-2017-14108 Upstream summary: Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11610 CVE-2019-12105 Upstream summary: The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary […]
