🟡 Medium ⏱ 10–30 min Last verified: 12 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-7435 CVE-2017-7436 CVE-2017-9269 CVE-2017-9271 CVE-2018-7685 CVE-2019-18900 Upstream summary: In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead […]
🟢 Low ⏱ 5–15 min Last verified: 12 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2120 Upstream summary: latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files […]
🟡 Medium ⏱ 10–30 min Last verified: 12 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0042 CVE-2004-2259 CVE-2011-0762 CVE-2011-2189 CVE-2015-1419 CVE-2021-3618 Upstream summary: vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 12 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28241 Upstream summary: libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 5–30 min Last verified: 12 August 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 12 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1757 CVE-2010-0012 CVE-2010-0748 CVE-2010-0749 CVE-2010-1853 CVE-2012-4037 CVE-2012-6129 CVE-2014-4909 +2 more Upstream summary: Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote […]
🟠 High ⏱ 5–30 min Last verified: 11 August 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 11 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0038 CVE-2005-0428 CVE-2005-2301 CVE-2005-2302 CVE-2006-4251 CVE-2008-3337 CVE-2008-5277 CVE-2012-0206 +12 more Upstream summary: The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of […]
🟠 High ⏱ 15–60 min Last verified: 11 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10573 CVE-2020-10574 CVE-2020-10575 CVE-2020-10576 CVE-2020-10577 CVE-2020-13898 CVE-2020-13899 CVE-2020-13900 +5 more Upstream summary: An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing […]
🟡 Medium ⏱ 10–30 min Last verified: 10 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0217 CVE-2011-2516 CVE-2013-2153 CVE-2013-2154 CVE-2013-2155 CVE-2013-2156 CVE-2013-2210 Upstream summary: The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the […]
