🟢 Low ⏱ 5–15 min Last verified: 10 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-23318 CVE-2022-23319 Upstream summary: A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound […]
🟠 High ⏱ 15–60 min Last verified: 10 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8981 CVE-2017-5852 CVE-2017-5853 CVE-2017-5854 CVE-2017-5855 CVE-2017-5886 CVE-2017-6840 CVE-2017-6841 +12 more Upstream summary: Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified […]
🟡 Medium ⏱ 10–30 min Last verified: 9 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-1329 CVE-2011-1755 CVE-2012-3525 CVE-2015-2058 CVE-2017-10807 CVE-2017-18226 Upstream summary: The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") […]
🟠 High ⏱ 5–30 min Last verified: 9 August 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 9 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1287 CVE-2018-1297 CVE-2019-0187 Upstream summary: In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could […]
🟠 High ⏱ 15–60 min Last verified: 9 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0178 CVE-2013-0180 CVE-2013-7458 CVE-2015-4335 CVE-2015-8080 CVE-2016-10517 CVE-2016-2121 CVE-2016-8339 +12 more Upstream summary: Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm. Table of contents Symptom & […]
🟡 Medium ⏱ 5–30 min Last verified: 8 August 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 8 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13124 CVE-2021-29488 CVE-2023-34237 Upstream summary: SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python […]
🟢 Low ⏱ 5–15 min Last verified: 8 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-21035 Upstream summary: In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it […]
🟠 High ⏱ 15–60 min Last verified: 8 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 CVE-2019-20387 CVE-2021-3200 CVE-2021-33928 CVE-2021-33929 CVE-2021-33930 +4 more Upstream summary: There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 […]
