🟡 Medium ⏱ 10–30 min Last verified: 15 July 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1678 CVE-2011-2724 CVE-2011-3585 CVE-2012-1586 CVE-2014-2830 CVE-2020-14342 CVE-2021-20208 CVE-2022-27239 +1 more Upstream summary: smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab […]
🟢 Low ⏱ 5–15 min Last verified: 15 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38711 Upstream summary: In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 15 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0015 CVE-2008-0932 Upstream summary: diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 15 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0395 CVE-2005-0016 Upstream summary: The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users […]
🟢 Low ⏱ 5–15 min Last verified: 15 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-29529 Upstream summary: HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific constructions of […]
🟡 Medium ⏱ 10–30 min Last verified: 15 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-3257 CVE-2009-0547 CVE-2009-0582 CVE-2009-0587 CVE-2016-10727 CVE-2018-12422 CVE-2020-14928 CVE-2020-16117 +1 more Upstream summary: Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to […]
🟠 High ⏱ 15–60 min Last verified: 15 July 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1028 CVE-2011-4124 CVE-2011-4125 CVE-2011-4126 CVE-2016-10187 CVE-2018-7889 CVE-2021-44686 CVE-2023-46303 +12 more Upstream summary: Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla […]
🔴 Critical ⏱ 5–30 min Last verified: 15 July 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4776 CVE-2013-4488 CVE-2013-6487 CVE-2014-3775 Upstream summary: libgadu before 1.8.2 allows remote servers to cause a denial of service (crash) via a contact description with a large length, which […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-2167 CVE-2015-8106 Upstream summary: Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly […]
