🟠 High ⏱ 15–60 min Last verified: 9 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-9099 CVE-2015-9100 CVE-2015-9101 CVE-2017-11720 CVE-2017-13712 CVE-2017-15018 CVE-2017-15019 CVE-2017-15045 +7 more Upstream summary: The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a […]
🟠 High ⏱ 15–60 min Last verified: 9 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-6692 CVE-2006-6693 CVE-2007-0640 CVE-2007-6210 CVE-2008-1353 CVE-2009-4498 CVE-2009-4499 CVE-2009-4500 +12 more Upstream summary: Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service […]
🟠 High ⏱ 15–60 min Last verified: 8 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6825 CVE-2015-8979 CVE-2019-1010228 CVE-2020-36855 CVE-2021-41687 CVE-2021-41688 CVE-2021-41689 CVE-2021-41690 +12 more Upstream summary: (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-2582 Upstream summary: The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4016 CVE-2010-0300 CVE-2013-0238 Upstream summary: Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-37788 Upstream summary: goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors. Table of contents Symptom & […]
🔴 Critical ⏱ 5–30 min Last verified: 7 July 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8792 Upstream summary: The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2305 Upstream summary: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1471 CVE-2002-1765 CVE-2003-0128 CVE-2003-0129 CVE-2003-0130 CVE-2003-0133 CVE-2003-0296 CVE-2005-0102 +12 more Upstream summary: The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes […]
