🟠 High ⏱ 15–60 min Last verified: 5 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-1557 CVE-2004-0796 CVE-2005-1266 CVE-2005-3351 CVE-2006-2447 CVE-2007-0451 CVE-2007-2873 CVE-2017-15705 +7 more Upstream summary: Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows […]
🟠 High ⏱ 5–30 min Last verified: 5 July 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-5783 CVE-2012-6153 CVE-2014-3577 CVE-2015-5262 Upstream summary: Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-11727 CVE-2018-11728 CVE-2018-11729 CVE-2018-11730 CVE-2018-11731 Upstream summary: The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-1103 Upstream summary: emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0465 Upstream summary: xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
🟠 High ⏱ 15–60 min Last verified: 4 July 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2141 CVE-2016-3995 CVE-2016-7420 CVE-2016-9939 CVE-2017-9434 CVE-2019-14318 CVE-2021-40530 CVE-2022-48570 +4 more Upstream summary: The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7729 CVE-2022-0436 CVE-2022-1537 Upstream summary: The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-18397 CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 Upstream summary: A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of […]
