🟢 Low ⏱ 5–15 min Last verified: 13 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-31212 CVE-2022-31213 Upstream summary: An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer […]
🟡 Medium ⏱ 10–30 min Last verified: 12 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9906 CVE-2015-8949 CVE-2016-1246 CVE-2016-1249 CVE-2016-1251 CVE-2017-10788 CVE-2017-10789 Upstream summary: Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute […]
🟡 Medium ⏱ 10–30 min Last verified: 12 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2013 CVE-2013-2104 CVE-2013-2166 CVE-2013-2167 CVE-2014-0105 CVE-2014-7144 CVE-2015-1852 Upstream summary: The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the –password argument, which allows local users […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13959 Upstream summary: The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-18641 Upstream summary: In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17513 Upstream summary: TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17512 Upstream summary: sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct […]
🟠 High ⏱ 15–60 min Last verified: 11 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0358 CVE-2003-0359 CVE-2019-19905 CVE-2020-5209 CVE-2020-5210 CVE-2020-5211 CVE-2020-5212 CVE-2020-5213 +4 more Upstream summary: Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7608 Upstream summary: yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-6098 Upstream summary: An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A specially crafted Diameter request can trigger a memory corruption resulting […]
