🟡 Medium ⏱ 10–30 min Last verified: 11 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1349 CVE-2009-0796 CVE-2011-2767 Upstream summary: PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which […]
🟡 Medium ⏱ 10–30 min Last verified: 10 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2246 CVE-2011-0702 CVE-2011-1031 CVE-2017-7875 Upstream summary: feh before 1.8, when the –wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a […]
🟡 Medium ⏱ 10–30 min Last verified: 10 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4754 CVE-2007-4755 CVE-2009-3637 CVE-2010-3439 Upstream summary: Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21772 Upstream summary: A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7694 CVE-2020-7695 Upstream summary: This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8400 CVE-2018-16789 Upstream summary: The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks […]
🟠 High ⏱ 15–60 min Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000871 CVE-2019-8937 CVE-2019-9084 CVE-2019-9085 CVE-2019-9086 CVE-2019-9087 CVE-2021-37832 CVE-2021-37833 +12 more Upstream summary: HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in "id_utente_mod" parameter in […]
🟡 Medium ⏱ 10–30 min Last verified: 8 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4136 CVE-2014-1831 CVE-2015-7519 CVE-2016-10345 CVE-2017-16355 CVE-2018-12029 Upstream summary: ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership […]
🟠 High ⏱ 15–60 min Last verified: 8 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-21594 CVE-2020-21595 CVE-2020-21596 CVE-2020-21597 CVE-2020-21598 CVE-2020-21599 CVE-2020-21600 CVE-2020-21601 +12 more Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟠 High ⏱ 5–30 min Last verified: 7 January 2023 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
