🟡 Medium ⏱ 10–30 min Last verified: 5 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10127 CVE-2016-10149 CVE-2017-1000246 CVE-2017-1000433 CVE-2020-5390 CVE-2021-21238 CVE-2021-21239 Upstream summary: PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response. […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1724 Upstream summary: Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service (application […]
🟡 Medium ⏱ 10–30 min Last verified: 5 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1930 CVE-2021-31870 CVE-2021-31871 CVE-2021-31872 CVE-2021-31873 Upstream summary: In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a […]
In this guide, we’ll configure Nginx to detect and redirect customers to a subdomain that points to a more geographically appropriate server.
🟢 Low ⏱ 5–15 min Last verified: 4 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-4472 Upstream summary: The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files […]
🟢 Low ⏱ 5–15 min Last verified: 4 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0359 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message title […]
🟢 Low ⏱ 5–15 min Last verified: 4 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0979 Upstream summary: The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, which allows local […]
🟢 Low ⏱ 5–15 min Last verified: 3 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0020 Upstream summary: Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 3 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-8754 Upstream summary: The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data […]
🟢 Low ⏱ 5–15 min Last verified: 3 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0658 Upstream summary: OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack. Table of […]
