🟢 Low ⏱ 5–15 min Last verified: 22 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4972 Upstream summary: mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo##### temporary file. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 22 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-2207 CVE-2002-2227 Upstream summary: Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret. […]
🟡 Medium ⏱ 10–30 min Last verified: 22 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1832 CVE-2018-1313 CVE-2022-46337 Upstream summary: XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6441 CVE-2015-1331 CVE-2015-1334 CVE-2015-1335 CVE-2016-10124 CVE-2016-8649 CVE-2017-18641 CVE-2017-5985 +4 more Upstream summary: The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows […]
🟢 Low ⏱ 5–15 min Last verified: 21 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
🟡 Medium ⏱ 10–30 min Last verified: 21 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-25023 CVE-2019-15551 CVE-2019-15554 CVE-2021-25900 Upstream summary: An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including […]
🟢 Low ⏱ 5–15 min Last verified: 21 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-4607 Upstream summary: Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code […]
🟡 Medium ⏱ 10–30 min Last verified: 21 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14464 CVE-2019-14496 CVE-2019-14497 CVE-2020-15569 CVE-2022-34927 Upstream summary: XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow. Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 20 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-0165 CVE-2008-0169 CVE-2008-0808 CVE-2008-0809 CVE-2009-2944 CVE-2010-1195 CVE-2010-1673 CVE-2011-0428 +10 more Upstream summary: Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, […]
🟢 Low ⏱ 5–15 min Last verified: 20 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6889 Upstream summary: GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the –lint option. Table of contents Symptom & […]
