🟢 Low ⏱ 5–15 min Last verified: 1 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13696 Upstream summary: An issue was discovered in LinuxTV xawtv before 3.107. The function dev_open() in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of […]
🟠 High ⏱ 15–60 min Last verified: 1 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-2946 CVE-2012-0210 CVE-2012-0211 CVE-2012-0212 CVE-2012-2240 CVE-2012-2241 CVE-2012-2242 CVE-2012-3500 +9 more Upstream summary: Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 1 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8614 Upstream summary: Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 1 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-5694 CVE-2015-5695 Upstream summary: Designate does not enforce the DNS protocol limit concerning record set sizes Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 1 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-27811 Upstream summary: GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 1 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2944 Upstream summary: Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or […]
🟢 Low ⏱ 5–15 min Last verified: 31 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4802 Upstream summary: Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary files. NOTE: the raw source referenced […]
🟠 High ⏱ 15–60 min Last verified: 31 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4542 CVE-2007-4629 CVE-2009-0839 CVE-2009-0840 CVE-2009-0841 CVE-2009-0842 CVE-2009-0843 CVE-2009-1176 +12 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web […]
🟢 Low ⏱ 5–15 min Last verified: 31 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-22846 Upstream summary: The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query. […]
🟢 Low ⏱ 5–15 min Last verified: 30 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
