🟢 Low ⏱ 5–15 min Last verified: 30 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-3368 Upstream summary: Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application […]
🟡 Medium ⏱ 5–30 min Last verified: 29 August 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 29 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-26291 Upstream summary: Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential […]
🟡 Medium ⏱ 10–30 min Last verified: 29 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0240 CVE-2014-0242 CVE-2014-8583 CVE-2022-2255 Upstream summary: The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when […]
🟢 Low ⏱ 5–15 min Last verified: 29 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-5461 Upstream summary: Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) […]
🟠 High ⏱ 15–60 min Last verified: 29 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0876 CVE-2005-0877 CVE-2006-2017 CVE-2008-1447 CVE-2008-3214 CVE-2008-3350 CVE-2009-2957 CVE-2009-2958 +12 more Upstream summary: Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the […]
🟠 High ⏱ 5–30 min Last verified: 28 August 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 28 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2958 CVE-2020-25031 Upstream summary: Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly […]
🟠 High ⏱ 15–60 min Last verified: 28 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7075 CVE-2017-1000056 CVE-2017-1002101 CVE-2017-1002102 CVE-2018-1002100 CVE-2018-1002102 CVE-2018-1002105 CVE-2019-1002100 +12 more Upstream summary: It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 […]
🟠 High ⏱ 15–60 min Last verified: 28 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0380 CVE-2002-1350 CVE-2003-0093 CVE-2003-0108 CVE-2003-0145 CVE-2003-0989 CVE-2003-1029 CVE-2004-0055 +12 more Upstream summary: Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service […]
