🟡 Medium ⏱ 10–30 min Last verified: 24 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14465 CVE-2019-14523 CVE-2019-14524 CVE-2021-32419 Upstream summary: fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 23 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1476 CVE-2007-6613 CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 Upstream summary: Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute […]
🔴 Critical ⏱ 5–30 min Last verified: 23 August 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 23 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0906 CVE-2002-1165 CVE-2002-1337 CVE-2002-1827 CVE-2002-2261 CVE-2003-0161 CVE-2003-0308 CVE-2003-0681 +11 more Upstream summary: Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query […]
🟢 Low ⏱ 5–15 min Last verified: 23 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0846 Upstream summary: django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 23 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15108 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 Upstream summary: spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access […]
🟢 Low ⏱ 5–15 min Last verified: 22 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
🟠 High ⏱ 15–60 min Last verified: 22 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1807 CVE-2007-3215 CVE-2015-8476 CVE-2016-10033 CVE-2017-11503 CVE-2017-5223 CVE-2018-19296 CVE-2020-13625 +2 more Upstream summary: The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 21 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-1046 CVE-2015-0841 Upstream summary: server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a string containing a large number […]
🟢 Low ⏱ 5–15 min Last verified: 21 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5146 Upstream summary: add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file. Table of contents Symptom & […]
