🟡 Medium ⏱ 10–30 min Last verified: 3 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1755 CVE-2016-6173 CVE-2019-13207 CVE-2020-28935 Upstream summary: Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 3 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0251 Upstream summary: Stack-based buffer overflow in llogincircuit.cc in latd 1.25 through 1.30 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute […]
🔴 Critical ⏱ 5–30 min Last verified: 2 August 2022 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🔴 Critical ⏱ 5–30 min Last verified: 2 August 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 2 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-29361 CVE-2020-29362 CVE-2020-29363 Upstream summary: An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library […]
🟢 Low ⏱ 5–15 min Last verified: 2 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-18874 Upstream summary: psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system […]
🟢 Low ⏱ 5–15 min Last verified: 2 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0564 Upstream summary: Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the […]
🟠 High ⏱ 15–60 min Last verified: 2 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2235 CVE-2008-3972 CVE-2009-0368 CVE-2009-1603 CVE-2010-4523 CVE-2018-16391 CVE-2018-16392 CVE-2018-16393 +12 more Upstream summary: OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-3803 Upstream summary: nth-check is vulnerable to Inefficient Regular Expression Complexity Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4683 CVE-2006-0512 Upstream summary: PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary […]
