Debian

🟡 Medium   ⏱ 10–30 min  Last verified: 13 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-12096 CVE-2018-12097 CVE-2018-12098 CVE-2019-17263 CVE-2019-17264 CVE-2019-17401 Upstream summary: The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-1096 CVE-2018-10860 Upstream summary: Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1653 Upstream summary: Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20024 Upstream summary: LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client code that can result remote code execution Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-7322 Upstream summary: usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a user name in /etc/users.oath, […]

🟠 High   ⏱ 15–60 min  Last verified: 12 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0468 CVE-2003-0540 CVE-2005-0337 CVE-2008-2936 CVE-2008-2937 CVE-2008-3889 CVE-2009-2939 CVE-2011-0411  +3 more Upstream summary: Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1983 CVE-2016-7944 Upstream summary: Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related […]

🟠 High   ⏱ 15–60 min  Last verified: 11 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-2273 CVE-2010-2274 CVE-2010-2275 CVE-2018-1000665 CVE-2018-15494 CVE-2018-6561 CVE-2019-10785 CVE-2020-4051  +3 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, […]