🟢 Low ⏱ 5–15 min Last verified: 9 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0173 CVE-2007-2654 Upstream summary: xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3971 Upstream summary: Heap-based buffer overflow in the open_man_file function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8378 Upstream summary: In KeePassX before 0.4.4, a cleartext copy of password data is created upon a cancel of an XML export action. This allows context-dependent attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6303 Upstream summary: Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1270 CVE-2008-4982 CVE-2017-7480 Upstream summary: The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users […]
Fail2ban is a service that can be run on your server to dynamically block clients that repeatedly fail to authenticate correctly with your services . This can help mitigate the affect of brute force attacks and illegitimate users of your services. In this guide, we’ll demonstrate how to install and configure fail2ban to protect SSH on a Debian 11 server.
🟢 Low ⏱ 5–15 min Last verified: 7 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3085 Upstream summary: The network-play implementation in Mednafen before 0.8.D might allow remote servers to execute arbitrary code via unspecified vectors, related to "stack manipulation" issues. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2532 Upstream summary: lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button […]
🟡 Medium ⏱ 10–30 min Last verified: 7 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0705 CVE-2003-0706 CVE-2004-0458 Upstream summary: Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-3758 Upstream summary: Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to […]
