🟠 High ⏱ 15–60 min Last verified: 1 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0391 CVE-2002-1235 CVE-2002-2443 CVE-2003-0028 CVE-2003-0058 CVE-2003-0059 CVE-2003-0060 CVE-2003-0072 +12 more Upstream summary: Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3910 Upstream summary: dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28589 Upstream summary: An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7798 Upstream summary: The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7545 CVE-2018-1063 Upstream summary: SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9638 CVE-2014-9639 Upstream summary: oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number […]
🟠 High ⏱ 5–30 min Last verified: 29 April 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 29 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-4244 CVE-2006-4731 CVE-2006-4798 CVE-2006-5872 CVE-2007-0667 CVE-2007-1329 CVE-2007-1436 CVE-2007-1437 +12 more Upstream summary: SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches […]
🟡 Medium ⏱ 10–30 min Last verified: 29 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4261 CVE-2014-5247 CVE-2015-7944 CVE-2015-7945 Upstream summary: Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2.0.4, and 2.1.0 before 2.1.0~rc2 allow (1) […]
🟡 Medium ⏱ 10–30 min Last verified: 28 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0021 CVE-2003-0068 CVE-2003-0382 CVE-2008-1692 CVE-2021-33477 Upstream summary: The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence […]
