🟢 Low ⏱ 5–15 min Last verified: 19 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000637 Upstream summary: zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0048 CVE-2003-0069 CVE-2004-1008 CVE-2004-1440 CVE-2005-0467 CVE-2006-7162 CVE-2011-4607 CVE-2013-4206 +12 more Upstream summary: PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15586 CVE-2020-16845 CVE-2020-24553 CVE-2020-28362 CVE-2020-28366 CVE-2020-28367 CVE-2020-29509 CVE-2020-29510 +12 more Upstream summary: Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as […]
🔴 Critical ⏱ 5–30 min Last verified: 18 April 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3927 Upstream summary: genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5207 Upstream summary: guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 18 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6550 CVE-2013-1808 CVE-2014-1869 Upstream summary: Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via "the clipText returned from […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-16848 CVE-2018-16849 CVE-2019-3866 Upstream summary: A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9970 Upstream summary: jasypt before 1.9.2 allows a timing attack against the password hash comparison. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1090 CVE-2010-1192 CVE-2010-1194 CVE-2019-19977 Upstream summary: Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a […]
