🟢 Low ⏱ 5–15 min Last verified: 4 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3627 Upstream summary: The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric […]
🟠 High ⏱ 15–60 min Last verified: 4 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9351 CVE-2016-9400 CVE-2018-18541 CVE-2019-10877 CVE-2019-10878 CVE-2019-10879 CVE-2020-12066 CVE-2021-43518 +2 more Upstream summary: engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-5216 CVE-2020-5217 Upstream summary: In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input was passed into […]
🟡 Medium ⏱ 10–30 min Last verified: 3 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0129 CVE-2005-0130 CVE-2005-0131 CVE-2007-4400 CVE-2009-5050 CVE-2014-8483 CVE-2017-15923 Upstream summary: The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name […]
🟡 Medium ⏱ 10–30 min Last verified: 3 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4392 CVE-2009-0858 CVE-2012-1191 Upstream summary: dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 3 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8792 Upstream summary: The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-42522 Upstream summary: There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'g_free()' […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7298 Upstream summary: query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% […]
🟠 High ⏱ 15–60 min Last verified: 2 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-6260 CVE-2020-5963 CVE-2020-5967 CVE-2021-1056 CVE-2021-1076 CVE-2021-1093 CVE-2021-1094 CVE-2021-1095 +12 more Upstream summary: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the […]
🟡 Medium ⏱ 10–30 min Last verified: 1 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9957 CVE-2016-9958 CVE-2016-9959 CVE-2016-9960 CVE-2016-9961 CVE-2017-17446 Upstream summary: Stack-based buffer overflow in game-music-emu before 0.6.1. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
