🟢 Low ⏱ 5–15 min Last verified: 18 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-0735 CVE-2013-1049 Upstream summary: Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in […]
🟠 High ⏱ 15–60 min Last verified: 18 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0885 CVE-2003-1294 CVE-2003-1295 CVE-2004-2655 CVE-2007-1859 CVE-2007-5585 CVE-2011-2187 CVE-2015-8025 +2 more Upstream summary: Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create […]
🟢 Low ⏱ 5–15 min Last verified: 18 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-0357 Upstream summary: A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption. Table of […]
🟠 High ⏱ 15–60 min Last verified: 18 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4195 CVE-2007-4196 CVE-2007-4197 CVE-2007-4198 CVE-2007-4199 CVE-2007-4200 CVE-2012-5619 CVE-2017-13755 +12 more Upstream summary: Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0252 CVE-2004-0154 CVE-2004-1014 CVE-2008-4552 CVE-2011-1749 CVE-2011-2500 CVE-2013-1923 CVE-2019-3689 +1 more Upstream summary: Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2139 CVE-2012-2140 CVE-2015-9097 Upstream summary: Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-3180 Upstream summary: Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7323 CVE-2014-1927 CVE-2014-1928 CVE-2014-1929 CVE-2019-6690 Upstream summary: python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21261 CVE-2021-21381 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4616 Upstream summary: Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, […]
