🟢 Low ⏱ 5–15 min Last verified: 14 December 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-40347 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 14 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-1999-1572 CVE-2005-1111 CVE-2005-1229 CVE-2005-4268 CVE-2007-4476 CVE-2010-0624 CVE-2014-9112 CVE-2015-1197 +4 more Upstream summary: cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask […]
🟡 Medium ⏱ 10–30 min Last verified: 14 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3555 CVE-2017-15698 CVE-2018-8019 CVE-2018-8020 Upstream summary: The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in […]
🟢 Low ⏱ 5–15 min Last verified: 13 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0465 Upstream summary: xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from […]
🟠 High ⏱ 15–60 min Last verified: 13 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15888 CVE-2020-15889 CVE-2020-15945 CVE-2020-24342 CVE-2020-24369 CVE-2020-24370 CVE-2020-24371 CVE-2021-43519 +5 more Upstream summary: Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based […]
🟠 High ⏱ 15–60 min Last verified: 13 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2205 CVE-2011-2531 CVE-2011-2532 CVE-2014-2744 CVE-2014-2745 CVE-2016-0756 CVE-2016-1231 CVE-2016-1232 +12 more Upstream summary: Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to […]
🟠 High ⏱ 15–60 min Last verified: 13 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1634 CVE-2010-2089 CVE-2010-3492 CVE-2011-1521 CVE-2011-3389 CVE-2011-4940 CVE-2011-4944 CVE-2012-0845 +12 more Upstream summary: Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 […]
🟡 Medium ⏱ 10–30 min Last verified: 12 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-21722 CVE-2020-21723 CVE-2020-21724 Upstream summary: Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 12 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1990 CVE-2013-1999 CVE-2016-7953 Upstream summary: Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟢 Low ⏱ 5–15 min Last verified: 12 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0390 Upstream summary: Multiple buffer overflows in Options Parsing Tool (OPT) shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary […]
