🟢 Low ⏱ 5–15 min Last verified: 25 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0226 CVE-2015-0227 Upstream summary: Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes […]
🟡 Medium ⏱ 5–30 min Last verified: 24 October 2021 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 24 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28241 Upstream summary: libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 24 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7787 Upstream summary: A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super […]
🟡 Medium ⏱ 10–30 min Last verified: 23 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2300 CVE-2012-0105 CVE-2014-0405 CVE-2014-2441 CVE-2014-6540 CVE-2018-2693 Upstream summary: Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, […]
🟡 Medium ⏱ 10–30 min Last verified: 23 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0486 CVE-2016-6171 CVE-2017-11104 Upstream summary: Knot DNS before 1.5.2 allows remote attackers to cause a denial of service (application crash) via a crafted DNS message. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 23 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5935 CVE-2007-5936 CVE-2007-5937 CVE-2007-5940 CVE-2009-1284 CVE-2010-0739 CVE-2010-0827 CVE-2010-1440 +12 more Upstream summary: Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted […]
Mosh takes all the security benefits of SSH and builds upon it a greater tolerance to poor network conditions and roaming connections. It also increases responsiveness and lowers bandwidth usage by only communicating state changes to the currently visible screen region rather than transmitting complete buffers.
🟡 Medium ⏱ 10–30 min Last verified: 22 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1563 CVE-2003-0740 CVE-2008-2420 CVE-2011-2940 CVE-2013-1762 CVE-2015-3644 CVE-2021-20230 Upstream summary: stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions […]
🟡 Medium ⏱ 10–30 min Last verified: 22 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-2174 CVE-2020-12695 CVE-2021-33516 Upstream summary: GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message. Table of […]
