🟢 Low ⏱ 5–15 min Last verified: 1 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16137 CVE-2017-20165 Upstream summary: The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around […]
🟠 High ⏱ 15–60 min Last verified: 1 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-14072 CVE-2018-14073 CVE-2018-19756 CVE-2018-19757 CVE-2018-19759 CVE-2018-19761 CVE-2018-19762 CVE-2018-19763 +12 more Upstream summary: libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1132 Upstream summary: The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell […]
🟠 High ⏱ 15–60 min Last verified: 30 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11311 CVE-2018-10017 CVE-2018-11710 CVE-2018-20860 CVE-2018-20861 CVE-2018-6611 CVE-2019-14380 CVE-2019-14381 +3 more Upstream summary: soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-16491 CVE-2018-16492 Upstream summary: A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-14093 CVE-2021-3181 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟢 Low ⏱ 5–15 min Last verified: 29 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4908 Upstream summary: maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 29 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1845 Upstream summary: The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which […]
🟢 Low ⏱ 5–15 min Last verified: 29 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0407 Upstream summary: Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 29 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-2347 Upstream summary: Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive. Table of […]
