🟢 Low ⏱ 5–15 min Last verified: 29 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0108 Upstream summary: Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service (crash) via a RADIUS_REPLY_MESSAGE with a RADIUS attribute length […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0 📖 ~4 min read • Source: Alpine secdb entry — opus 0 Related CVEs: CVE-2022-25345 Upstream summary: Alpine main repository for vedge ships opus 0 which addresses CVE-2022-25345. Table of contents Symptom & Impact Environment […]
Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up configure openvas vulnerability scanner on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step carefully and […]
🟠 High ⏱ 15–60 min Last verified: 29 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6535 CVE-2019-15142 CVE-2019-15143 CVE-2019-15144 CVE-2019-15145 CVE-2019-18804 CVE-2021-32490 CVE-2021-32491 +7 more Upstream summary: DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 29 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1853 Upstream summary: Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database. Table […]
🟠 High ⏱ 15–60 min Last verified: 29 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-1999-0199 CVE-2002-0391 CVE-2002-0651 CVE-2002-0684 CVE-2002-1146 CVE-2003-0028 CVE-2003-0689 CVE-2004-0968 +12 more Upstream summary: manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2761-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29509 CVE-2022-24790 CVE-2022-23634 CVE-2021-41136 Upstream summary: Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix […]
🟢 Low ⏱ 10–30 min Last verified: 28 October 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2005-3289, IBM Support Bulletin CVE: CVE-2005-3289 NVD summary: LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system […]
🟢 Low ⏱ 5–15 min Last verified: 28 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23364 Upstream summary: The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 28 October 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-dparse — REDoS vulnerability Related CVEs: CVE-2022-39280 Upstream summary: yeisonvargasf reports: dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is […]
