🟡 Medium ⏱ 10–30 min Last verified: 22 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1986 CVE-2016-7947 CVE-2016-7948 Upstream summary: Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟢 Low ⏱ 5–15 min Last verified: 22 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ifmail — unsafe set-user-ID application Upstream summary: Niels Heinen reports that ifmail allows one to specify a configuration file. Since ifmail runs set-user-ID `news', this may allow a local attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.4.0-r0 📖 ~4 min read • Source: Alpine secdb entry — fish 3.4.0-r0 Related CVEs: CVE-2022-20001 Upstream summary: Alpine main repository for vedge ships fish 3.4.0-r0 which addresses CVE-2022-20001. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 22 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5019-1 Related CVEs: CVE-2021-1093 CVE-2021-1094 CVE-2021-1095 CVE-2021-1076 CVE-2021-1077 Upstream summary: It was discovered that an assert() could be triggered in the NVIDIA graphics drivers. A local attacker could use this […]
🟡 Medium ⏱ 10–30 min Last verified: 22 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5969-1 Related CVEs: CVE-2021-45909 CVE-2021-45910 CVE-2021-45911 Upstream summary: It was discovered that gif2apng contained multiple heap-base overflows. An attacker could potentially exploit this to cause a denial of service (system […]
🟠 High ⏱ 15–60 min Last verified: 22 February 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-7500 CVE-2021-3521 CVE-2021-3421 CVE-2021-20266 CVE-2021-20271 Upstream summary: It was found that rpm did not properly handle RPM installations when a destination path was a symbolic […]
🟠 High ⏱ 15–60 min Last verified: 22 February 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-0288 Related CVEs: CVE-2021-23964 CVE-2021-23953 CVE-2021-23954 CVE-2021-23960 CVE-2020-26976 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 30–90 min Last verified: 22 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2005-2237, IBM PSIRT advisory page CVE: CVE-2005-2237 NVD summary: Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code […]
🟠 High ⏱ 15–60 min Last verified: 22 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Related CVEs: CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 CVE-2013-2203 +12 more Upstream summary: wordpress developers reports: This security and maintenance release features 1 bug fix […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14697-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-23476 Upstream summary: Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the […]
