🟡 Medium ⏱ 10–30 min Last verified: 5 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0916 CVE-2010-2800 CVE-2010-2801 CVE-2014-9556 CVE-2015-2060 CVE-2018-18584 Upstream summary: Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-3668 Upstream summary: Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows […]
🟡 Medium ⏱ 10–30 min Last verified: 5 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0667 CVE-2005-0926 CVE-2005-3354 CVE-2006-2920 CVE-2007-1267 CVE-2007-2958 CVE-2017-17517 CVE-2021-37746 Upstream summary: Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code […]
🟡 Medium ⏱ 10–30 min Last verified: 5 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-3377 CVE-2007-3409 CVE-2007-6341 CVE-2008-1447 Upstream summary: Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the […]
🟡 Medium ⏱ 10–30 min Last verified: 5 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-0370 Related CVEs: CVE-2021-4122 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-9128 Related CVEs: CVE-2021-3177 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 5 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4162 Related CVEs: CVE-2019-18874 CVE-2020-28493 CVE-2021-20095 CVE-2021-23336 CVE-2021-28957 CVE-2021-29921 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-20107 CVE-2019-20907 CVE-2020-10735 CVE-2020-26116 CVE-2020-27619 CVE-2020-29651 CVE-2021-23336 CVE-2021-28861 +12 more Upstream summary: In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1725 Related CVEs: CVE-2021-33582 Upstream summary: A flaw was found in cyrus-imapd. A bad string hashing algorithm used in internal hash tables allows user inputs to be stored in predictable […]
