Skip to contentDebian Linux vulnerabilities
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel...CVE-2019-9956Fix available8.8 High
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...CVE-2019-9948Fix availableEPSS 11.8%9.1 Critical
- gnu bash, canonical ubuntu linux, debian linux +3 more +5 morerbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus...CVE-2019-9924Fix available7.8 High
- artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreIt was found that the forceput operator could be extracted from the DefineResource method in...CVE-2019-3838Fix available7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +8 more +10 moreIt was found that the superexec operator was available in the internal dictionary in ghostscript...CVE-2019-3835Fix available7.3 High
- putty, debian linux, fedoraproject fedora +2 more +4 morePotential recycling of random numbers used in cryptography exists within PuTTY before 0.71.CVE-2019-9898Fix available9.8 Critical
- putty, debian linux, fedoraproject fedora +2 more +4 moreMultiple denial-of-service attacks that can be triggered by writing to the terminal exist in...CVE-2019-9897Fix available7.5 High
- putty, debian linux, fedoraproject fedora +2 more +4 moreA remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before...CVE-2019-9894Fix available7.5 High
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack...CVE-2019-9903Fix available6.5 Medium
- drupal, drupal core, debian linux +1 more +3 moreDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004CVE-2019-6341Fix availableEPSS 12.2%5.4 Medium
- libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 moreA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...CVE-2019-3863Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way...CVE-2019-3862Fix available7.3 High
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...CVE-2019-3861Fix available5.0 Medium
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...CVE-2019-3860Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require...CVE-2019-3859Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP...CVE-2019-3858Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3857Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...CVE-2019-3856Fix available7.5 High
- libssh2, apple xcode, debian linux +14 more +16 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3855Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5798Fix available6.5 Medium
- bestpractical request tracker, canonical ubuntu linux, debian linux +1 more +3 moreThe email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of...CVE-2018-18898Fix available7.5 High
- rubyonrails rails, debian linux, fedoraproject fedora +1 more +3 moreUse of Insufficiently Random Values in Railties Allows Remote Code ExecutionCVE-2019-5420Public exploitFix availableEPSS 89.3%9.8 Critical
- debian linux, fedoraproject fedora, opensuse leap +5 more +7 morePath Traversal in Action ViewCVE-2019-5418In KEVPublic exploitFix availableEPSS 98.5%7.5 High
- rubyonrails rails, debian linux, fedoraproject fedora +4 more +6 moreDenial of Service Vulnerability in Action ViewCVE-2019-5419Fix available7.5 High
- gpsd project gpsd, microjson project microjson, debian linux +1 more +3 moregpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a...CVE-2018-17937Fix available8.8 High
- golang go, debian linux, fedoraproject fedora +2 more +4 moreAn issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker...CVE-2019-9741Fix available6.1 Medium
- [unknown] libsndfile, canonical ubuntu linux, debian linux +2 moreIt was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a...CVE-2019-3832Fix available3.3 Low
- openstack neutron, redhat openstack, debian linux +2 moreOpenStack Neutron's unsupported dport option prevents applying security groupsCVE-2019-9735Fix available6.5 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreIn FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the...CVE-2019-9718Fix available6.5 Medium
- debian cron, linux +1 moreVixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service ...CVE-2019-9706Fix available5.5 Medium
- cron project cron, debian linux, fedoraproject fedora +2 moreVixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service ...CVE-2019-9705Fix available5.5 Medium
- cron project cron, debian linux, fedoraproject fedora +2 moreVixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service ...CVE-2019-9704Fix available5.5 Medium
- checkstyle, debian linux, fedoraproject fedora +2 moreModerate severity vulnerability that affects com.puppycrawl.tools:checkstyleCVE-2019-9658Fix available5.3 Medium
- libofx project libofx, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function...CVE-2019-9656Fix available8.8 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9641Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9640Fix available7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9639Fix available7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9638Fix available7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...CVE-2019-9637Fix available7.5 High
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 Critical
- freedesktop poppler, debian linux, fedoraproject fedora +2 morePoppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc...CVE-2019-9631Fix available9.8 Critical
- libjpeg-turbo, mozilla mozjpeg, debian linux +2 more +4 moreget_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows...CVE-2018-14498Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.CVE-2019-7175Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreIn the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap...CVE-2019-9213Public exploitFix available5.5 Medium
- fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 moreDeserialization of Untrusted DataCVE-2018-12023Fix available7.5 High
- fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 morejackson-databind Deserialization of Untrusted Data vulnerabilityCVE-2018-12022Fix available7.5 High
- debian linux, live555 streaming media, opensuse backports sle +1 more +3 moreIn Live555 before 2019.02.27, malformed headers lead to invalid memory access in the...CVE-2019-9215Fix available9.8 Critical
- android, canonical ubuntu linux, debian linux +2 moreIn binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper...CVE-2019-1999Public exploitFix available7.8 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was...CVE-2019-9214Fix available7.5 High
- advancemame advancecomp, canonical ubuntu linux, debian linux +1 more +3 moreIn AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering...CVE-2019-9210Fix available7.8 High
- Show moreLoading…