Skip to contentDebian Linux vulnerabilities
- red hat 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreIn 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will...CVE-2019-3883Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11035Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11034Fix available4.8 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification...CVE-2018-16878Fix available6.2 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in the way pacemaker's client-server authentication was implemented in versions...CVE-2018-16877Fix available8.8 High
- gpac, debian linux +1 moregf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt...CVE-2019-11222Fix available7.8 High
- gpac, debian linux +1 moreGPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c.CVE-2019-11221Fix available7.8 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9499Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9498Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsCVE-2019-9495Fix available3.7 Low
- spip, debian linux +1 moreSPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary...CVE-2019-11071Fix available8.8 High
- xmlsoft libxslt, canonical ubuntu linux, debian linux +19 more +21 moreNokogiri vulnerable to libxslt protection mechanism bypassCVE-2019-11068Fix available9.8 Critical
- spring security, vmware spring security, debian linux +2 moreInsecure Randomness When Using a SecureRandom Instance Constructed by Spring SecurityCVE-2019-3795Fix available3.8 Low
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash...CVE-2019-10903Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was...CVE-2019-10901Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This...CVE-2019-10899Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was...CVE-2019-10896Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash....CVE-2019-10895Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This...CVE-2019-10894Fix available7.5 High
- cacti, debian linux +1 moreIn clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out...CVE-2019-11025Fix available5.4 Medium
- graphicsmagick, debian linux, opensuse leap +2 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage...CVE-2019-11010Fix available6.5 Medium
- graphicsmagick, debian linux, opensuse leap +2 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11009Fix available8.1 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function...CVE-2019-11008Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11007Fix available8.1 High
- graphicsmagick, debian linux, opensuse leap +2 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11006Fix available9.1 Critical
- samba, debian linux, fedoraproject fedora +3 more +5 moreA flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry...CVE-2019-3880Fix available4.2 Medium
- systemd, debian linux, fedoraproject fedora +1 more +3 moreIn systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the...CVE-2019-3842Public exploitFix available4.5 Medium
- kde kmail, debian linux +1 moreIn KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as...CVE-2019-10732Fix available4.3 Medium
- roundup-tracker roundup, debian linux +1 moreModerate severity vulnerability that affects roundupCVE-2019-10904Fix available6.1 Medium
- tryton trytond, debian linux +1 moreTryton Improper Access ControlCVE-2019-10868Fix available4.3 Medium
- oisf suricata, debian linux +1 moreSuricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner...CVE-2018-10242Fix available7.5 High
- cisco clamav, debian linux, opensuse leap +2 moreClamAV OLE2 File Out-Of-Bounds Write VulnerabilityCVE-2019-1788Fix available7.5 High
- cisco clamav, debian linux, opensuse leap +2 moreClam AntiVirus PDF Denial of Service VulnerabilityCVE-2019-1787Fix available7.5 High
- apache http server, canonical ubuntu linux, debian linux +2 more +4 moreA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...CVE-2019-0220Fix availableEPSS 17.9%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- apache http server, canonical ubuntu linux, debian linux +2 moreA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...CVE-2019-0196Fix availableEPSS 19.3%5.3 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders...CVE-2019-10649Fix available5.5 Medium
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function...CVE-2019-10650Fix available8.1 High
- apache activemq, debian linux, netapp e-series santricity web services +5 more +7 moreImproper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-clientCVE-2019-0222Public exploitFix availableEPSS 12.0%7.5 High
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow...CVE-2019-7524Fix available8.8 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in...CVE-2017-7655Fix available7.5 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection in errorsCVE-2019-8325Fix available7.5 High
- rubygems, debian linux, opensuse leap +1 more +3 moreCode injection in RubyGemsCVE-2019-8324Fix available8.8 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in api response handlingCVE-2019-8323Fix available7.5 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in gem ownerCVE-2019-8322Fix available7.5 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in verboseCVE-2019-8321Fix available7.5 High
- linux kernel, canonical ubuntu linux, debian linux +6 more +8 moreThe SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem....CVE-2019-3874Fix available5.3 Medium
- xpdfreader xpdf, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec...CVE-2019-10018Fix available5.5 Medium
- symfony twig, debian linux +1 moreTwig Sandbox Information DisclosureCVE-2019-9942Fix available3.7 Low
- Show moreLoading…