Skip to contentDebian Linux vulnerabilities
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...CVE-2019-1010317Fix available5.5 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero...CVE-2019-1010315Fix available5.5 Medium
- oniguruma project oniguruma, php, canonical ubuntu linux +2 more +4 moreA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...CVE-2019-13224Fix available9.8 Critical
- redis, canonical ubuntu linux, debian linux +7 more +9 moreA heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3...CVE-2019-10192Fix availableEPSS 25.6%7.2 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.CVE-2019-13454Fix available6.5 Medium
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully...CVE-2018-11563Fix available4.6 Medium
- zeromq libzmq, canonical ubuntu linux, debian linux +1 more +3 moreIn ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote,...CVE-2019-13132Public exploitFix availableEPSS 42.5%9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.CVE-2019-13311Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the...CVE-2019-13309Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.CVE-2019-13308Fix available8.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in...CVE-2019-13307Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage...CVE-2019-13306Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage...CVE-2019-13305Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage...CVE-2019-13304Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.CVE-2019-13301Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in...CVE-2019-13300Fix available8.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in...CVE-2019-13297Fix available8.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in...CVE-2019-13295Fix available8.8 High
- squid-cache squid, debian linux +1 moreThe cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.CVE-2019-13345Fix availableEPSS 74.5%6.1 Medium
- unzip project unzip, debian linux +1 moreInfo-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial...CVE-2019-13232Fix available3.3 Low
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in...CVE-2019-5051Fix available8.8 High
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4....CVE-2019-5052Fix available8.8 High
- dosbox, debian linux, fedoraproject fedora +2 moreA buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code.CVE-2019-7165Fix available9.8 Critical
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreqemu-bridge-helper.c in QEMU 4.0.0 does not ensure that a network interface name (obtained from...CVE-2019-13164Fix available7.8 High
- dosbox, debian linux +1 moreDOSBox 0.74-2 has Incorrect Access Control.CVE-2019-12594Public exploitFix available9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +2 moreImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders...CVE-2019-13137Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 more +4 moreImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function...CVE-2019-13135Fix available8.8 High
- xmlsoft libxslt, canonical ubuntu linux, debian linux +3 more +5 moreUninitialized read in Nokogiri gemCVE-2019-13117Fix available5.3 Medium
- audiofile, debian linux +1 moreIn Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in...CVE-2019-13147Fix available6.5 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPSCVE-2019-12781Fix available5.3 Medium
- exiv2, canonical ubuntu linux, debian linux +1 more +3 morehttp.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash...CVE-2019-13114Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +1 more +3 moreA PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an...CVE-2019-13112Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +1 more +3 moreA CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1...CVE-2019-13110Fix available6.5 Medium
- debian linux, lemonldap-ng lemonldap\ +1 moreLemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification...CVE-2019-13031Fix available8.1 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings...CVE-2019-12979Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.CVE-2019-12976Fix available5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.CVE-2019-12975Fix available5.5 Medium
- uclouvain openjpeg, debian linux, opensuse leap +2 more +4 moreIn OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1...CVE-2019-12973Fix available5.5 Medium
- uclouvain openjpeg, debian linux +1 moreAn improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function...CVE-2018-20847Fix available8.8 High
- spring security, vmware spring security, debian linux +2 morePlaintextPasswordEncoder authenticates encoded passwords that are nullCVE-2019-11272Fix available7.3 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 morearch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug...CVE-2019-12817Fix available7.0 High
- libexpat project libexpat, canonical ubuntu linux, debian linux +9 more +11 moreIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...CVE-2018-20843Fix available7.5 High
- fasterxml jackson-databind, debian linux, redhat enterprise linux +2 moreDeserialization of Untrusted Data in FasterXML jackson-databindCVE-2019-12384Public exploitFix availableEPSS 45.2%5.9 Medium
- fasterxml jackson-databind, debian linux +1 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-12814Public exploitFix availableEPSS 10.9%5.9 Medium
- bzip bzip2, canonical ubuntu linux, debian linux +17 more +19 moreBZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...CVE-2019-12900Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a...CVE-2019-5840Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreExcessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5839Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed...CVE-2019-5838Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreResource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a...CVE-2019-5837Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...CVE-2019-5836Fix available8.8 High
- Show moreLoading…