Skip to contentDebian Linux vulnerabilities
- fasterxml jackson-databind, apache drill, debian linux +15 more +17 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14439Public exploitFix availableEPSS 10.8%7.5 High
- docker, debian linux, opensuse leap +2 moreMoby Docker cp broken with debian containersCVE-2019-14271Public exploitFix availableEPSS 18.8%9.8 Critical
- fasterxml jackson-databind, apple xcode, debian linux +21 more +23 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14379Fix available9.8 Critical
- exiv2, debian linux +1 moreIn Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage...CVE-2019-14370Fix available6.5 Medium
- exiv2, debian linux +1 moreExiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a...CVE-2019-14369Fix available6.5 Medium
- xfig project fig2dev, debian linux, opensuse leap +2 moreXfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.CVE-2019-14275Fix available5.5 Medium
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session...CVE-2019-13565Fix available7.5 High
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator...CVE-2019-13057Fix available4.9 Medium
- cimg library, the cimg library, debian linux +2 moreCImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE....CVE-2019-1010174Public exploitFix available9.8 Critical
- exim, debian linux +1 moreExim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual...CVE-2019-13917Fix available9.8 Critical
- red hat ansible, debian linux, redhat openstack +2 moreExposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2019-10156Fix available4.6 Medium
- freedesktop poppler, debian linux, fedoraproject fedora +4 more +6 moreThe JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of...CVE-2019-9959Fix available6.5 Medium
- gnu patch, debian linux +1 moreGNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by...CVE-2019-13638Fix available7.8 High
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2816Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2769Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2762Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +5 more +7 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported...CVE-2019-2745Fix available5.1 Medium
- proftpd, debian linux, fedoraproject fedora +1 more +3 moreAn arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code...CVE-2019-12815Public exploitFix availableEPSS 57.3%9.8 Critical
- gnome pango, canonical ubuntu linux, debian linux +10 more +12 moreGnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer...CVE-2019-1010238Fix available9.8 Critical
- sleuthkit the sleuth kit, the sleuth kit sleuth kit, debian linux +1 more +3 moreThe Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted...CVE-2019-1010065Fix available6.5 Medium
- moinejf abcm2ps, debian linux +1 moremoinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is: Allows attackers...CVE-2019-1010069Fix available5.5 Medium
- videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 morelavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has...CVE-2019-13962Fix available9.8 Critical
- debian linux, fedoraproject fedora, libsdl +1 more +3 moreSDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in...CVE-2019-13626Fix available6.5 Medium
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and...CVE-2019-13619Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +19 more +21 moreIn the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the...CVE-2019-13272In KEVPublic exploitFix availableEPSS 52.2%7.8 High
- nfdump, debian linux, fedoraproject fedora +2 morenfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range...CVE-2019-1010057Fix available7.8 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are...CVE-2019-9849Public exploitFix available4.3 Medium
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreOffice has a feature where documents can specify that pre-installed scripts can be executed...CVE-2019-9848Public exploitFix availableEPSS 28.9%9.8 Critical
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +10 more +12 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-13616Fix available8.1 High
- libssh2, debian linux, f5 traffix systems signaling delivery controller +4 more +6 moreIn libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c...CVE-2019-13115Public exploitFix availableEPSS 11.7%8.1 High
- jhead, debian linux, fedoraproject fedora +2 morejhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is:...CVE-2019-1010301Fix available5.5 Medium
- jhead, debian linux, fedoraproject fedora +2 morejhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The...CVE-2019-1010302Fix available5.5 Medium
- kyzer libmspack, canonical ubuntu linux, debian linux +1 more +3 morelibmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The...CVE-2019-1010305Fix available5.5 Medium
- videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 moreAn Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media...CVE-2019-13602Fix available7.8 High
- evince team evince, canonical ubuntu linux, debian linux +1 more +3 moreEvince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The...CVE-2019-1010006Fix available7.8 High
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2,...CVE-2019-13161Fix available5.3 Medium
- minimagick project minimagick, debian linux +1 moreOS Command Injection in MiniMagickCVE-2019-13574Public exploitFix available7.8 High
- juniper junos, juniper networks junos os, debian linux +2 moreJunos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflowCVE-2019-0053Public exploitFix available7.8 High
- squid-cache squid, canonical ubuntu linux, debian linux +5 more +7 moreAn issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with...CVE-2019-12527Fix availableEPSS 50.3%8.8 High
- schedmd slurm, debian linux, fedoraproject fedora +1 more +3 moreSchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.CVE-2019-12838Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...CVE-2019-9811Fix available8.3 High
- exiv2, debian linux +1 moreThere is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through...CVE-2019-13504Fix available6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7...CVE-2019-12529Fix available5.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is...CVE-2019-12525Fix availableEPSS 24.4%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...CVE-2019-11730Public exploitFix availableEPSS 20.3%6.5 Medium
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA vulnerability exists where the caret ("^") character is improperly escaped constructing some...CVE-2019-11717Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...CVE-2019-11711Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMozilla developers and community members reported memory safety bugs present in Firefox 67 and...CVE-2019-11709Fix available9.8 Critical
- redis, canonical ubuntu linux, debian linux +6 more +8 moreA stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions...CVE-2019-10193Fix availableEPSS 23.3%7.2 High
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...CVE-2019-1010319Fix available5.5 Medium
- Show moreLoading…