Skip to contentDebian Linux vulnerabilities
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreInsufficient url validation allowing LibreLogo script executionCVE-2019-9850Fix available9.8 Critical
- stb vorbis project vorbis, debian linux +1 moreA reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an...CVE-2019-13223Fix available5.5 Medium
- stb vorbis project vorbis, debian linux +1 moreAn out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03...CVE-2019-13222Fix available7.1 High
- stb vorbis project vorbis, debian linux +1 moreA stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows...CVE-2019-13221Fix available7.8 High
- stb vorbis project vorbis, debian linux +1 moreUse of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03...CVE-2019-13220Fix available7.1 High
- stb vorbis project vorbis, debian linux +1 moreA NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an...CVE-2019-13219Fix available5.5 Medium
- stb vorbis project vorbis, debian linux +1 moreDivision by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an...CVE-2019-13218Fix available5.5 Medium
- stb vorbis project vorbis, debian linux +1 moreA heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an...CVE-2019-13217Fix available7.8 High
- apache http server, debian linux +1 moreHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...CVE-2019-10081Fix availableEPSS 14.0%7.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 more_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer...CVE-2019-14973Fix available6.5 Medium
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...CVE-2019-10092Public exploitFix availableEPSS 81.5%6.1 Medium
- golang go, debian linux +1 morenet/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading...CVE-2019-14809Fix available9.8 Critical
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 26.3%7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.8%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 83.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, debian linux +1 more +3 moreSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of serviceCVE-2019-9512Fix availableEPSS 84.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- bluetooth br/edr, apple iphone os, mac os x +145 more +147 moreBlutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiationCVE-2019-9506Public exploitFix available7.6 High
- debian linux, linux kernel +1 moreIn the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into...CVE-2019-15239Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference...CVE-2019-15216Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a...CVE-2017-18509Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero...CVE-2019-14981Fix available6.5 Medium
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community...CVE-2019-13458Fix available2.7 Low
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) Community Edition 5.0.x through 5.0...CVE-2019-12746Fix available6.5 Medium
- pdfresurrect project pdfresurrect, debian linux, fedoraproject fedora +2 moreAn issue was discovered in PDFResurrect before 0.18. pdf_load_pages_kids in pdf.c doesn't...CVE-2019-14934Fix available7.8 High
- gonicus gosa, debian linux +1 moreIncorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker...CVE-2019-11187Fix available9.8 Critical
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_process_user_comment in EXIF extensionCVE-2019-11042Fix available4.8 Medium
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_scan_thumbnail in EXIF extensionCVE-2019-11041Fix available4.8 Medium
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 moreThe implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are...CVE-2019-13377Fix available5.9 Medium
- kde kconfig, canonical ubuntu linux, debian linux +5 more +7 moreIn KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to...CVE-2019-14744Fix available7.8 High
- openstack nova, redhat openstack, canonical ubuntu linux +1 more +3 moreOpenStack Nova Server Resource Faults Leak External Exception DetailsCVE-2019-14433Fix available6.5 Medium
- thekelleys dnsmasq, debian linux +1 moreImproper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send...CVE-2019-14513Fix available7.5 High
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +2 moreModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap...CVE-2019-14497Fix available7.8 High
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +2 moreLoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer...CVE-2019-14496Fix available7.8 High
- opencv, debian linux +1 moreNULL Pointer Dereference in OpenCV.CVE-2019-14493Fix available7.5 High
- apache solr, debian linux +1 moreXML External Entity (XXE) Injection in Apache SolrCVE-2019-0193In KEVPublic exploitFix availableEPSS 83.5%7.2 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreSQL Injection in DjangoCVE-2019-14234Public exploitFix availableEPSS 47.7%9.8 Critical
- freedesktop poppler, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the...CVE-2019-14494Fix available7.5 High
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +1 more +3 moreXMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow.CVE-2019-14464Fix available5.5 Medium
- libmodbus, debian linux, fedoraproject fedora +2 moreAn issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of...CVE-2019-14463Fix available9.1 Critical
- libmodbus, debian linux, fedoraproject fedora +2 moreAn issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of...CVE-2019-14462Public exploitFix available9.1 Critical
- nfdump project nfdump, debian linux, fedoraproject fedora +2 morenfdump 1.6.17 and earlier is affected by an integer overflow in the function...CVE-2019-14459Fix available7.5 High
- icedtea icedtea-web, debian linux, opensuse leap +2 moreIt was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip...CVE-2019-10185Fix available8.2 High
- icedtea icedtea-web, debian linux, opensuse leap +2 moreIt was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be...CVE-2019-10181Fix available6.3 Medium
- openmpt libopenmpt, debian linux +1 morelibopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2...CVE-2019-14380Fix available6.5 Medium
- libav, debian linux +1 moreAn issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec...CVE-2019-144436.5 Medium
- libav, debian linux +1 moreIn mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek...CVE-2019-144426.5 Medium
- Show moreLoading…