Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel through 5.3.2...CVE-2019-17052Fix available3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 morebase_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel...CVE-2019-17055Fix available3.3 Low
- phpbb, debian linux +1 morephpBB Cross-Site Request Forgery (CSRF)CVE-2019-16993Fix available8.8 High
- tcpdump, apple mac os x, canonical ubuntu linux +7 more +9 morelmp_print in tcpdump lacks certain boundary checksCVE-2019-15166Public exploitFix available1.6 Low
- tcpdump libpcap, apple ipados, iphone os +8 more +10 moresf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before...CVE-2019-15165Fix available5.3 Medium
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for ...CVE-2018-16451Fix available7.5 High
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() ...CVE-2018-16230Fix available7.5 High
- tcpdump, apple mac os x, debian linux +4 more +6 moreThe DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().CVE-2018-16229Fix available7.5 High
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().CVE-2018-16228Fix available7.5 High
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the...CVE-2018-16227Fix available7.5 High
- tcpdump, apple mac os x, debian linux +4 more +6 moreThe ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.CVE-2018-14882Fix available7.5 High
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c...CVE-2018-14881Public exploitFix available7.5 High
- tcpdump, apple mac os x, debian linux +20 more +22 moreThe OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c...CVE-2018-14880Public exploitFix available7.5 High
- tcpdump, apple mac os x, debian linux +4 more +6 moreThe command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c...CVE-2018-14879Public exploitFix available7.0 High
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().CVE-2018-14470Fix available7.5 High
- tcpdump, apple mac os x, debian linux +4 more +6 moreThe IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().CVE-2018-14469Public exploitFix available7.5 High
- tcpdump, apple mac os x, debian linux +20 more +22 moreThe FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().CVE-2018-14468Fix available7.5 High
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c...CVE-2018-14467Fix available7.5 High
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and...CVE-2018-14466Fix available7.5 High
- tcpdump, apple mac os x, debian linux +4 more +6 moreThe RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().CVE-2018-14465Fix available7.5 High
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c...CVE-2018-14464Fix available7.5 High
- tcpdump, apple mac os x, debian linux +4 more +6 moreThe VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print().CVE-2018-14463Fix available7.5 High
- tcpdump, apple mac os x, debian linux +4 more +6 moreThe ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().CVE-2018-14462Fix available7.5 High
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().CVE-2018-14461Fix available7.5 High
- python, canonical ubuntu linux, debian linux +2 moreThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...CVE-2019-16935Fix available6.1 Medium
- exim, canonical ubuntu linux, debian linux +2 more +4 moreExim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019...CVE-2019-16928In KEVFix availableEPSS 41.6%9.8 Critical
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible information disclosure due to improper input validation. This...CVE-2019-9433Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible resource exhaustion due to improper input validation. This could...CVE-2019-9371Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2019-9325Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libexif, there is a possible out of bounds write due to an integer overflow. This could lead...CVE-2019-9278Fix available8.8 High
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2019-9232Fix available7.5 High
- adobe flash player, flash player desktop runtime, debian linux +2 more +4 moreAdobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass...CVE-2019-80757.5 High
- golang go, debian linux, fedoraproject fedora +6 more +8 moreGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.CVE-2019-16276Fix available7.5 High
- netty, canonical ubuntu linux, debian linux +1 more +3 moreHTTP Request Smuggling in NettyCVE-2019-16869Fix available7.5 High
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki information disclosureCVE-2019-16738Fix available5.3 Medium
- arm mbed crypto, mbed tls, debian linux +1 more +3 moreArm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,...CVE-2019-16910Fix available5.3 Medium
- novnc, canonical ubuntu linux, debian linux +1 more +3 moreCross-Site Scripting in @novnc/novncCVE-2017-18635Public exploitFix available6.1 Medium
- debian linux, lemonldap-ng lemonldap\ +1 moreOpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access...CVE-2019-15941Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreAn issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not...CVE-2019-16746Public exploitFix availableEPSS 12.7%9.8 Critical
- pam-python project pam-python, canonical ubuntu linux, debian linux +2 morepam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of...CVE-2019-16729Fix available7.8 High
- cure53 dompurify, debian linux +1 moreCross-Site Scripting in dompurifyCVE-2019-16728Fix available6.1 Medium
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +6 more +8 moreAn exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1...CVE-2019-5094Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.CVE-2019-16708Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in...CVE-2019-16710Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.CVE-2019-16711Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in...CVE-2019-16713Fix available6.5 Medium
- gnome file-roller, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path...CVE-2019-16680Fix available4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +25 more +27 moreAn out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way...CVE-2019-14821Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...CVE-2019-11779Fix available6.5 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published...CVE-2019-16391Fix available6.5 Medium
- Show moreLoading…