Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreIn the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an...CVE-2019-19318Fix available4.4 Medium
- vsftpd, debian linux +1 morevsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on...CVE-2011-2523Public exploitEPSS 96.2%9.8 Critical
- packagekit, debian linux, redhat enterprise linux server +2 morePackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which...CVE-2011-2515Fix available5.3 Medium
- otrs faq, help desk, itsm +2 more +4 moreAn Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM...CVE-2013-2625Fix available6.5 Medium
- dirmngr, debian linux, gnupg +1 more +3 moredirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to...CVE-2011-22075.3 Medium
- dhclient project dhclient, debian linux, isc-dhcp +2 moreAn issue was discovered in dhclient 4.3.1-6 due to an embedded path variable.CVE-2012-2248Fix available8.1 High
- xscreensaver, debian linux +1 morexscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank...CVE-2011-2187Fix available7.8 High
- accountsservice project accountsservice, debian linux, opensuse +1 more +3 moreAn issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in...CVE-2012-6655Fix available3.3 Low
- haproxy, canonical ubuntu linux, debian linux +2 moreThe HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by...CVE-2019-19330Fix available9.8 Critical
- php, zend framework, zendframework +1 more +3 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2011-1939Public exploitFix available9.8 Critical
- lilo, debian linux +1 morelilo-uuid-diskid causes lilo.conf to be world-readable in lilo 23.1.CVE-2011-19344.3 Medium
- yaws, debian linux +1 moreYaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote...CVE-2011-4350Fix availableEPSS 16.1%6.5 Medium
- yubico pam module, debian linux, yubico-pam +2 moreYubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM...CVE-2011-4120Fix available9.8 Critical
- phpldapadmin, debian linux +1 moreA local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain...CVE-2011-4082Fix available7.5 High
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 operates on full file system objects path names which can allow a local...CVE-2011-36327.1 High
- proftpd, debian linux, fedoraproject fedora +2 moreAn issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL...CVE-2019-19269Fix available4.9 Medium
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows...CVE-2011-36318.8 High
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way...CVE-2011-36308.8 High
- tahoe-lafs, debian linux +1 moreTahoe-LAFS v1.3.0 through v1.8.2 could allow unauthorized users to delete immutable files in some...CVE-2011-3617Fix available6.5 Medium
- polipo, debian linux +1 morePolipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT...CVE-2011-3596Public exploitEPSS 11.1%7.5 High
- apt, debian advanced package tool, linux +2 moreIt was found that apt-key in apt, all versions, do not correctly validate gpg keys with the...CVE-2011-33743.7 Low
- canonical cloud-init, debian linux, suse linux enterprise server +2 moreAn privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an...CVE-2012-6639Fix available8.8 High
- oniguruma project oniguruma, php, canonical ubuntu linux +2 more +4 moreOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...CVE-2019-19246Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell...CVE-2019-14897Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA vulnerability was found in marvell wifi chip driver in Linux kernel. There is a heap-based...CVE-2019-14896Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x...CVE-2019-14895Fix available8.0 High
- libuser, debian linux, fedoraproject fedora +1 more +3 morelibuser has information disclosure when moving user's home directoryCVE-2012-5644Fix available5.5 Medium
- quagga, debian linux, redhat enterprise linux +2 morequagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removalCVE-2012-55216.5 Medium
- cisco clamav, canonical ubuntu linux, cisco email security appliance firmware +1 more +3 moreClam AntiVirus (ClamAV) Software Email Parsing VulnerabilityCVE-2019-15961Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +12 more +14 moreWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...CVE-2019-11745Fix available8.8 High
- pivotal rabbitmq, rabbitmq for pivotal platform, broadcom rabbitmq server +3 more +5 moreRabbitMQ Web Management Plugin DoS via heap overflowCVE-2019-11287Public exploitFix available4.5 Medium
- debian linux, vanderbilt adaptive communication environment +1 moregenerate_doygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp...CVE-2014-6311Fix available9.8 Critical
- call-cc chicken, debian linux +1 moreBuffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code...CVE-2014-63109.8 Critical
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified...CVE-2019-18610Fix availableEPSS 50.1%8.8 High
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified...CVE-2019-18976Fix availableEPSS 12.8%7.5 High
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x, 16.x, and 17.x, and...CVE-2019-18790Fix available6.5 Medium
- postfix admin project admin, postfixadmin, debian linux +2 morePostfixAdmin 2.3.4 has multiple XSS vulnerabilitiesCVE-2012-0812Fix available6.1 Medium
- libbluray, debian linux, fedoraproject fedora +1 more +3 morelibbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR filesCVE-2015-7810Fix available4.7 Medium
- openstack designate, debian linux, redhat enterprise linux openstack platform +2 moreDesignate does not enforce the DNS protocol limit concerning record set sizesCVE-2015-5694Fix available6.5 Medium
- xcfa, debian linux +1 morexcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a...CVE-2014-5255Fix available7.0 High
- oniguruma project oniguruma, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function...CVE-2019-19204Public exploitFix available7.5 High
- xcftools project xcftools, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the flattenIncrementally function in the...CVE-2019-5087Fix available8.8 High
- xcftools project xcftools, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the flattenIncrementally function in the...CVE-2019-5086Fix available7.5 High
- rc project rc, debian linux +1 morerc before 1.7.1-5 insecurely creates temporary files.CVE-2014-1936Fix available7.5 High
- 9base project 9base, debian linux +1 more9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.CVE-2014-19355.3 Medium
- net-ldap project net-ldap, debian linux, ruby-net-ldap +2 morenet-ldap has weak salt when generating passwordsCVE-2014-0083Fix available5.5 Medium
- pam shield project shield, debian linux, pam-shield +2 morepam_shield before 0.9.4: Default configuration does not perform protective actionCVE-2012-2350Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more__btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls...CVE-2019-19039Fix availableDisputed5.5 Medium
- libarchive, canonical ubuntu linux, debian linux +1 more +3 moreIn Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds...CVE-2019-19221Fix available5.5 Medium
- mediawiki, debian linux, fedoraproject fedora +1 more +3 moreMediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which...CVE-2013-1817Fix available7.5 High
- Show moreLoading…