Skip to contentDebian Linux vulnerabilities
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreOut of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6390Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6385Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6382Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInteger overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87...CVE-2020-6381Fix available8.8 High
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mountCVE-2019-19921Fix available7.0 High
- nodejs node, debian linux, nodejs node.js +5 more +7 moreIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...CVE-2019-15606Fix availableEPSS 20.0%9.8 Critical
- nodejs node, node.js, debian linux +8 more +10 moreImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...CVE-2019-15604Fix availableEPSS 20.0%7.5 High
- nodejs node, node.js, debian linux +11 more +13 moreHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...CVE-2019-15605Public exploitFix availableEPSS 57.1%9.8 Critical
- libslirp project libslirp, debian linux, opensuse leap +2 moreIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...CVE-2020-8608Fix available5.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize...CVE-2020-8647Fix available6.1 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...CVE-2020-8648Fix available7.1 High
- debian linux, linux kernel, opensuse leap +2 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...CVE-2020-8649Fix available5.9 Medium
- ipmitool, debian linux, fedoraproject fedora +1 more +3 moreremote code execution vulnerability in ipmitoolCVE-2020-5208Fix available7.7 High
- canonical cloud-init, debian linux, opensuse leap +2 moreIn cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a...CVE-2020-8632Fix available5.5 Medium
- canonical cloud-init, debian linux, opensuse leap +2 morecloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier...CVE-2020-8631Fix available5.5 Medium
- [unknown] systemd, debian linux, redhat ceph storage +7 more +9 moreA heap use-after-free vulnerability was found in systemd before version v245-rc1, where...CVE-2020-1712Public exploitFix available7.8 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...CVE-2019-12528Fix availableEPSS 10.5%7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...CVE-2020-8450Fix availableEPSS 71.8%7.3 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...CVE-2020-8449Fix available7.5 High
- canonical ubuntu linux, debian linux, point-to-point protocol project protocol +1 more +3 moreeap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and...CVE-2020-8597Public exploitFix availableEPSS 19.9%9.8 Critical
- gnome librsvg, canonical ubuntu linux, debian linux +3 more +5 moreIn xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause...CVE-2019-20446Fix available6.5 Medium
- canonical ubuntu linux, debian linux, intel 7265 firmware +12 more +14 moreOut of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an...CVE-2020-0569Fix available5.7 Medium
- python, canonical ubuntu linux, debian linux +5 more +7 morePython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...CVE-2020-8492Fix available6.5 Medium
- netty, canonical ubuntu linux, debian linux +3 more +5 moreHTTP Request Smuggling in NettyCVE-2019-20444Fix available9.1 Critical
- netty, apache spark, canonical ubuntu linux +4 more +6 moreHTTP Request Smuggling in NettyCVE-2019-20445Fix availableEPSS 13.8%9.1 Critical
- debian linux, sudo project sudo +1 moreIn Sudo through 1.8.29, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based...CVE-2019-18634Public exploitFix availableEPSS 19.3%7.8 High
- openbsd opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moresmtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,...CVE-2020-7247In KEVPublic exploitFix availableEPSS 99.0%9.8 Critical
- lldpd project lldpd, debian linux, fedoraproject fedora +2 moreBuffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0...CVE-2015-8011Fix available9.8 Critical
- uclouvain openjpeg, debian linux +1 moreopj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap...CVE-2020-8112Fix available8.8 High
- debian linux, prosody mod auth ldap, mod auth ldap2 +2 moreThe mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody...CVE-2020-8086Fix available9.8 Critical
- php, debian linux, opensuse leap +2 more +4 moreglobal buffer-overflow in mbfl_filt_conv_big5_wcharCVE-2020-7060Fix available6.5 Medium
- php, debian linux, opensuse leap +2 more +4 moreOOB read in php_strip_tags_exCVE-2020-7059Fix available6.5 Medium
- red hat ansible, debian linux +1 moreOS Command Injection and Improper Input Validation in ansibleCVE-2019-14904Fix available7.3 High
- intel intel(r) processors, canonical ubuntu linux, debian linux +429 more +431 moreCleanup errors in some data cache evictions for some Intel(R) Processors may allow an...CVE-2020-0549Fix available5.5 Medium
- netty, debian linux, fedoraproject fedora +3 more +5 moreHTTP Request Smuggling in NettyCVE-2020-7238Fix available7.5 High
- exiv2, canonical ubuntu linux, debian linux +2 moreIn Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an...CVE-2019-20421Fix available7.5 High
- virglrenderer project virglrenderer, debian linux +1 moreA double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers...CVE-2020-8003Fix available5.5 Medium
- virglrenderer project virglrenderer, debian linux +1 moreA NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to...CVE-2020-8002Fix available5.5 Medium
- arm mbed crypto, mbed tls, debian linux +1 more +3 moreThe ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1...CVE-2019-18222Fix available4.7 Medium
- apache xml-rpc, canonical ubuntu linux, debian linux +2 more +4 moreInsecure Deserialization in Apache XML-RPCCVE-2019-17570Public exploitFix availableEPSS 49.3%9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- opensuse libsolv, debian linux +1 morerepodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a...CVE-2019-20387Fix available7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- storebackup, canonical ubuntu linux, debian linux +2 more +4 morestoreBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which...CVE-2020-7040Fix available8.1 High
- apt-cacher-ng project apt-cacher-ng, debian linux, opensuse backports +1 more +3 moreapt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the...CVE-2020-5202Fix available5.5 Medium
- red hat samba, canonical ubuntu linux, debian linux +7 more +9 moreAll samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an...CVE-2019-14907Fix available6.5 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +1 more +3 moreThere is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4...CVE-2019-14902Fix available5.4 Medium
- saltstack salt, canonical ubuntu linux, debian linux +1 more +3 moreSaltStack Salt is vulnerable to command injectionCVE-2019-17361Fix availableEPSS 15.1%9.8 Critical
- libslirp project libslirp, qemu, debian linux +1 more +3 moretcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...CVE-2020-7039Fix available5.6 Medium
- debian linux, linux kernel, netapp 8300 firmware +11 more +13 moreThe flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device...CVE-2019-18282Fix available5.3 Medium
- Show moreLoading…