Skip to contentDebian Linux vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6430Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6423Fix available8.8 High
- openresty, debian linux +1 moreAn issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP...CVE-2020-11724Fix available7.5 High
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could...CVE-2020-11647Fix available7.5 High
- sqlite, canonical ubuntu linux, debian linux +18 more +20 moreSQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...CVE-2020-11655Fix available7.5 High
- varnish-cache varnish cache, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3...CVE-2020-11653Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +15 more +17 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11620Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +18 more +20 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11619Fix available8.1 High
- netty, debian linux, fedoraproject fedora +10 more +12 moreDenial of Service in NettyCVE-2020-11612Fix available7.5 High
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user...CVE-2020-1760Fix available5.8 Medium
- gnu gnutls, canonical ubuntu linux, debian linux +5 more +7 moreGnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is...CVE-2020-11501Fix available7.4 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel through 5.6.2....CVE-2020-11494Fix available4.4 Medium
- kornshell ksh, apple mac os x, debian linux +2 moreIn ksh version 20120801, a flaw was found in the way it evaluates certain environment variables....CVE-2019-14868Fix available7.4 High
- haproxy, canonical ubuntu linux, debian linux +3 more +5 moreIn hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4,...CVE-2020-11100Fix availableEPSS 61.6%8.8 High
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- php, debian linux, opensuse leap +1 more +3 moreget_headers() silently truncates after a null byteCVE-2020-7066Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moremb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_fullCVE-2020-7065Fix available7.4 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreUse-of-uninitialized-value in exifCVE-2020-7064Fix available6.5 Medium
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreAn exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU...CVE-2020-6096Fix available8.1 High
- centos, containers bubblewrap, debian linux +1 more +3 morePrivilege escalation in setuid mode via user namespaces in BubblewrapCVE-2020-5291Fix available7.2 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113Public exploitFix available8.8 High
- pam-krb5 project pam-krb5, debian linux +1 morepam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations...CVE-2020-10595Fix available9.8 Critical
- gitlab, debian linux +1 moreGitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that...CVE-2020-10955Fix available6.5 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation DisclosureCVE-2020-1772Fix available6.5 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation disclosure in support bundle filesCVE-2020-1770Fix available2.4 Low
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10969Fix available8.8 High
- apache shiro, debian linux +1 moreImproper Authentication in Apache ShiroCVE-2020-1957Fix availableEPSS 23.3%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an...CVE-2020-10942Fix available5.3 Medium
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the resource allocation handling of...CVE-2020-6080Fix available7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the resource allocation handling of...CVE-2020-6079Fix available7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable code execution vulnerability exists in the label-parsing functionality of...CVE-2020-6072Fix available9.8 Critical
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the resource record-parsing...CVE-2020-6071Fix available7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of...CVE-2020-6073Fix available7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the message-parsing functionality of...CVE-2020-6078Fix available7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the message-parsing functionality of...CVE-2020-6077Fix available7.5 High
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreGraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in...CVE-2020-10938Fix available9.8 Critical
- arm mbed tls, mbed crypto, debian linux +1 more +3 moreArm Mbed TLS before 2.6.15 allows attackers to obtain sensitive information (an RSA private key)...CVE-2020-10941Fix available5.9 Medium
- red hat ansible, debian linux, fedoraproject fedora +2 more +4 moreCode Injection, Race Condition, and Execution with Unnecessary Privileges in AnsibleCVE-2020-10684Fix available7.9 High
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...CVE-2020-1944Fix available9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...CVE-2019-17559Fix available9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...CVE-2019-17565Fix available9.8 Critical
- horde groupware, groupware webmail edition, debian linux +1 more +3 moreThis vulnerability allows remote attackers to create arbitrary files on affected installations of...CVE-2020-8866Public exploitFix available4.3 Medium
- horde groupware, groupware webmail edition, debian linux +2 moreThis vulnerability allows remote attackers to execute local PHP files on affected installations...CVE-2020-8865Public exploitFix available6.3 Medium
- weechat, debian linux +1 moreAn issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC...CVE-2020-9760Fix available9.8 Critical
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreInfinite Loop in Apache TikaCVE-2020-1951Fix available5.5 Medium
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreUncontrolled Resource Consumption in Apache TikaCVE-2020-1950Fix available5.5 Medium
- Show moreLoading…