Skip to contentDebian Linux vulnerabilities
- google chrome, canonical ubuntu linux, debian linux +3 more +5 moreUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...CVE-2020-6463Fix available8.8 High
- httplib2, debian linux, fedoraproject fedora +2 moreCRLF injection in httplib2CVE-2020-11078Fix available6.8 Medium
- cacti, debian linux, fedoraproject fedora +2 moreIn Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions...CVE-2020-13230Fix available4.3 Medium
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash....CVE-2020-13164Fix available7.5 High
- opensuse open build service, debian linux +1 moreunauthorized read access to files where sourceaccess is disabled via a crafted _service file in Open Build ServiceCVE-2020-8021Fix available5.3 Medium
- powerdns recursor, debian linux, fedoraproject fedora +2 more +4 moreAn issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer...CVE-2020-12244Fix available7.5 High
- powerdns recursor, debian linux, fedoraproject fedora +2 more +4 morePowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against...CVE-2020-10995Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.CVE-2020-12663Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...CVE-2020-12662Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +3 more +5 moreA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cCVE-2020-8617Public exploitFix availableEPSS 93.3%7.5 High
- isc bind, debian linux, isc bind9 +2 moreBIND does not sufficiently limit the number of fetches performed when processing referralsCVE-2020-8616Fix availableEPSS 10.9%8.6 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moregadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13...CVE-2020-13143Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11526Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11525Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security updateCVE-2020-11523Fix available6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11522Fix available6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security updateCVE-2020-11521Fix available6.6 Medium
- transmissionbt transmission, debian linux, fedoraproject fedora +2 moreUse-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers...CVE-2018-10756Fix available7.8 High
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a...CVE-2020-0093Fix available5.0 Medium
- opensuse open-build-service, debian linux, opensuse open build service +2 morePersistent XSS in markdown parser used by obs-serverCVE-2020-8020Fix available6.5 Medium
- cisco clam antivirus, clamav, canonical ubuntu linux +2 more +4 moreClamAV PDF Parsing Denial of Service VulnerabilityCVE-2020-3341Fix available7.5 High
- cisco clam antivirus, clamav, canonical ubuntu linux +2 more +4 moreClamAV ARJ Archive Parsing Denial of Service VulnerabilityCVE-2020-3327Fix available7.5 High
- debian apt, canonical ubuntu linux, debian linux +1 more +3 moreMissing input validation in the ar/tar implementations of APT before version 2.1.2 could result...CVE-2020-3810Fix available5.5 Medium
- red hat ansible, redhat ansible engine, ansible tower +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2020-1746Fix available5.0 Medium
- infradead openconnect, debian linux, fedoraproject fedora +1 more +3 moreOpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or...CVE-2020-12823Fix available9.8 Critical
- debian linux, rubyonrails actionpack page-caching +1 moreArbitrary file write in actionpack-page_caching gemCVE-2020-8159Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreCVE-2020-10711 does not affect BellSoft softwareCVE-2020-10711Fix available5.9 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDPCVE-2020-11058Fix available2.2 Low
- exim, canonical ubuntu linux, debian linux +1 more +3 moreExim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA...CVE-2020-12783Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- red hat ansible, redhat ansible engine, ansible tower +4 more +6 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10685Fix available5.0 Medium
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreexif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.CVE-2020-12767Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has...CVE-2020-12768Fix availableDisputed5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...CVE-2020-12769Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request...CVE-2020-12770Fix available6.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...CVE-2020-12771Fix available5.5 Medium
- json-c, canonical ubuntu linux, debian linux +17 more +19 morejson-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...CVE-2020-12762Fix available7.8 High
- linux kernel, canonical ubuntu linux, debian linux +19 more +21 moreThere is a use-after-free in kernel versions before 5.5 due to a race condition between the...CVE-2020-10690Fix available6.5 Medium
- google chrome, debian linux, opensuse leap +2 moreType confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to...CVE-2020-6464Fix available8.8 High
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPrdp_read_share_control_headerCVE-2020-11049Fix available5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPrdp_read_flow_control_pduCVE-2020-11048Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11047Fix available5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDPCVE-2020-11046Fix available5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11045Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +2 moreDouble Free in FreeRDPCVE-2020-11044Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11042Fix available5.5 Medium
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 more/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.CVE-2020-12108Fix available6.5 Medium
- graphicsmagick, debian linux, opensuse backports sle +1 more +3 moreGraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.CVE-2020-12672Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...CVE-2020-6831Fix available9.8 Critical
- Show moreLoading…