Skip to contentDebian Linux vulnerabilities
- golang go, debian linux, fedoraproject fedora +1 more +3 moreWithdrawn Advisory: Infinite loop in xzCVE-2020-16845Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...CVE-2020-6541Fix availableEPSS 21.6%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreBuffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...CVE-2020-6540Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...CVE-2020-6539Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105...CVE-2020-6538Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute...CVE-2020-6537Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...CVE-2020-6532Fix available8.8 High
- firejail project firejail, debian linux, fedoraproject fedora +1 more +3 moreFirejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output...CVE-2020-17368Fix available9.8 Critical
- firejail project firejail, debian linux, fedoraproject fedora +1 more +3 moreFirejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option,...CVE-2020-17367Fix available7.8 High
- canonical ubuntu linux, debian linux, the xorg project xorg-x11-server +1 more +3 moreA flaw was found in the way xserver memory was not properly initialized. This could leak parts of...CVE-2020-14347Fix available5.5 Medium
- lilypond, debian linux, fedoraproject fedora +2 more +4 morescm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when ...CVE-2020-17353Fix available9.8 Critical
- google android, debian linux +1 moreIn LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds...CVE-2020-0256Fix available6.8 Medium
- kde ark, canonical ubuntu linux, debian linux +2 more +4 moreIn kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the...CVE-2020-16116Fix available3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain...CVE-2020-16166Fix available3.7 Low
- libssh, canonical ubuntu linux, debian linux +2 more +4 morelibssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.CVE-2020-16135Fix available5.9 Medium
- gnome evolution-data-server, debian linux +1 moreIn GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with...CVE-2020-16117Fix available5.9 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shimCVE-2020-15705Fix available6.4 Medium
- debian linux, gnu grub2, canonical ubuntu linux +13 more +15 moreGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.CVE-2020-15707Fix available5.7 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.CVE-2020-15706Fix available6.4 Medium
- gnu grub2, open source grub, debian linux +2 more +4 moreA flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack...CVE-2020-10713Public exploitFix available8.2 High
- trusteddomain opendmarc, debian linux, fedoraproject fedora +2 moreOpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the...CVE-2020-12460Fix available9.8 Critical
- libetpan project libetpan, debian linux, fedoraproject fedora +1 more +3 moreLibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS...CVE-2020-15953Fix available7.4 High
- kde kmail, debian linux +1 moreKDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI...CVE-2020-15954Fix available6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger Overflow in FreeRDPCVE-2020-15103Fix available3.5 Low
- qemu, canonical ubuntu linux, debian linux +2 morehw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow....CVE-2020-15863Fix available5.3 Medium
- luajit, canonical ubuntu linux, debian linux +2 moreLuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is...CVE-2020-15890Fix available7.5 High
- qemu, debian linux +1 moreQEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an...CVE-2020-15859Fix available3.3 Low
- mruby, debian linux +1 moremruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in...CVE-2020-15866Fix available9.8 Critical
- cisco clamav, canonical ubuntu linux, debian linux +1 more +3 moreClam AntiVirus (ClamAV) Software Null Pointer Dereference VulnerabilityCVE-2020-3481Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6536Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote...CVE-2020-6535Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6534Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6533Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreSide-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed...CVE-2020-6531Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an...CVE-2020-6530Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...CVE-2020-6529Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a...CVE-2020-6528Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote...CVE-2020-6527Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a...CVE-2020-6526Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6525Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6524Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6523Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89...CVE-2020-6522Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreSide-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a...CVE-2020-6521Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreBuffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6520Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 morePolicy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass...CVE-2020-6519Public exploitFix availableEPSS 10.3%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote...CVE-2020-6518Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6517Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 morePolicy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak...CVE-2020-6516Public exploitFix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6515Fix available8.8 High
- Show moreLoading…