Skip to contentDebian Linux vulnerabilities
- qemu, debian linux +1 morehw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.CVE-2020-25625Fix available5.3 Medium
- qemu, debian linux +1 moreQEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd...CVE-2020-25085Fix available5.0 Medium
- qemu, debian linux +1 moreQEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is...CVE-2020-25084Fix available3.2 Low
- qemu, debian linux +1 morehw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the...CVE-2020-25624Fix available5.0 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...CVE-2020-15678Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...CVE-2020-15677Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...CVE-2020-15676Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...CVE-2020-15673Fix available8.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf...CVE-2020-14351Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel...CVE-2020-26088Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing...CVE-2020-25603Fix available7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of...CVE-2020-25596Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers...CVE-2020-25604Fix available4.7 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when...CVE-2020-25602Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() /...CVE-2020-25601Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32...CVE-2020-25600Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of...CVE-2020-25599Fix available7.0 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register...CVE-2020-25595Fix available7.8 High
- gon project gon, canonical ubuntu linux, debian linux +2 moreGon gem lack of escaping certain input when outputting as JSONCVE-2020-25739Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote...CVE-2020-6576Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreRace in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had...CVE-2020-6575Fix available8.3 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102...CVE-2020-6574Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote...CVE-2020-6573Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15966Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to...CVE-2020-15965Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote...CVE-2020-15964Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15963Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote...CVE-2020-15962Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15961Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker...CVE-2020-15960Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an...CVE-2020-15959Fix available4.3 Medium
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreInteger overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to...CVE-2019-14562Fix available5.5 Medium
- debian linux, linux kernel +1 moreA flaw was found in the Linux kernel in versions from 2.2.3 through 5.9.rc5. When changing screen...CVE-2020-14390Fix available5.6 Medium
- owasp modsecurity, debian linux +1 more** DISPUTED ** Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special...CVE-2020-15598Fix availableDisputed7.5 High
- fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 moreUnsafe Deserialization in jackson-databindCVE-2020-24750Public exploitFix available8.1 High
- perl dbi, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation...CVE-2019-20919Fix available4.7 Medium
- google android, debian linux, opensuse leap +1 more +3 moreIn create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This...CVE-2020-0427Fix available5.5 Medium
- microsoft perl-dbi, debian linux, fedoraproject fedora +2 more +4 moreA buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply...CVE-2020-14393Fix available7.1 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata...CVE-2020-14385Fix available5.5 Medium
- google brotli, canonical ubuntu linux, debian linux +7 more +9 moreBuffer overflow in Brotli libraryCVE-2020-8927Public exploitFix available5.3 Medium
- debian linux, linux kernel, opensuse leap +2 moreThe rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used...CVE-2020-25284Fix available4.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8...CVE-2020-25285Fix available6.4 Medium
- red hat ansible, redhat ansible engine, debian linux +2 moreInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansibleCVE-2020-14332Fix available5.5 Medium
- action view project view, debian linux, fedoraproject fedora +1 more +3 moreXSS in Action ViewCVE-2020-15169Public exploitFix available5.4 Medium
- inspircd, debian linux +1 moreAn issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains...CVE-2019-20917Fix available6.5 Medium
- inspircd, debian linux +1 moreAn issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains...CVE-2020-25269Fix available6.5 Medium
- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...CVE-2020-14392Fix available5.5 Medium
- red hat ansible, debian linux, redhat ansible engine +2 moreImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansibleCVE-2020-14330Fix available5.0 Medium
- atftp project atftp, debian linux, opensuse leap +2 moreAn exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp...CVE-2020-6097Fix available7.5 High
- apache activemq, debian linux, oracle communications diameter signaling router +1 more +3 moreImproper Authentication in Apache ActiveMQCVE-2020-13920Fix available5.9 Medium
- Show moreLoading…