Skip to contentDebian Linux vulnerabilities
- imagemagick, debian linux +1 moreThere are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is...CVE-2020-25666Fix available3.3 Low
- imagemagick, debian linux +1 moreThe PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine...CVE-2020-25665Fix available5.5 Medium
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- nlnet labs nsd, unbound, debian linux +1 more +3 moreLocal symlink attack in Unbound and NSDCVE-2020-28935Fix available5.5 Medium
- awstats, debian linux, fedoraproject fedora +2 moreIn AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it...CVE-2020-29600Fix available9.8 Critical
- imagemagick, debian linux +1 moreImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which...CVE-2020-29599Public exploitFix available7.8 High
- debian linux, linux kernel +1 moreA vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it...CVE-2020-27830Fix available5.5 Medium
- libpng pngcheck, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a...CVE-2020-27818Public exploitFix available3.3 Low
- openstack horizon, debian linux +1 moreOpenStack Horizon Open redirect in workflow formsCVE-2020-29565Fix available6.1 Medium
- qemu, debian linux +1 morehw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer...CVE-2020-28916Fix available5.5 Medium
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file...CVE-2020-27775Fix available3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...CVE-2020-27774Fix available3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted...CVE-2020-27773Fix available3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is...CVE-2020-27772Fix available3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreIn RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex()...CVE-2020-27771Fix available3.3 Low
- imagemagick, debian linux +1 moreDue to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow...CVE-2020-27770Fix available5.5 Medium
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file...CVE-2020-27767Fix available3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...CVE-2020-27766Fix available7.8 High
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file...CVE-2020-27765Fix available3.3 Low
- apache tomcat, debian linux, netapp element plug-in +9 more +11 moreApache Tomcat: Request header mix-up between HTTP/2 streamsCVE-2020-17527Public exploitFix availableEPSS 24.6%7.5 High
- imagemagick, debian linux +1 moreIn /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t...CVE-2020-27764Fix available3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file...CVE-2020-27763Fix available3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is...CVE-2020-27762Fix available5.5 Medium
- imagemagick, debian linux +1 moreWritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which...CVE-2020-27761Fix available3.3 Low
- imagemagick, debian linux +1 moreIn `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to...CVE-2020-27760Fix available5.5 Medium
- imagemagick, debian linux +1 moreIn IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and...CVE-2020-27759Fix available3.3 Low
- hibernate orm, debian linux, oracle communications cloud native core console +2 more +4 moreSQL injection in hibernate-coreCVE-2020-25638Fix available7.4 High
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- gorillatoolkit websocket, debian linux +1 moreInteger overflow in github.com/gorilla/websocketCVE-2020-27813Fix available7.5 High
- readymedia project readymedia, debian linux +1 moreReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious...CVE-2020-28926Public exploitFix availableEPSS 13.1%9.8 Critical
- genivi diagnostic log and trace, debian linux +1 moreA buffer overflow in the dlt_filter_load function in dlt_common.c in dlt-daemon 2.8.5 (GENIVI...CVE-2020-29394Fix available7.8 High
- debian linux, linux kernel, netapp aff a250 firmware +9 more +11 moreCVE-2020-27815 affecting package kernel for versions less than 5.15.135.1-2CVE-2020-27815Public exploitFix available7.8 High
- uclouvain openjpeg, debian linux +1 moreA heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An...CVE-2020-27814Fix available7.8 High
- containerd, debian linux, fedoraproject fedora +2 morecontainerd-shim API Exposed to Host Network ContainersCVE-2020-15257Public exploitFix available5.2 Medium
- debian linux, linux kernel, netapp 500f firmware +5 more +7 moreAn issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory...CVE-2020-29374Fix available3.6 Low
- eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 moreBuffer not correctly recycled in Gzip Request inflationCVE-2020-27218Fix available4.8 Medium
- libslirp project libslirp, debian linux, fedoraproject fedora +2 moreModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement updateCVE-2020-29129Fix available4.3 Medium
- libslirp project libslirp, debian linux, fedoraproject fedora +2 moreslirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain...CVE-2020-29130Fix available4.3 Medium
- lxml, debian linux, fedoraproject fedora +5 more +7 morelxml vulnerable to Cross-site ScriptingCVE-2020-27783Fix available6.1 Medium
- x11vnc project x11vnc, debian linux, fedoraproject fedora +2 morescan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other...CVE-2020-29074Fix available8.8 High
- freedesktop poppler, debian linux, redhat enterprise linux +2 moreA flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote...CVE-2020-27778Fix available7.5 High
- highlightjs highlight.js, debian linux, oracle mysql enterprise monitor +2 morePrototype Pollution in highlight.jsCVE-2020-26237Fix available5.8 Medium
- musl-libc musl, debian linux, fedoraproject fedora +1 more +3 moreIn musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer...CVE-2020-28928Fix available5.5 Medium
- schedmd slurm, debian linux +1 moreSlurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized...CVE-2020-27746Fix available3.7 Low
- schedmd slurm, debian linux +1 moreSlurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.CVE-2020-27745Fix available9.8 Critical
- spip, debian linux +1 moreImproper Input Validation in SPIPCVE-2020-28984Fix available9.8 Critical
- mutt, neomutt, debian linux +2 moreMutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed...CVE-2020-28896Fix available5.3 Medium
- debian linux, fedoraproject fedora, librdf raptor rdf syntax library +2 moreA malformed input file can lead to a segfault due to an out of bounds array access in...CVE-2020-25713Fix available6.5 Medium
- pdfresurrect project pdfresurrect, debian linux, fedoraproject fedora +2 morePDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in...CVE-2020-20740Fix available7.8 High
- libvips, debian linux, fedoraproject fedora +2 moreim_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an...CVE-2020-20739Fix available5.3 Medium
- Show moreLoading…