Skip to contentDebian Linux vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an...CVE-2021-21111Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker...CVE-2021-21110Public exploitFix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who...CVE-2021-21109Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had...CVE-2021-21108Fix available9.6 Critical
- debian linux, google chrome, fedoraproject fedora +2 moreUse after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote...CVE-2021-21107Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who...CVE-2021-21106Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a...CVE-2020-16043Fix available8.8 High
- videolan vlc media player, debian linux +1 moreA vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers...CVE-2020-26664Fix available7.8 High
- debian linux, nvidia gpu display driver, gpu driver +2 moreNVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode...CVE-2021-1056Public exploitFix available7.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36183Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36185Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...CVE-2020-8287Public exploitFix availableEPSS 16.3%6.5 Medium
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...CVE-2020-8265Fix available8.1 High
- uclouvain openjpeg, debian linux, oracle outside in technology +2 moreA flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows...CVE-2020-27844Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 more +4 moremwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux...CVE-2020-36158Fix available8.8 High
- ffmpeg, debian linux +1 moredecode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in...CVE-2020-35965Fix available7.5 High
- dovecot, debian linux, fedoraproject fedora +2 moreDovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an...CVE-2020-25275Fix available7.5 High
- dovecot, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker...CVE-2020-24386Fix available6.8 Medium
- gnu glibc, broadcom fabric operating system, debian linux +8 more +10 moreThe iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid...CVE-2019-25013Fix available5.9 Medium
- google android, debian linux +1 moreIn ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing...CVE-2021-0308Public exploitFix available6.8 Medium
- gssproxy project gssproxy, debian linux +1 moregssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in...CVE-2020-12658Fix availableDisputed9.8 Critical
- google libwebp, debian linux, netapp ontap select deploy administration utility +1 more +3 moreA flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an...CVE-2020-36332Fix available7.5 High
- google libwebp, apple ipados, iphone os +3 more +5 moreA flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function...CVE-2020-36331Fix available9.1 Critical
- google libwebp, apple ipados, iphone os +3 more +5 moreA flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function...CVE-2020-36330Fix available9.1 Critical
- google libwebp, apple ipados, iphone os +3 more +5 moreA flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread...CVE-2020-36329Fix available9.8 Critical
- google libwebp, apple ipados, iphone os +3 more +5 moreA flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function...CVE-2020-36328Fix available9.8 Critical
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff...CVE-2020-35524Fix available7.8 High
- libtiff, debian linux, netapp ontap select deploy administration utility +1 more +3 moreAn integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw...CVE-2020-35523Fix available7.8 High
- apache spamassassin, debian linux, fedoraproject fedora +2 moreApache SpamAssassin has an OS Command Injection vulnerabilityCVE-2020-1946Fix available9.8 Critical
- linbit csync2, debian linux +1 moreAn issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return...CVE-2019-15523Fix available5.3 Medium
- nokogiri, debian linux +1 moreXXE in NokogiriCVE-2020-26247Fix available2.6 Low
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreThere's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is...CVE-2020-27845Fix available5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide...CVE-2020-27843Fix available5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject extra packages for enterprise linux +8 more +10 moreThere's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to...CVE-2020-27842Fix available5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreThere's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker...CVE-2020-27841Fix available5.5 Medium
- wavpack, debian linux, fedoraproject fedora +2 moreWavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an...CVE-2020-35738Fix available6.1 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 morelinkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a...CVE-2020-35730In KEVPublic exploitFix availableEPSS 30.9%6.1 Medium
- fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 moreSerialization gadget exploit in jackson-databindCVE-2020-35728Public exploitFix availableEPSS 12.5%8.1 High
- td-agent-builder project td-agent-builder, debian linux +1 moreThe td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges...CVE-2020-28169Public exploit7.0 High
- kovidgoyal kitty, debian linux +1 moreThe Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to...CVE-2020-35605Fix available9.8 Critical
- postsrsd project postsrsd, debian linux +1 moresrs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU...CVE-2020-35573Fix available7.5 High
- Show moreLoading…