Skip to contentDebian Linux vulnerabilities
- google android, debian linux, fedoraproject fedora +2 moreIn p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds...CVE-2021-0326Public exploitFix available7.5 High
- debian linux, linux kernel +1 morenbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use...CVE-2021-3348Fix available7.0 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use...CVE-2021-3347Public exploitFix available7.8 High
- gnu glibc, debian linux, fujitsu m10-1 firmware +11 more +13 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing...CVE-2021-3326Fix available7.5 High
- apache activemq, artemis, debian linux +5 more +7 moreActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bindCVE-2021-26117Fix availableEPSS 11.5%7.5 High
- golang go, debian linux, fedoraproject fedora +2 more +4 moreIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...CVE-2021-3114Fix available6.5 Medium
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...CVE-2021-3156In KEVPublic exploitFix availableEPSS 100.0%7.8 High
- mozilla firefox, debian linux +1 moreFurther techniques that built on the slipstream research combined with a malicious webpage could...CVE-2021-23961Fix available7.4 High
- openldap, apple mac os x, macos +4 more +6 moreAn integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the...CVE-2020-36221Fix availableEPSS 85.0%7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the...CVE-2020-36222Fix availableEPSS 77.2%7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd...CVE-2020-36224Fix available7.5 High
- openldap, apple macos, debian linux +3 more +5 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the...CVE-2020-36225Fix available7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and...CVE-2020-36226Fix available7.5 High
- openldap, apple macos, debian linux +3 more +5 moreAn integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the...CVE-2020-36228Fix availableEPSS 85.0%7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the...CVE-2020-36229Fix available7.5 High
- openldap, apache bookkeeper, apple mac os x +5 more +7 moreA flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X...CVE-2020-36230Fix availableEPSS 12.1%7.5 High
- openldap, apple macos, debian linux +3 more +5 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the...CVE-2020-36227Fix availableEPSS 77.2%7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return...CVE-2020-36223Fix available7.5 High
- qemu, debian linux +1 moreide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because...CVE-2020-29443Fix available3.9 Low
- identitypython pysaml2, debian linux +1 moreOpen default xmlsec1 key-type preferenceCVE-2021-21239Public exploitFix available6.5 Medium
- fasterxml jackson-databind, apache nifi, debian linux +6 more +8 moreDeserialization of untrusted data in jackson-databindCVE-2021-20190Fix available8.1 High
- mutt, debian linux, fedoraproject fedora +2 morerfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox...CVE-2021-3181Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 more** DISPUTED ** fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export...CVE-2021-3178Fix availableDisputed6.5 Medium
- python, debian linux, fedoraproject fedora +10 more +12 morePython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...CVE-2021-3177Fix availableEPSS 24.0%9.8 Critical
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...CVE-2020-25687Fix availableEPSS 94.0%5.9 Medium
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check...CVE-2020-25686Public exploitFix available3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...CVE-2020-25685Fix available3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...CVE-2020-25684Fix available3.7 Low
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...CVE-2020-25683Fix availableEPSS 88.8%5.9 Medium
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the...CVE-2020-25682Fix availableEPSS 75.1%8.1 High
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...CVE-2020-25681Fix availableEPSS 88.3%8.1 High
- libsdl simple directmedia layer, debian linux, fedoraproject fedora +2 moreSDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in...CVE-2020-14410Fix available5.4 Medium
- libsdl simple directmedia layer, debian linux, fedoraproject fedora +1 more +3 moreSDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy...CVE-2020-14409Fix available7.8 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDirectory Traversal in Archive_TarCVE-2020-36193In KEVFix availableEPSS 70.6%7.5 High
- bottlepy bottle, debian linux +1 moreWeb Cache PoisoningCVE-2020-28473Fix available6.8 Medium
- imagemagick, debian linux +1 moreIn ImageMagick, there is an outside the range of representable values of type 'unsigned int' at...CVE-2020-27768Fix available3.3 Low
- apache tomcat, debian linux, oracle agile product lifecycle management +2 moreApache Tomcat information disclosureCVE-2021-24122Fix availableEPSS 22.9%5.9 Medium
- apache xmlbeans, debian linux, netapp oncommand unified manager core package +4 more +6 moreXMLBeans XML Entity ExpansionCVE-2021-23926Fix available9.1 Critical
- php, debian linux, netapp clustered data ontap +2 moreFILTER_VALIDATE_URL accepts URLs with invalid userinfoCVE-2020-7071Fix available5.3 Medium
- debian linux, flatpak +1 moreFlatpak sandbox escape via spawn portalCVE-2021-21261Fix available7.3 High
- clusterlabs crmsh, debian linux +1 moreClusterLabs crmsh vulnerable to shell code injectionCVE-2020-35459Fix available7.8 High
- python pillow, debian linux, fedoraproject fedora +2 morePillow Out-of-bounds ReadCVE-2020-35653Fix available7.1 High
- sudo project sudo, debian linux, fedoraproject fedora +3 more +5 moreThe sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform...CVE-2021-23239Fix available2.5 Low
- debian linux, linux kernel, fedoraproject fedora +2 moreIn drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier...CVE-2020-28374Fix available8.1 High
- redcarpet project redcarpet, debian linux +1 moreInjection in RedcarpetCVE-2020-26298Fix available6.8 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker...CVE-2021-21116Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUser after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote...CVE-2021-21115Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to...CVE-2021-21114Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to...CVE-2021-21113Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to...CVE-2021-21112Fix available8.8 High
- Show moreLoading…