Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU"...CVE-2021-28950Fix available5.5 Medium
- kramdown project kramdown, debian linux, fedoraproject fedora +2 moreRemote code execution in KramdownCVE-2021-28834Fix available9.8 Critical
- busybox, debian linux, fedoraproject fedora +2 moredecompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result...CVE-2021-28831Fix available7.5 High
- galeracluster wsrep, mariadb, percona server +1 more +3 moreA remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28,...CVE-2021-27928Public exploitFix availableEPSS 38.2%7.2 High
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreImportant: squid:4 security updateCVE-2020-25097Fix available8.6 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by...CVE-2020-27171Fix available6.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs...CVE-2020-27170Fix available4.7 Medium
- qemu, debian linux, fedoraproject fedora +1 more +3 moreA potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in...CVE-2021-3416Fix available6.0 Medium
- shibboleth service provider, debian linux +1 moreShibboleth Service Provider before 3.2.1 allows content injection because template generation...CVE-2021-28963Fix available5.3 Medium
- pygments, debian linux, fedoraproject fedora +2 morePygments vulnerable to Regular Expression Denial of Service (ReDoS)CVE-2021-27291Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 morertw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5...CVE-2021-28660Fix available8.8 High
- debian shadow, linux +1 moreThe Debian shadow package before 4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical...CVE-2017-20002Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to...CVE-2021-21193In KEVPublic exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote...CVE-2021-21192Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to...CVE-2021-21191Fix available8.8 High
- lynx project lynx, debian linux, fedoraproject fedora +2 moreLynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers...CVE-2021-38165Fix available5.3 Medium
- the wireshark foundation wireshark, debian linux, oracle zfs storage appliance +2 moreImproper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code...CVE-2021-22191Fix available6.3 Medium
- debian courier-authlib, linux +1 moreThe Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a ...CVE-2021-28374Fix available7.5 High
- red hat ansible, redhat ansible engine, debian linux +2 more +4 moreAnsible Exposes Sensitive InformationCVE-2021-20228Fix available7.5 High
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in...CVE-2020-36281Fix available7.5 High
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to...CVE-2020-36279Fix available7.5 High
- xmldom, debian linux +1 moreMisinterpretation of malicious XML inputCVE-2021-21366Fix available4.3 Medium
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.CVE-2020-36278Fix available7.5 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +4 more +6 moreAn issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with...CVE-2021-28153Fix available5.3 Medium
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left...CVE-2020-36277Fix available7.5 High
- debian linux, flatpak, fedoraproject fedora +2 moreSandbox escape via special tokens in .desktop fileCVE-2021-21381Fix available7.1 High
- teluu pjsip, debian linux, pjsip pjproject +2 moreCrash in receiving updated SDP answer after initial SDP negotiation failedCVE-2021-21375Fix available6.5 Medium
- apache velocity tools, debian linux +1 moreVelocity Tools XSS VulnerabilityCVE-2020-13959Fix available6.1 Medium
- apache velocity engine, wss4j, debian linux +13 more +15 moreVelocity Sandbox BypassCVE-2020-13936Fix availableEPSS 22.7%8.8 High
- 3mf lib3mf, debian linux, fedoraproject fedora +2 moreA use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality...CVE-2021-21772Public exploitFix available8.1 High
- squid-cache squid, debian linux, fedoraproject fedora +2 moreSquid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure...CVE-2021-28116Fix availableEPSS 12.9%3.7 Low
- qemu, debian linux +1 moreA stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device...CVE-2021-20255Fix available5.5 Medium
- netty io.netty:netty-codec-http2, netty, apache kudu +6 more +8 morePossible request smuggling in HTTP/2 due missing validationCVE-2021-21295Fix availableEPSS 18.9%5.9 Medium
- git, apple xcode, debian linux +1 more +3 moremalicious repositories can execute remote code while cloningCVE-2021-21300Public exploitFix availableEPSS 88.5%8.0 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed...CVE-2021-20276Fix available7.5 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in...CVE-2021-20275Fix available7.5 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy...CVE-2021-20273Fix available7.5 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted...CVE-2021-20272Fix available7.5 High
- pygments, debian linux, fedoraproject fedora +5 more +7 moreInfinite Loop in PygmentsCVE-2021-20270Fix available7.5 High
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is...CVE-2021-20245Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21190Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21189Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21188Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21187Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72...CVE-2021-21186Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an...CVE-2021-21185Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21184Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21183Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21182Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreSide-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21181Fix available6.5 Medium
- Show moreLoading…