Skip to contentDebian Linux vulnerabilities
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument...CVE-2021-3500Fix available7.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreAn out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in...CVE-2021-31916Fix available6.7 Medium
- klibc project klibc, debian linux +1 moreAn issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in...CVE-2021-31873Fix available9.8 Critical
- flarum framework, debian linux +1 moreLaravel allows environment manipulation via query stringCVE-2024-52301Public exploitFix availableEPSS 44.8%8.7 High
- graphviz, debian linux, fedoraproject fedora +2 moreBuffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows...CVE-2020-18032Fix available7.8 High
- fluidsynth, debian linux +1 moreUse after free in fluidsynthCVE-2021-21417Fix available7.2 High
- samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs)...CVE-2021-20254Fix available6.8 Medium
- redmine, debian linux +1 moreInsufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x...CVE-2021-31863Fix available7.5 High
- redmine, debian linux +1 moreRedmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the...CVE-2021-31864Fix available5.3 Medium
- redmine, debian linux +1 moreRedmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the...CVE-2021-31865Fix available5.3 Medium
- redmine, debian linux +1 moreRedmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker to learn the values of internal...CVE-2021-31866Fix available5.3 Medium
- isc bind, debian linux, isc bind9 +12 more +14 moreA second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackCVE-2021-25216Fix availableEPSS 83.0%8.1 High
- isc bind, debian linux, fedoraproject fedora +14 more +16 moreAn assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itselfCVE-2021-25215Fix availableEPSS 11.7%7.5 High
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreA broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedlyCVE-2021-25214Fix available6.5 Medium
- composer, debian linux, fedoraproject fedora +2 moreMissing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composerCVE-2021-29472Fix available8.8 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a...CVE-2019-25031Fix availableDisputed5.9 Medium
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc.CVE-2019-25032Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro.CVE-2019-25033Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an...CVE-2019-25034Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par.CVE-2019-25035Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in synth_cname.CVE-2019-25036Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an...CVE-2019-25037Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.CVE-2019-25038Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.CVE-2019-25039Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy.CVE-2019-25040Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy.CVE-2019-25041Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.CVE-2019-25042Fix availableDisputed9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who...CVE-2021-21226Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote...CVE-2021-21225Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreType confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute...CVE-2021-21224In KEVFix availableEPSS 84.2%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had...CVE-2021-21223Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who...CVE-2021-21222Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed...CVE-2021-21221Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21219Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21218Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21217Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote...CVE-2021-21216Fix availableEPSS 21.8%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote...CVE-2021-21215Fix availableEPSS 34.5%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21214Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21213Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72...CVE-2021-21212Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed...CVE-2021-21211Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote...CVE-2021-21210Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote...CVE-2021-21209Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed...CVE-2021-21208Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who...CVE-2021-21207Fix available8.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72...CVE-2021-21205Fix available8.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker...CVE-2021-21204Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21203Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who...CVE-2021-21202Fix available8.6 High
- Show moreLoading…