Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel +1 morekernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID...CVE-2021-35039Fix available7.8 High
- debian linux, linuxptp project linuxptp, fedoraproject fedora +4 more +6 moreA flaw was found in the ptp4l program of the linuxptp package. A missing length check when...CVE-2021-3570Fix available8.8 High
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots...CVE-2021-35197Fix available7.5 High
- debian linux, selinux project selinux, fedoraproject fedora +19 more +21 moreThe CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from...CVE-2021-36086Fix available3.3 Low
- djvulibre project djvulibre, debian linux, fedoraproject fedora +2 moreAn out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in...CVE-2021-3630Fix available5.5 Medium
- apache traffic server, debian linux +1 moreDynamic stack buffer overflow in cachekey pluginCVE-2021-35474Fix available9.8 Critical
- apache traffic server, debian linux +1 moreReading HTTP/2 frames too many timesCVE-2021-32567Fix available7.5 High
- apache traffic server, debian linux +1 moreSpecific sequence of HTTP/2 frames can cause ATS to crashCVE-2021-32566Fix available7.5 High
- apache traffic server, debian linux +1 moreHTTP Request Smuggling, content length with invalid chartersCVE-2021-32565Fix available7.5 High
- apache traffic server, debian linux +1 moreIncorrect handling of url fragment leads to cache poisoningCVE-2021-27577Fix available7.5 High
- golang go, debian linux +1 moreGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).CVE-2021-33196Fix available7.5 High
- debian linux, linux kernel +1 moreIn kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g.,...CVE-2021-33624Public exploitFix available4.7 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 moreSessionListener can prevent a session from being invalidated breaking logoutCVE-2021-34428Public exploitFix available2.9 Low
- dovecot, debian linux, fedoraproject fedora +2 moreThe submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp....CVE-2021-33515Fix available4.8 Medium
- gdraheim zziplib, debian linux, fedoraproject fedora +2 moreInfinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the...CVE-2020-18442Fix available3.3 Low
- qemu, debian linux, fedoraproject fedora +2 moreA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior...CVE-2021-3608Fix available6.0 Medium
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in...CVE-2021-3607Fix available6.0 Medium
- qemu, debian linux +1 moreA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs...CVE-2021-3582Fix available6.5 Medium
- academysoftwarefoundation openexr, debian linux, redhat enterprise linux +2 moreThere's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker...CVE-2021-3605Fix available5.5 Medium
- jdom, apache solr, tika +3 more +5 moreXML External Entity (XXE) Injection in JDOMCVE-2021-33813Fix availableEPSS 19.4%7.5 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30547Fix available8.8 High
- academysoftwarefoundation openexr, debian linux, redhat enterprise linux +2 moreThere's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An...CVE-2021-3598Fix available5.5 Medium
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3595Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3594Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3593Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3592Fix available3.8 Low
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreNULL pointer dereference on specially crafted HTTP/2 requestCVE-2021-31618Fix availableEPSS 52.1%7.5 High
- debian linux, linux kernel +1 morenet/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive...CVE-2021-34693Fix available5.5 Medium
- nextcloud desktop, debian linux +1 morenextcloud-desktop - security updateCVE-2021-22895Fix available5.9 Medium
- debian linux, long range zip project range zip +1 moreA null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows...CVE-2021-27345Fix available5.5 Medium
- debian linux, long range zip project range zip +1 moreA null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which...CVE-2020-25467Fix available5.5 Medium
- debian linux, long range zip project range zip +1 moreUse after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to...CVE-2021-27347Fix available5.5 Medium
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreUnexpected URL matching with 'MergeSlashes OFF'CVE-2021-30641Fix availableEPSS 51.8%5.3 Medium
- apache http server, debian linux, fedoraproject fedora +5 more +7 moreApache HTTP Server mod_session response handling heap overflowCVE-2021-26691Fix availableEPSS 68.1%9.8 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_session NULL pointer dereferenceCVE-2021-26690Public exploitFix availableEPSS 65.1%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_auth_digest possible stack overflow by one nul byteCVE-2020-35452Fix availableEPSS 53.2%7.3 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_proxy_http NULL pointer dereferenceCVE-2020-13950Fix availableEPSS 50.0%7.5 High
- [unknown] nettle, debian linux, netapp ontap select deploy administration utility +4 more +6 moreA flaw was found in the way nettle's RSA decryption functions handled specially crafted...CVE-2021-3580Fix available7.5 High
- debian linux, fedoraproject fedora, intel celeron processors firmware +4 more +6 moreObservable response discrepancy in some Intel(R) Processors may allow an authorized user to...CVE-2021-0089Fix available6.5 Medium
- amd all supported processors, arm cortex-a72, broadcom bcm2711 +6 more +8 moreAMD Speculative Code Store BypassCVE-2021-26313Fix available5.5 Medium
- intel connection manager, debian linux +1 moreConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in...CVE-2021-33833Fix available9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2021-28169Fix availableEPSS 78.5%5.3 Medium
- bluez, debian linux, redhat enterprise linux +2 moreImproper access control in BlueZ may allow an authenticated user to potentially enable...CVE-2021-0129Fix available5.7 Medium
- vmware rabbitmq, debian linux +1 moreRabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to...CVE-2021-22116Fix available7.5 High
- gnupg libgcrypt, debian linux, fedoraproject fedora +8 more +10 moreLibgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...CVE-2021-33560Public exploitFix available7.5 High
- debian linux, intel atom c3308, atom c3336 +65 more +67 moreDomain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an...CVE-2020-24513Fix available6.5 Medium
- debian linux, intel microcode, netapp fas\/aff bios +2 more +4 moreObservable timing discrepancy in some Intel(R) Processors may allow an authenticated user to...CVE-2020-24512Fix available3.3 Low
- debian linux, intel microcode, netapp fas\/aff bios +2 more +4 moreImproper isolation of shared resources in some Intel(R) Processors may allow an authenticated...CVE-2020-24511Fix available6.5 Medium
- debian linux, intel atom x5-e3930, atom x5-e3940 +211 more +213 moreIncomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially...CVE-2020-24489Fix available8.8 High
- the wireshark foundation wireshark, debian linux, oracle enterprise manager ops center +2 more +4 moreInfinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via...CVE-2021-22222Fix available7.5 High
- Show moreLoading…