Skip to contentDebian Linux vulnerabilities
- academysoftwarefoundation openexr, debian linux +1 moreA flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file...CVE-2021-20299Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information...CVE-2021-34556Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information...CVE-2021-35477Fix available5.5 Medium
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before...CVE-2021-32558Fix available7.5 High
- exiv2, debian linux, fedoraproject fedora +2 moreAn integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap...CVE-2021-31292Fix available7.5 High
- debian linux, lemonldap-ng lemonldap\ +1 moreAn issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to...CVE-2021-35472Fix available8.8 High
- teluu pjsip, debian linux, pjsip pjproject +2 moreDenial of Service in PJSIPCVE-2021-32686Fix available5.9 Medium
- mit kerberos 5, debian linux, netapp active iq unified manager +7 more +9 moreec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...CVE-2021-36222Fix availableEPSS 10.5%7.5 High
- oisf suricata, debian linux, fedoraproject fedora +2 moreSuricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."CVE-2021-35063Fix available7.5 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA vulnerability was found in the Linux kernel in versions before v5.14-rc1. Missing size...CVE-2021-3655Fix available3.3 Low
- debian linux, netapp cloud backup, openidc mod auth openidc +2 moreFormat string bug in the Redis cache implementationCVE-2021-32785Fix available5.3 Medium
- redis, debian linux, fedoraproject fedora +2 moreInteger overflow issues with *BIT commands on 32-bit systemsCVE-2021-32761Fix availableEPSS 30.1%7.5 High
- google chrome, xmlsoft libxslt, debian linux +1 more +3 moreNokogiri has vulnerable dependencies on libxml2 and libxsltCVE-2021-30560Fix availableEPSS 20.4%8.8 High
- debian linux, fedoraproject fedora, php archive tar +2 moreDirectory Traversal in Archive_TarCVE-2021-32610Fix availableEPSS 73.4%7.1 High
- artifex mupdf, debian linux +1 moreArtifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function...CVE-2020-19609Fix available5.5 Medium
- debian linux, linux kernel, oracle communications cloud native core binding support function +2 more +4 morehso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls...CVE-2021-37159Fix available6.4 Medium
- haxx libcurl, debian linux, fedoraproject fedora +33 more +35 morelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...CVE-2021-22924Public exploitFix available3.7 Low
- oracle graalvm, debian linux, oracle jdk +3 more +5 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-2388Fix available7.5 High
- oracle graalvm, debian linux, fedoraproject fedora +4 more +6 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-2341Fix available3.1 Low
- debian linux, nvidia gpu display driver +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...CVE-2021-1095Fix available5.5 Medium
- debian linux, nvidia gpu display driver +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...CVE-2021-1094Fix available6.1 Medium
- debian linux, nvidia gpu display driver +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the...CVE-2021-1093Fix available6.2 Medium
- gnu glibc, debian linux, netapp active iq unified manager +7 more +9 moreThe wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary...CVE-2021-35942Fix available9.1 Critical
- gnu aspell, debian linux, fedoraproject fedora +2 moreobjstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top ...CVE-2019-25051Fix available7.8 High
- systemd project systemd, debian linux, fedoraproject fedora +5 more +7 morebasic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value...CVE-2021-33910Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 morefs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict...CVE-2021-33909Public exploitFix available7.8 High
- libsndfile project libsndfile, debian linux, fedoraproject fedora +2 moreA heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows...CVE-2021-3246Fix available8.8 High
- oracle graalvm, debian linux, oracle jdk +3 more +5 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-2369Fix available4.3 Medium
- the wireshark foundation wireshark, debian linux +1 moreCrash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service...CVE-2021-22235Fix available7.5 High
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer...CVE-2020-36426Fix available7.5 High
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check...CVE-2020-36425Fix available5.3 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for...CVE-2020-36424Fix available4.7 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext...CVE-2020-36423Fix available7.5 High
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC...CVE-2020-36422Fix available5.3 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular...CVE-2020-36421Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreA flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found...CVE-2021-3640Fix available7.0 High
- sciruby nmatrix, ublockorigin ublock origin, debian linux +1 more +3 moreuBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter...CVE-2021-36773Fix available7.5 High
- icinga, debian linux, icinga icinga2 +2 morePasswords used to access external services inadvertently exposed through APICVE-2021-32743Fix available8.8 High
- icinga, debian linux, icinga icinga2 +2 moreResults of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identitiesCVE-2021-32739Fix available8.8 High
- ruby-lang rdoc, debian linux, oracle jd edwards enterpriseone tools +2 moreArbitrary Code Execution in RdocCVE-2021-31799Fix available7.0 High
- varnish-cache varnish cache, varnish cache project cache, debian linux +1 more +3 moreVarnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a...CVE-2021-36740Fix available6.5 Medium
- arm mbed tls, debian linux, fedoraproject fedora +2 moreIn Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding...CVE-2021-24119Fix available4.9 Medium
- python pillow, debian linux, fedoraproject fedora +2 moreBuffer Overflow in PillowCVE-2021-34552Fix available9.8 Critical
- ruby-lang ruby, debian linux, oracle jd edwards enterpriseone tools +2 moreAn issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A...CVE-2021-31810Fix available5.8 Medium
- exiv2, debian linux +1 moreA buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a...CVE-2020-19716Fix available6.5 Medium
- apache tomcat, tomee, debian linux +19 more +21 moreIncorrect Transfer-Encoding handling with HTTP/1.0CVE-2021-33037Fix availableEPSS 74.7%5.3 Medium
- apache tomcat, debian linux, oracle communications cloud native core policy +4 more +6 moreAuth weakness in JNDIRealmCVE-2021-30640Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreAn out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in...CVE-2021-3612Fix available7.8 High
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events...CVE-2021-21779Fix available6.8 Medium
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the way certain events are processed for ImageLoader...CVE-2021-21775Fix available6.8 Medium
- Show moreLoading…