Skip to contentDebian Linux vulnerabilities
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2021-4069Fix available7.3 High
- gnu mailman, debian linux +1 moreCross Site Request Forgery in mailmanCVE-2021-44227Fix available8.8 High
- qemu, debian linux, redhat codeready linux builder +7 more +9 moreAn off-by-one error was found in the SCSI device emulation in QEMU. It could occur while...CVE-2021-3930Fix available6.5 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2021-4019Fix available7.1 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3984Fix available7.3 High
- bluez, debian linux +1 moreA heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any...CVE-2019-8922Fix available8.8 High
- bluez, debian linux +1 moreAn issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the...CVE-2019-8921Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +3 more +5 moreA memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user...CVE-2021-4002Fix available4.4 Medium
- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...CVE-2021-3975Public exploitFix available6.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...CVE-2021-28709Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28708Fix available8.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28707Fix available8.8 High
- debian linux, fedoraproject fedora, xen +2 moreguests may exceed their designated memory limit When a guest is permitted to have close to 16TiB...CVE-2021-28706Fix available8.6 High
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...CVE-2021-28705Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28704Fix available8.8 High
- google chrome, debian linux +1 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a...CVE-2021-38004Fix available4.3 Medium
- isync project isync, debian linux, fedoraproject fedora +2 moreA flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a...CVE-2021-44143Fix available9.8 Critical
- pgbouncer, debian linux, fedoraproject fedora +1 more +3 moreWhen PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can...CVE-2021-3935Fix available8.1 High
- php, debian linux, netapp clustered data ontap +1 more +3 moreSpecial characters break path parsing in XML functionsCVE-2021-21707Public exploitFix availableEPSS 25.3%5.3 Medium
- gerbv, debian linux, fedoraproject fedora +2 moreAn out-of-bounds write vulnerability exists in the drill format T-code tool number functionality...CVE-2021-40391Fix available10.0 Critical
- wireshark, debian linux +1 moreNULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...CVE-2021-39923Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3973Fix available7.3 High
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's...CVE-2021-44025Fix available6.1 Medium
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search...CVE-2021-44026In KEVPublic exploitFix availableEPSS 69.9%9.8 Critical
- wireshark, debian linux, fedoraproject fedora +2 moreUncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3...CVE-2021-39929Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...CVE-2021-39926Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...CVE-2021-39925Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...CVE-2021-39924Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...CVE-2021-39922Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...CVE-2021-39921Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2021-3974Fix available7.3 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad...CVE-2021-21900Fix available8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of...CVE-2021-21899Fix available8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::decompress18() functionality of...CVE-2021-21898Fix available8.8 High
- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2...CVE-2021-39928Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia...CVE-2021-43975Fix available6.7 Medium
- debian linux, linux kernel, fedoraproject fedora +12 more +14 moreIn the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb...CVE-2021-43976Fix available4.6 Medium
- ruby-lang date, ruby, debian linux +6 more +8 moreRegular expression denial of service vulnerability (ReDoS) in dateCVE-2021-41817Fix available7.5 High
- llhttp, debian linux, nodejs node +1 more +3 moreThe parser in accepts requests with a space (SP) right after the header name before the colon....CVE-2021-22959Fix available6.5 Medium
- gmplib gmp, debian linux, netapp active iq unified manager +8 more +10 moreGNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer...CVE-2021-43618Fix available7.5 High
- json-schema project json-schema, kriszyp kriszyp/json-schema, debian linux +2 morePrototype Pollution in kriszyp/json-schemaCVE-2021-3918Fix available9.8 Critical
- gnu mailman, debian linux +1 moreIn GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an...CVE-2021-43332Fix available6.5 Medium
- gnu mailman, debian linux +1 moreIn GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute...CVE-2021-43331Fix available6.1 Medium
- htmldoc project htmldoc, debian linux +1 moreA stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code...CVE-2021-43579Public exploitFix available7.8 High
- bluez, debian linux +1 moreMemory leak in BlueZCVE-2021-41229Fix available4.3 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +1 more +3 moreIn ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z ...CVE-2021-3941Fix available6.5 Medium
- cloudflare octorpki, debian linux +1 moreOctoRPKI crashes when processing GZIP bomb returned via malicious repositoryCVE-2021-3912Fix available4.2 Medium
- cloudflare octorpki, debian linux +1 moreInfinite certificate chain depth results in OctoRPKI running foreverCVE-2021-3908Fix available5.9 Medium
- cloudflare octorpki, debian linux +1 moreInfinite open connection causes OctoRPKI to hang foreverCVE-2021-3909Fix available4.4 Medium
- cloudflare octorpki, debian linux +1 moreNUL character in ROA causes OctoRPKI to crashCVE-2021-3910Fix available4.4 Medium
- Show moreLoading…