Skip to contentDebian Linux vulnerabilities
- google android, debian linux +1 moreProduct: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernelCVE-2021-39713Fix available7.0 High
- xmlsoft libxml2, apple ipados, iphone os +36 more +38 morevalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.CVE-2022-23308Fix available7.5 High
- blender, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds...CVE-2022-0546Fix available7.8 High
- blender, debian linux +1 moreAn integer overflow in the processing of loaded 2D images leads to a write-what-where...CVE-2022-0545Fix available7.8 High
- blender, debian linux +1 moreAn integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly...CVE-2022-0544Fix available5.5 Medium
- usbguard project usbguard, debian linux, fedoraproject fedora +2 moreAn issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon...CVE-2019-25058Fix available7.8 High
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in...CVE-2021-3596Fix available6.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0729Fix available7.8 High
- cyrusimap cyrus-sasl, debian linux, fedoraproject fedora +8 more +10 moreIn Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for...CVE-2022-24407Fix available8.8 High
- debian linux, linux kernel, netapp h300e +10 more +12 morenet/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain...CVE-2022-25636Public exploitFix available7.8 High
- audiofile, debian linux, fedoraproject fedora +2 moreIn autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo...CVE-2022-24599Fix available6.5 Medium
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 moreUse after free in PJSIPCVE-2022-23608Fix available8.1 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0714Fix availableEPSS 12.7%8.4 High
- vim, vim vim/vim, apple macos +2 more +4 moreNULL Pointer Dereference in vim/vimCVE-2022-0696Fix available6.2 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10...CVE-2022-25375Public exploitFix available5.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0685Fix available8.4 High
- debian linux, fedoraproject fedora, isync project isync +1 more +3 moreA flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large...CVE-2021-3657Fix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.CVE-2022-25314Public exploitFix available7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.CVE-2022-25315Public exploitFix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via...CVE-2022-25313Public exploitFix available6.5 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow...CVE-2022-0585Fix available4.3 Medium
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44730Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreStack-based Buffer Overflow in vim/vimCVE-2022-0629Fix available8.4 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44731Public exploitFix available7.8 High
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23804Fix available7.8 High
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23803Fix available7.8 High
- debian linux, linux kernel +1 moreA flaw null pointer dereference in the Linux kernel UDF file system functionality was found in...CVE-2022-0617Fix available5.5 Medium
- postgresql jdbc driver, debian linux +1 morepgjdbc Arbitrary File Write VulnerabilityCVE-2022-26520Fix availableDisputed9.8 Critical
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreAn issue was discovered in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks...CVE-2022-25258Public exploitFix available4.6 Medium
- debian linux, teluu pjsip +1 moreBuffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer'...CVE-2021-43303Fix available9.8 Critical
- debian linux, teluu pjsip +1 moreRead out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled ...CVE-2021-43302Fix available9.1 Critical
- debian linux, teluu pjsip +1 moreStack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled ...CVE-2021-43301Fix available9.8 Critical
- debian linux, teluu pjsip +1 moreStack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename'...CVE-2021-43300Fix available9.8 Critical
- debian linux, teluu pjsip +1 moreStack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename'...CVE-2021-43299Fix available9.8 Critical
- libexpat project libexpat, debian linux, oracle http server +5 more +7 morexmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...CVE-2022-25236Public exploitFix availableEPSS 35.3%9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 morexmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...CVE-2022-25235Public exploitFix available9.8 Critical
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreThere is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to...CVE-2021-4115Fix available5.5 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreInfinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...CVE-2022-0586Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreCrash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...CVE-2022-0583Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreUnaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11...CVE-2022-0582Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreCrash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial...CVE-2022-0581Fix available6.3 Medium
- zsh, apple mac os x, macos +2 more +4 moreIn zsh before 5.8.1, an attacker can achieve code execution if they control a command output...CVE-2021-45444Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0572Fix availableEPSS 26.5%8.4 High
- puma, rubyonrails rails, debian linux +1 more +3 moreInformation Exposure when using Puma with RailsCVE-2022-23634Fix available8.0 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moredrivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.CVE-2022-24958Fix available7.8 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in...CVE-2022-24959Fix available5.5 Medium
- golang go, debian linux, netapp beegfs csi driver +3 more +5 moreRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...CVE-2022-23772Fix available7.5 High
- golang go, debian linux, netapp beegfs csi driver +3 more +5 moreCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...CVE-2022-23806Fix available9.1 Critical
- rails, debian linux +1 moreExposure of sensitive information in Action PackCVE-2022-23633Fix available7.4 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in...CVE-2022-0562Fix available5.5 Medium
- Show moreLoading…