Skip to contentDebian Linux vulnerabilities
- libtiff, debian linux +1 moreA flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at...CVE-2022-2520Fix available6.5 Medium
- libtiff, debian linux +1 moreThere is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1CVE-2022-2519Fix available6.5 Medium
- snakeyaml project snakeyaml, debian linux +1 moreDenial of Service (DoS)CVE-2022-25857Fix available7.5 High
- freedesktop poppler, debian linux, fedoraproject fedora +2 morePoppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder ...CVE-2022-38784Fix available7.8 High
- debian linux, gnu inetutils, mit kerberos 5 +1 more +3 moretelnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a...CVE-2022-39028Fix available7.5 High
- [unknown] dpdk, debian linux, dpdk data plane development kit +6 more +8 moreA permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker...CVE-2022-2132Fix available8.6 High
- asterisk certified asterisk, digium asterisk, debian linux +2 moreres_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2...CVE-2021-46837Fix available6.5 Medium
- libmodbus, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.CVE-2022-0367Fix available7.8 High
- libtiff, debian linux, netapp ontap select deploy administration utility +2 moreLibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing...CVE-2022-2953Fix available5.5 Medium
- openstack keystone, debian linux, redhat openstack platform +2 moreOpenstack Keystone Incorrect Authorization vulnerabilityCVE-2021-3563Fix available7.4 High
- qemu, debian linux +1 moreA deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset ...CVE-2021-3735Fix available4.4 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreA flaw was found in the way the dumpable flag setting was handled when certain SUID binaries...CVE-2021-3864Public exploitFix available7.0 High
- debian linux, linux kernel, redhat enterprise linux +1 more +3 moreA flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a...CVE-2022-0171Fix available5.5 Medium
- apache libapreq2, debian linux, fedoraproject fedora +2 morelibapreq2 multipart form parse memory corruptionCVE-2022-22728Fix available7.5 High
- apple ipados, macos, safari +7 more +9 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...CVE-2022-32893In KEVFix availableEPSS 10.5%8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA flaw use after free in the Linux kernel NILFS file system was found in the way user triggers...CVE-2022-2978Fix available7.8 High
- libpng, debian linux, netapp ontap select deploy administration utility +2 moreA heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with...CVE-2021-42145.5 Medium
- vmware tools, debian linux, fedoraproject fedora +1 more +3 moreVMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A...CVE-2022-31676Fix available7.8 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-2946Fix available7.8 High
- libpng pngcheck, debian linux +1 moreA global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied)...CVE-2020-35511Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreAn out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host...CVE-2022-2873Fix available5.5 Medium
- artifex ghostscript, debian linux, red hat enterprise linux 6 +3 more +5 moreGhostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.cCVE-2020-27792Fix available7.1 High
- libtiff, debian linux, fedoraproject fedora +2 morelibtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in...CVE-2022-2869Public exploitFix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +2 morelibtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds...CVE-2022-2868Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +2 morelibtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write...CVE-2022-2867Fix available5.5 Medium
- debian schroot, linux +1 morestricter rules on chroot namesCVE-2022-2787Fix available4.3 Medium
- wkhtmltopdf, debian linux +1 moreDirectory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read...CVE-2020-21365Public exploitFix available7.5 High
- debian linux, intel celeron 5305u firmware, celeron 6305 firmware +490 more +492 moreNon-transparent sharing of return predictor targets between contexts in some Intel(R) Processors...CVE-2022-26373Fix available5.5 Medium
- jupyter nbconvert, debian linux +1 morenbconvert vulnerable to cross-site scripting (XSS) via multiple exploit pathsCVE-2021-32862Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreImproper HTTP/2 scheme and method validationCVE-2022-31779Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreImproper input validation on HTTP/2 headersCVE-2022-25763Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreHTTP/2 framing vulnerabilitiesCVE-2022-31780Fix available7.5 High
- apache traffic server, debian linux +1 moreTransfer-Encoding not treated as hop-by-hopCVE-2022-31778Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreInsufficient Validation of HTTP/1.x HeadersCVE-2022-28129Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreProtocol vs scheme mismatchCVE-2021-37150Fix available7.5 High
- exim, debian linux +1 moreExim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host...CVE-2022-37452Fix available9.8 Critical
- zlib, apple ipados, iphone os +29 more +31 morezlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...CVE-2022-37434Public exploitFix availableEPSS 19.2%9.8 Critical
- djangoproject django, debian linux +1 moreDjango vulnerable to Reflected File Download attackCVE-2022-36359Fix available8.8 High
- pgjdbc, postgresql jdbc driver, debian linux +1 more +3 moreSQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbcCVE-2022-31197Fix available7.1 High
- intel connman, debian linux +1 moreIn ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to...CVE-2022-32293Fix available8.1 High
- intel connman, debian linux +1 moreIn ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are...CVE-2022-32292Fix available9.8 Critical
- gnu gnutls, debian linux, fedoraproject fedora +4 more +6 moreA vulnerability found in gnutls. This security flaw happens because of a double free error occurs...CVE-2022-2509Fix available7.5 High
- vim, vim vim/vim, debian linux +2 moreOut-of-bounds Write to API in vim/vimCVE-2022-2598Fix available6.5 Medium
- google android, debian linux +1 moreIn v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper...CVE-2022-20369Fix available6.7 Medium
- debian linux, fedoraproject fedora, libtiff +2 more +4 moreA stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This...CVE-2022-34526Fix available6.5 Medium
- horde groupware, debian linux +1 moreHorde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which...CVE-2022-30287Fix availableEPSS 69.4%8.0 High
- clusterlabs booth, debian linux, fedoraproject fedora +2 moreThe authfile directive in the booth config file is ignored, preventing use of authentication in...CVE-2022-2553Fix available6.5 Medium
- debian linux, linux kernel, netapp a700s firmware +22 more +24 moreAn issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm...CVE-2022-36879Fix available5.5 Medium
- debian linux, linux kernel, netapp active iq unified manager +6 more +8 morenfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote...CVE-2022-36946Public exploitFix available7.5 High
- xen, debian linux, fedoraproject fedora +2 moreinsufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around...CVE-2022-33745Fix available8.8 High
- Show moreLoading…