Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreA flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid...CVE-2023-0386In KEVPublic exploitFix available7.8 High
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42334Fix available6.5 Medium
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42333Fix available8.6 High
- xen, debian linux, fedoraproject fedora +2 morex86 shadow plus log-dirty mode use-after-free In environments where host assisted address...CVE-2022-42332Fix available7.8 High
- haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 moreAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...CVE-2023-27538Fix available5.5 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...CVE-2023-27536Fix available5.9 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...CVE-2023-27535Fix available5.9 Medium
- rack, debian linux +1 morePossible Denial of Service Vulnerability in Rack's header parsingCVE-2023-27539Fix available5.3 Medium
- debian linux, linux kernel, netapp h300s +4 more +6 moredo_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call,...CVE-2023-28466Fix available7.0 High
- rack, debian linux +1 moreRack has possible DoS Vulnerability in Multipart MIME parsingCVE-2023-27530Fix available7.5 High
- apache http server, unbit uwsgi, debian linux +2 moreApache HTTP Server: mod_proxy_uwsgi HTTP response splittingCVE-2023-27522Fix available7.5 High
- wireshark, debian linux +1 moreISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows...CVE-2023-1161Fix available6.3 Medium
- qemu, debian linux +1 moreQemu: lsi53c895a: dma reentrancy issue leads to stack overflowCVE-2023-0330Fix available5.3 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreIncorrect Calculation of Buffer Size in vim/vimCVE-2023-1175Fix available7.3 High
- debian linux, linuxfoundation runc, redhat enterprise linux +1 more +3 moreOpencontainers runc Incorrect Authorization vulnerabilityCVE-2023-27561Fix available7.0 High
- systemd project systemd, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresystemd before 247 does not adequately block local privilege escalation for some Sudo...CVE-2023-26604Fix available7.8 High
- spip, debian linux +1 moreSPIP before 4.2.1 allows Remote Code Execution via form values in the public area because...CVE-2023-27372Public exploitFix availableEPSS 99.7%9.8 Critical
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreIn the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an...CVE-2023-26545Fix available4.7 Medium
- nodejs node, node.js, debian linux +2 moreAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...CVE-2023-23920Fix available4.2 Medium
- mono-project mono, debian linux +1 moreThe mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the...CVE-2023-26314Fix available8.8 High
- libreswan, debian linux +1 moreLibreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon...CVE-2023-23009Fix available6.5 Medium
- apache commons fileupload, apache software foundation tomcat, debian linux +2 moreApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive partsCVE-2023-24998Public exploitFix availableEPSS 48.8%7.5 High
- gnu emacs, debian linux +1 moreGNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name...CVE-2022-48337Fix available9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...CVE-2023-23916Fix available6.5 Medium
- djangoproject django, debian linux +1 moreResource exhaustion in DjangoCVE-2023-24580Fix availableEPSS 62.6%7.5 High
- haproxy, debian linux +1 moreHAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are...CVE-2023-25725Public exploitFix available9.1 Critical
- gnu gnutls, debian linux, fedoraproject fedora +7 more +9 moreA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....CVE-2023-0361Fix available7.4 High
- struktur libde265, debian linux +1 moreLibde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the...CVE-2023-25221Fix available7.8 High
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...CVE-2023-24758Fix available5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...CVE-2023-24757Fix available5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...CVE-2023-24756Fix available5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...CVE-2023-24755Fix available5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...CVE-2023-24754Fix available5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...CVE-2023-24752Fix available5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function...CVE-2023-24751Fix available6.5 Medium
- gpac, gpac gpac/gpac, debian linux +2 moreStack-based Buffer Overflow in gpac/gpacCVE-2023-0770Fix available7.8 High
- debian linux, linux kernel, netapp active iq unified manager +5 more +7 moreIncorrect indirect branch prediction barrier in the Linux KernelCVE-2023-0045Public exploitFix available4.7 Medium
- djangoproject django, debian linux +1 moreDjango contains Uncontrolled Resource Consumption via cached headerCVE-2023-23969Fix availableEPSS 47.4%7.5 High
- debian linux, lemonldap-ng apache\ +1 moreIn Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by...CVE-2020-36659Fix available8.1 High
- debian linux, lemonldap-ng apache\ +1 moreIn Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default...CVE-2020-36658Fix available8.1 High
- openstack cinder, glance, nova +1 more +3 moreOpenStack Cinder, glance, and Nova vulnerable to Path TraversalCVE-2022-47951Fix available5.7 Medium
- wireshark, debian linux +1 moreTIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service...CVE-2023-0412Fix available6.3 Medium
- libtiff, debian linux +1 moreprocessCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer...CVE-2022-48281Fix available5.5 Medium
- debian linux, linux kernel +1 moreUse after free in SNDRV_CTL_IOCTL_ELEM in Linux KernelCVE-2023-0266In KEVPublic exploitFix available7.9 High
- html-stripscripts project html-stripscripts, debian linux +1 moreThe HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of...CVE-2023-24038Fix available7.5 High
- trustwave modsecurity, debian linux +1 moreIn ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can...CVE-2023-24021Fix available7.5 High
- owasp modsecurity, debian linux +1 moreIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed...CVE-2022-48279Fix available7.5 High
- debian linux, rails https://github.com/rails/rails, rubyonrails rails +2 moreReDoS based DoS vulnerability in Action DispatchCVE-2023-22795Fix available7.5 High
- sudo project sudo, apple macos, debian linux +1 more +3 moreIn Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the...CVE-2023-22809Public exploitFix availableEPSS 55.4%7.8 High
- openstack swift, debian linux +1 moreOpenStack Swift XML external entities (XXE) InjectionCVE-2022-47950Fix available6.5 Medium
- Show moreLoading…