Skip to contentDebian Linux vulnerabilities
- google chrome, debian linux +1 moreUse after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had...CVE-2023-5473Fix available6.3 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5485Fix available4.3 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an...CVE-2023-5479Fix available6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5478Fix available4.3 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local...CVE-2023-5477Fix available4.3 Medium
- google chrome, debian linux +1 moreHeap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who...CVE-2023-5474Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a...CVE-2023-5484Fix available6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5483Fix available6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a...CVE-2023-5481Fix available6.5 Medium
- google chrome, debian linux +1 moreUse after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker...CVE-2023-5476Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an...CVE-2023-5475Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5218Fix available8.8 High
- apache zookeeper, debian linux +1 moreApache ZooKeeper: Authorization bypass in SASL Quorum Peer AuthenticationCVE-2023-44981Fix available9.1 Critical
- netty, debian linux +1 moreNetty HttpPostRequestDecoder can OOMCVE-2024-29025Fix available5.3 Medium
- eclipse jetty, debian linux, eclipse jetty.project +1 more +3 moreHTTP/2 HPACK integer overflow and buffer allocationCVE-2023-36478Fix available7.5 High
- apache tomcat, debian linux +1 moreApache Tomcat: Trailer header parsing too lenientCVE-2023-45648Fix available5.3 Medium
- apache tomcat, accumulo, debian linux +2 moreApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requestsCVE-2023-42795Fix available5.3 Medium
- lipnitsk libcue, debian linux, fedoraproject fedora +2 morelibcue vulnerable to out-of-bounds array accessCVE-2023-43641Fix availableEPSS 17.1%8.8 High
- mediawiki, debian linux +1 moreAn issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1...CVE-2023-45364Fix available5.3 Medium
- mediawiki, debian linux +1 moreMediaWiki Denial of Service vulnerabilityCVE-2023-45363Fix availableEPSS 23.8%7.5 High
- debian linux, linux kernel, red hat enterprise linux 6 +8 more +10 moreKernel: rsvp: out-of-bounds read in rsvp_classify()CVE-2023-42755Fix available6.5 Medium
- python pillow, debian linux +1 moreArbitrary Code Execution in PillowCVE-2023-50447Fix available8.1 High
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- python urllib3, debian linux, fedoraproject fedora +2 more`Cookie` HTTP header isn't stripped on cross-origin redirectsCVE-2023-43804Public exploitFix available5.9 Medium
- webmproject libvpx, debian linux, fedoraproject fedora +1 more +3 moreVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.CVE-2023-44488Fix available7.5 High
- composer, debian linux, fedoraproject fedora +2 moreRemote Code Execution via web-accessible composer.pharCVE-2023-43655Fix available6.4 Medium
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217In KEVPublic exploitFix availableEPSS 49.0%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who...CVE-2023-5187Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker...CVE-2023-5186Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swapCVE-2023-42756Fix available4.4 Medium
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A...CVE-2023-39928Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...CVE-2023-5176Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...CVE-2023-5171Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA compromised content process could have provided malicious data in a `PathRecording` resulting...CVE-2023-5169Fix available6.5 Medium
- apple ipados, macos, safari +6 more +8 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS...CVE-2023-41074Fix available8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreUse-after-free in Linux kernel's netfilter: nf_tables componentCVE-2023-5197Fix available7.8 High
- debian linux, linux kernel, red hat enterprise linux 6 +17 more +19 moreKernel: netfilter: potential slab-out-of-bound access due to integer underflowCVE-2023-42753Fix available7.0 High
- mediawiki, debian linux +1 moreStored XSS leads to privilege escalation in MediaWiki v1.40.0CVE-2023-3550Fix available7.3 High
- debian linux, roundcube webmail +1 moreRoundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e...CVE-2023-43770In KEVPublic exploitFix availableEPSS 63.7%6.1 Medium
- apple macos, ipad os, ipados +13 more +15 moreThe issue was addressed with improved checks. This issue is fixed in Safari 16.6.1, macOS Ventura...CVE-2023-41993In KEVPublic exploitFix availableEPSS 23.7%8.8 High
- openprinting cups, libppd, debian linux +1 more +3 moreOpenPrinting CUPS/libppd Postscript Parsing Heap OverflowCVE-2023-4504Public exploitFix available7.0 High
- isc bind, bind 9, debian linux +6 more +8 morenamed may terminate unexpectedly under high DNS-over-TLS query loadCVE-2023-4236Fix available7.5 High
- isc bind, bind 9, debian linux +1 more +3 moreA stack exhaustion flaw in control channel code may cause named to terminate unexpectedlyCVE-2023-3341Fix available7.5 High
- reportlab, debian linux +1 moreReportLab vulnerable to remote code execution via paraparserCVE-2019-19450Fix available9.8 Critical
- netatalk, debian linux +1 moreA Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x...CVE-2023-42464Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a...CVE-2023-4909Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62...CVE-2023-4908Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62...CVE-2023-4907Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a...CVE-2023-4906Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote...CVE-2023-4905Fix available4.3 Medium
- Show moreLoading…