Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a...CVE-2023-51780Fix available7.0 High
- douglas wilson spreadsheet::parseexcel, debian linux, fedoraproject fedora +1 more +3 moreArbitrary Code Execution (ACE) VulnerabilityCVE-2023-7101In KEVPublic exploitFix availableEPSS 19.0%7.8 High
- exim, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreExim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a...CVE-2023-51766Fix available5.3 Medium
- qt, debian linux +1 moreAn issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3...CVE-2023-51714Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker...CVE-2023-7024In KEVPublic exploitFix available8.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreUse-after-free in Linux kernel's ipv4: igmp componentCVE-2023-6932Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreOut-of-bounds write in Linux kernel's Performance Events system componentCVE-2023-6931Public exploitFix available7.8 High
- mozilla firefox, debian linux +1 moreMemory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory...CVE-2023-6873Fix available8.8 High
- mozilla firefox, firefox esr, debian linux +2 moreThe timing of a button click causing a popup to disappear was approximately the same length as...CVE-2023-6867Fix available6.1 Medium
- mozilla firefox, firefox esr, debian linux +2 more`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...CVE-2023-6865Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...CVE-2023-6864Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...CVE-2023-6863Fix available8.8 High
- mozilla firefox esr, thunderbird, debian linux +2 moreA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...CVE-2023-6862Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...CVE-2023-6861Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...CVE-2023-6860Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free condition affected TLS socket creation when under memory pressure. This...CVE-2023-6859Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...CVE-2023-6858Fix available8.8 High
- debian linux, mozilla firefox, firefox esr +1 more +3 moreWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...CVE-2023-6857Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...CVE-2023-6856Fix availableEPSS 20.6%8.8 High
- mozilla thunderbird, debian linux +1 moreThe signature of a digitally signed S/MIME email message may optionally specify the signature...CVE-2023-50761Fix available4.3 Medium
- mozilla thunderbird, debian linux +1 moreWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...CVE-2023-50762Fix available4.3 Medium
- redhat ansible automation platform, debian linux, red hat ansible automation platform 1.2 +6 more +8 moreAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary filesCVE-2023-5115Fix available6.3 Medium
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has...CVE-2023-51385Public exploitFix availableEPSS 19.8%6.5 Medium
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreIn ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied....CVE-2023-51384Fix available5.5 Medium
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyCVE-2023-6478Fix available7.6 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory reads/writes in xkb button actionsCVE-2023-6377Fix available7.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS...CVE-2023-42883Fix available5.5 Medium
- libreoffice, debian linux, fedoraproject fedora +2 moreLink targets allow arbitrary script executionCVE-2023-6186Fix available8.3 High
- libreoffice, debian linux, fedoraproject fedora +2 moreImproper input validation enabling arbitrary Gstreamer pipeline injectionCVE-2023-6185Fix available8.3 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a...CVE-2023-6512Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote...CVE-2023-6511Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker...CVE-2023-6510Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote...CVE-2023-6509Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker...CVE-2023-6508Fix available8.8 High
- sierrawireless aleos, debian linux +1 moreImproper input leads to DoSCVE-2023-404627.5 High
- apple ipados, iphone os, macos +4 more +6 moreBluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate...CVE-2023-45866Public exploitFix available6.3 Medium
- apple ipados, macos, safari +6 more +8 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...CVE-2023-42917In KEVFix available8.8 High
- apple ipados, macos, safari +6 more +8 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17...CVE-2023-42916In KEVFix availableEPSS 17.8%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6351Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6350Public exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who...CVE-2023-6345In KEVFix availableEPSS 16.5%9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...CVE-2023-6348Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6347Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6346Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...CVE-2023-6212Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...CVE-2023-6209Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen using X11, text selected by the page using the Selection API was erroneously copied into the...CVE-2023-6208Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...CVE-2023-6207Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...CVE-2023-6206Fix available5.4 Medium
- Show moreLoading…