Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel +1 moreiio: adc: ad7091r: Allow users to configure device eventsCVE-2023-52627Fix available5.5 Medium
- debian linux, linux kernel +1 moreSUNRPC: Fix a suspicious RCU usage warningCVE-2023-52623Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreext4: avoid online resizing failures due to oversized flex bgCVE-2023-52622Fix available5.5 Medium
- debian linux, linux kernel +1 morebpf: Check rcu_read_lock_trace_held() before calling bpf map helpersCVE-2023-52621Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moretracing: Ensure visibility when inserting an element into tracing_mapCVE-2024-26645Fix available5.5 Medium
- debian linux, linux kernel +1 morebtrfs: don't abort filesystem when attempting to snapshot deleted subvolumeCVE-2024-26644Fix available5.5 Medium
- gnu emacs, org mode, debian linux +2 moreIn Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org...CVE-2024-30205Fix available7.1 High
- gnu emacs, debian linux, gnu org mode +2 moreIn Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.CVE-2024-30204Fix available2.8 Low
- gnu emacs, debian linux, gnu org mode +2 moreIn Emacs before 29.3, Gnus treats inline MIME contents as trusted.CVE-2024-30203Fix available5.5 Medium
- mozilla firefox, firefox esr, debian linux +2 moreAn attacker was able to inject an event handler into a privileged object that would allow...CVE-2024-29944Fix available8.4 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_tables: mark set as dead when unbinding anonymous set with timeoutCVE-2024-26643Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_tables: disallow anonymous set with timeout flagCVE-2024-26642Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...CVE-2024-2614Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...CVE-2024-2611Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe permission prompt input delay could have expired while the window is not in focus, which made...CVE-2024-2609Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 more`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...CVE-2024-2608Fix available8.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....CVE-2024-2607Fix available8.1 High
- debian linux, linux kernel, netapp a150 firmware +11 more +13 moreip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()CVE-2024-26641Fix available8.6 High
- debian linux, linux kernel +1 moretcp: add sanity checks to rx zerocopyCVE-2024-26640Fix available7.8 High
- debian linux, linux kernel +1 morepstore/ram: Fix crash when setting number of cpus to an odd numberCVE-2023-52619Fix available5.5 Medium
- debian linux, linux kernel +1 moreblock/rnbd-srv: Check for unlikely string overflowCVE-2023-52618Fix available5.3 Medium
- debian linux, linux kernel +1 morePCI: switchtec: Fix stdev_release() crash after surprise hot removeCVE-2023-52617Fix available4.4 Medium
- debian linux, linux kernel +1 morellc: make llc_ui_sendmsg() more robust against bonding changesCVE-2024-26636Fix available5.5 Medium
- debian linux, linux kernel +1 morellc: Drop support for ETH_P_TR_802_2.CVE-2024-26635Fix available5.5 Medium
- debian linux, linux kernel +1 morecrypto: lib/mpi - Fix unexpected pointer access in mpi_ec_initCVE-2023-52616Fix available7.8 High
- debian linux, linux kernel, netapp 9500 firmware +17 more +19 moreip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()CVE-2024-26633Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morecrypto: scomp - fix req->dst buffer overflowCVE-2023-52612Fix available7.8 High
- debian linux, linux kernel +1 morebinder: fix race between mmput() and do_exit()CVE-2023-52609Fix available4.7 Medium
- bizdelnick gross, debian linux +1 moregross - security updateCVE-2023-52159Fix available7.5 High
- redhat libvirt, debian linux, red hat enterprise linux 6 +5 more +7 moreLibvirt: null pointer dereference in udevconnectlistallinterfaces()CVE-2024-2496Fix available5.0 Medium
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: WebSocket DoS with incomplete closing handshakeCVE-2024-23672Fix available6.3 Medium
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: HTTP/2 header handling DoSCVE-2024-24549Public exploitFix availableEPSS 23.1%7.5 High
- latchset jwcrypto, debian linux +1 moreJWCrypto vulnerable to JWT bomb Attack in `deserialize` functionCVE-2024-28102Fix available6.8 Medium
- debian linux, linux kernel +1 morellc: call sock_orphan() at release timeCVE-2024-26625Fix available7.8 High
- debian linux, linux kernel +1 morejfs: fix slab-out-of-bounds Read in dtSearchCVE-2023-52602Fix available7.8 High
- debian linux, linux kernel +1 morejfs: fix array-index-out-of-bounds in dbAdjTreeCVE-2023-52601Fix available7.8 High
- debian linux, linux kernel +1 moreKVM: s390: fix setting of fpc registerCVE-2023-52597Fix available4.0 Medium
- debian linux, linux kernel, netapp h610c firmware +2 more +4 moredrm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()CVE-2023-52585Fix available5.5 Medium
- debian linux, linux kernel +1 moreceph: fix deadlock or deadcode of misusing dget()CVE-2023-52583Fix available5.5 Medium
- mozilla thunderbird, debian linux +1 moreThe encrypted subject of an email message could be incorrectly and permanently assigned to an...CVE-2024-1936Fix available7.5 High
- debian linux, linux kernel +1 morecifs: Fix UAF in cifs_demultiplex_thread()CVE-2023-52572Fix available7.8 High
- debian linux, linux kernel +1 morevt: fix memory overlapping when deleting chars in the bufferCVE-2022-48627Fix available5.5 Medium
- phpseclib, debian linux +1 morephpseclib guardrails needed on OID lengthCVE-2024-27355Fix available7.5 High
- phpseclib, debian linux, phpseclib 1x +2 more +4 morephpseclib: guardrails needed on isPrime and randomPrimeCVE-2024-27354Fix available7.5 High
- debian linux, linux kernel +1 moretcp: make sure init the accept_queue's spinlocks onceCVE-2024-26614Fix available7.8 High
- debian linux, linux kernel +1 moredmaengine: fix NULL pointer in channel unregistration functionCVE-2023-52492Fix available4.4 Medium
- debian linux, linux kernel +1 moremm/sparsemem: fix race in accessing memory_section->usageCVE-2023-52489Fix available4.7 Medium
- debian linux, linux kernel +1 morex86/srso: Add SRSO mitigation for Hygon processorsCVE-2023-52482Fix available7.8 High
- rack, debian linux +1 moreRack ReDos in content type parsing (2nd degree polynomial)CVE-2024-25126Fix availableEPSS 35.4%5.3 Medium
- rack, debian linux +1 morePossible DoS Vulnerability with Range Header in RackCVE-2024-26141Fix available5.8 Medium
- Show moreLoading…