Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel +1 moredrm/amd/display: Skip inactive planes within ModeSupportAndSystemConfigurationCVE-2024-46812Fix available7.8 High
- openprinting libppd, debian linux +1 morelibppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD bufferCVE-2024-47175Public exploitFix availableEPSS 63.6%8.6 High
- apache tomcat connectors, debian linux +1 moreApache Tomcat Connectors: mod_jk: local users can view and modify configurationCVE-2024-46544Fix available5.9 Medium
- debian linux, linux kernel +1 moreHID: amd_sfh: free driver_data after destroying hid deviceCVE-2024-46746Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amdgpu: Fix out-of-bounds write warningCVE-2024-46725Fix available7.8 High
- debian linux, linux kernel +1 moreACPI: processor: idle: Check acpi_fetch_acpi_dev() return valueCVE-2022-50327Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreNFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAINCVE-2025-38393Fix available7.5 High
- debian linux, linux kernel +1 moreice: arfs: fix use-after-free when freeing @rx_cpu_rmapCVE-2022-49063Fix available7.8 High
- curl, debian linux, netapp active iq unified manager +26 more +28 moreOCSP stapling bypass with GnuTLSCVE-2024-8096Fix available6.5 Medium
- debian linux, linux kernel +1 moreipv6: fix possible UAF in ip6_finish_output2()CVE-2024-44986Fix available8.1 High
- debian linux, linux kernel +1 moredrm/amdgpu: Validate TA binary sizeCVE-2024-44977Fix available7.8 High
- debian linux, linux kernel +1 moremptcp: pm: avoid possible UaF when selecting endpCVE-2024-44974Fix available7.8 High
- debian linux, linux kernel +1 morefou: remove warn in gue_gro_receive on unsupported protocolCVE-2024-44940Fix available7.5 High
- debian linux, linux kernel +1 morebna: adjust 'name' buf size of bna_tcb and bna_ccb structuresCVE-2024-43839Fix available7.8 High
- debian linux, linux kernel +1 morebtrfs: fix extent map use-after-free when adding pages to compressed bioCVE-2024-42314Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morePCI/DPC: Fix use-after-free on concurrent DPC and hot-removalCVE-2024-42302Fix available7.8 High
- debian linux, flatpak +1 moreFlatpak may allow access to files outside sandbox for certain appsCVE-2024-42472Fix available10.0 Critical
- debian linux, linux kernel +1 moref2fs: check validation of fault attrs in f2fs_build_fault_attr()CVE-2024-42160Fix available7.8 High
- debian linux, linux kernel +1 morecdrom: rearrange last_media_change check to avoid unintentional overflowCVE-2024-42136Fix available7.8 High
- debian linux, linux kernel +1 morePCI/MSI: Fix UAF in msi_capability_initCVE-2024-41096Fix available7.8 High
- debian linux, linux kernel +1 morenvme: avoid double free special payloadCVE-2024-41073Fix available9.8 Critical
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreblock/ioctl: prefer different overflow checkCVE-2024-41000Fix available7.8 High
- debian linux, linux kernel +1 morebtrfs: zoned: fix use-after-free due to race with dev replaceCVE-2024-39496Fix available7.8 High
- debian linux, linux kernel +1 moreima: Fix use-after-free on a dentry's dname.nameCVE-2024-39494Fix available7.8 High
- debian linux, linux kernel +1 morescsi: mpi3mr: Sanitise num_physCVE-2024-42159Fix available7.8 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- mit kerberos 5, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS...CVE-2024-37371Fix available9.1 Critical
- openssl, debian linux, netapp 500f firmware +40 more +42 moreSSL_select_next_proto buffer overreadCVE-2024-5535Public exploitFix available9.1 Critical
- debian linux, linux kernel +1 moreftrace: Fix possible use-after-free issue in ftrace_location()CVE-2024-38588Fix available7.8 High
- python urllib3, debian linux, netapp active iq unified manager +2 moreProxy-Authorization request header isn't stripped during cross-origin redirects in urllib3CVE-2024-37891Fix available4.4 Medium
- debian linux, openprinting cups +1 moreCupsd Listen arbitrary chmod 0140777CVE-2024-35235Fix available4.4 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...CVE-2024-5696Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy monitoring the time certain operations take, an attacker could have guessed which external...CVE-2024-5690Fix available4.3 Medium
- android kernel, debian linux +1 morenet: fix __dst_negative_advice() raceCVE-2024-36971In KEVPublic exploitFix available7.8 High
- roundcube webmail, debian linux +1 moreRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user...CVE-2024-37384Fix available6.1 Medium
- roundcube webmail, debian linux +1 moreRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.CVE-2024-37383In KEVPublic exploitFix availableEPSS 74.0%6.1 Medium
- mongodb pymongo, debian linux +1 moreOut-of-bounds read in bson module of PyMongoCVE-2024-5629Fix available4.7 Medium
- chromium libvpx, debian linux +1 moreInteger overflow in libvpxCVE-2024-5197Fix available5.9 Medium
- debian linux, linux kernel +1 morefs/9p: only translate RWX permissions for plain 9P2000CVE-2024-36964Fix available8.8 High
- debian linux, linux kernel +1 moredrm/vmwgfx: Fix invalid reads in fence signaled eventsCVE-2024-36960Fix available7.1 High
- debian linux, linux kernel +1 moreocteontx2-af: avoid off-by-one read from userspaceCVE-2024-36957Fix available5.5 Medium
- debian linux, linux kernel +1 moretipc: fix a possible memleak in tipc_buf_appendCVE-2024-36954Fix available5.5 Medium
- debian linux, linux kernel +1 moreKVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()CVE-2024-36953Fix available5.5 Medium
- debian linux, linux kernel +1 morefirewire: ohci: mask bus reset interrupts between ISR and bottom halfCVE-2024-36950Fix available4.4 Medium
- debian linux, linux kernel +1 morephonet: fix rtm_phonet_notify() skb allocationCVE-2024-36946Fix available5.5 Medium
- debian linux, linux kernel +1 morewifi: nl80211: don't free NULL coalescing ruleCVE-2024-36941Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morepinctrl: core: delete incorrect free in pinctrl_enable()CVE-2024-36940Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfs: Handle error of rpc_proc_register() in nfs_net_init().CVE-2024-36939Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morebna: ensure the copied buf is NUL terminatedCVE-2024-36934Fix available7.8 High
- debian linux, linux kernel +1 morensh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().CVE-2024-36933Fix available7.8 High
- Show moreLoading…