Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel +1 moremedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatCVE-2024-53104In KEVPublic exploitFix available7.8 High
- sangoma asterisk, debian linux +1 moreAn issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0...CVE-2024-53566Fix available5.5 Medium
- apple ipados, macos, safari +6 more +8 moreA cookie management issue was addressed with improved state management. This issue is fixed in...CVE-2024-44309In KEVFix availableEPSS 21.9%6.3 Medium
- apple ipados, macos, safari +6 more +8 moreThe issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2...CVE-2024-44308In KEVPublic exploitFix available8.8 High
- debian linux, linux kernel, google android +3 more +5 moreHID: core: zero-initialize the report bufferCVE-2024-50302In KEVFix available5.5 Medium
- debian linux, module::scandeps, module scandeps needrestart +1 more +3 moreModerate: perl-Module-ScanDeps security updateCVE-2024-10224Fix available5.3 Medium
- apache tomcat, debian linux +1 moreApache Tomcat: Authentication bypass when using Jakarta Authentication APICVE-2024-52316Public exploitFix available9.8 Critical
- debian linux, linux kernel +1 moremm/khugepaged: fix ->anon_vma raceCVE-2023-52935Fix available7.8 High
- postgresql, debian linux +1 morePostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user IDCVE-2024-10978Fix available4.2 Medium
- icinga, debian linux, icinga icinga2 +1 more +3 moreIcinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API ConnectionsCVE-2024-49369Public exploitFix available9.8 Critical
- gnome glib, debian linux, netapp active iq unified manager +31 more +33 moregio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer...CVE-2024-52533Fix available9.8 Critical
- debian linux, linux kernel +1 moreuprobe: avoid out-of-bounds memory access of fetching argsCVE-2024-50067Fix available7.8 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 moreAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...CVE-2024-50602Public exploitFix available5.9 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: Prevent tail call between progs attached to different hooksCVE-2024-50063Fix available7.8 High
- debian linux, linux kernel +1 moredriver core: bus: Fix double free in driver API bus_register()CVE-2024-50055Fix available7.8 High
- debian linux, linux kernel +1 moreALSA: asihpi: Fix potential OOB array accessCVE-2024-50007Fix available7.8 High
- debian linux, linux kernel +1 morecifs: Fix buffer overflow when parsing NFS reparse pointsCVE-2024-49996Fix available9.4 Critical
- debian linux, linux kernel +1 moredrm/amdkfd: amdkfd_free_gtt_mem clear the correct pointerCVE-2024-49991Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amd/display: fix double free issue during amdgpu module unloadCVE-2024-49989Fix available7.8 High
- debian linux, linux kernel +1 moreplatform/x86: x86-android-tablets: Fix use after free on platform_device_register() errorsCVE-2024-49986Fix available7.8 High
- debian linux, linux kernel +1 moreocfs2: cancel dqi_sync_work before freeing oinfoCVE-2024-49966Fix available7.8 High
- debian linux, linux kernel +1 moreext4: fix timer use-after-free on failed mountCVE-2024-49960Fix available7.8 High
- debian linux, linux kernel +1 moreBluetooth: L2CAP: Fix uaf in l2cap_connectCVE-2024-49950Fix available8.8 High
- debian linux, linux kernel +1 morefbdev: pxafb: Fix possible use after free in pxafb_task()CVE-2024-49924Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more +4 moredrm/amd/display: Fix index out of bounds in degamma hardware format translationCVE-2024-49894Fix available7.1 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreext4: fix slab-use-after-free in ext4_split_extent_at()CVE-2024-49884Fix available7.8 High
- debian linux, linux kernel +1 moreext4: aovid use-after-free in ext4_ext_insert_extent()CVE-2024-49883Fix available7.8 High
- debian linux, linux kernel +1 moreext4: fix double brelse() the buffer of the extents pathCVE-2024-49882Public exploitFix available7.8 High
- debian linux, linux kernel +1 moremm: call the security_mmap_file() LSM hook in remap_file_pages()CVE-2024-47745Fix available7.8 High
- debian linux, linux kernel +1 morefirmware_loader: Block path traversalCVE-2024-47742Fix available7.8 High
- debian linux, linux kernel +1 morecrypto: hisilicon/qm - inject error before stopping queueCVE-2024-47730Fix available7.0 High
- debian linux, linux kernel +1 moredrivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write errorCVE-2024-47698Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write errorCVE-2024-47697Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenetfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()CVE-2024-47685Fix available9.1 Critical
- debian linux, netapp 500f firmware, a250 firmware +30 more +32 moreLow-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143Fix availableEPSS 12.5%8.8 High
- struktur libheif, debian linux +1 moreIn Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing...CVE-2024-41311Fix available8.1 High
- debian linux, linux kernel +1 moredrm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAXCVE-2024-46871Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn attacker was able to achieve code execution in the content process by exploiting a use-after...CVE-2024-9680In KEVPublic exploitFix availableEPSS 23.2%9.8 Critical
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data...CVE-2024-46956Fix available7.8 High
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of...CVE-2024-46955Fix available5.5 Medium
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer...CVE-2024-46953Fix available7.8 High
- artifex ghostscript, debian linux +1 moreAn issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a...CVE-2024-46952Fix available7.8 High
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked...CVE-2024-46951Fix available7.8 High
- nlnet labs unbound, debian linux +1 moreUnbounded name compression could lead to Denial of ServiceCVE-2024-8508Fix available5.3 Medium
- debian linux, linux kernel +1 moreplatform/x86: panasonic-laptop: Fix SINF array out of bounds accessesCVE-2024-46859Fix available7.8 High
- debian linux, linux kernel +1 morespi: nxp-fspi: fix the KASAN report out-of-bounds bugCVE-2024-46853Fix available7.8 High
- debian linux, linux kernel +1 moredma-buf: heaps: Fix off-by-one in CMA heap fault handlerCVE-2024-46852Fix available7.8 High
- debian linux, linux kernel +1 moreASoC: meson: axg-card: fix 'use-after-free'CVE-2024-46849Fix available7.8 High
- debian linux, linux kernel +1 moreKVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTSCVE-2024-46830Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amd/pm: Fix negative array index readCVE-2024-46821Fix available7.8 High
- Show moreLoading…