Skip to contentDebian vulnerabilities
Newest
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...CVE-2021-39924Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...CVE-2021-39922Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...CVE-2021-39921Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2021-3974Fix available7.3 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad...CVE-2021-21900Fix available8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of...CVE-2021-21899Fix available8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::decompress18() functionality of...CVE-2021-21898Fix available8.8 High
- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2...CVE-2021-39928Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia...CVE-2021-43975Fix available6.7 Medium
- debian linux, linux kernel, fedoraproject fedora +12 more +14 moreIn the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb...CVE-2021-43976Fix available4.6 Medium
- ruby-lang date, ruby, debian linux +6 more +8 moreRegular expression denial of service vulnerability (ReDoS) in dateCVE-2021-41817Fix available7.5 High
- llhttp, debian linux, nodejs node +1 more +3 moreThe parser in accepts requests with a space (SP) right after the header name before the colon....CVE-2021-22959Fix available6.5 Medium
- gmplib gmp, debian linux, netapp active iq unified manager +8 more +10 moreGNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer...CVE-2021-43618Fix available7.5 High
- json-schema project json-schema, kriszyp kriszyp/json-schema, debian linux +2 morePrototype Pollution in kriszyp/json-schemaCVE-2021-3918Fix available9.8 Critical
- gnu mailman, debian linux +1 moreIn GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an...CVE-2021-43332Fix available6.5 Medium
- gnu mailman, debian linux +1 moreIn GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute...CVE-2021-43331Fix available6.1 Medium
- htmldoc project htmldoc, debian linux +1 moreA stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code...CVE-2021-43579Public exploitFix available7.8 High
- bluez, debian linux +1 moreMemory leak in BlueZCVE-2021-41229Fix available4.3 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +1 more +3 moreIn ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z ...CVE-2021-3941Fix available6.5 Medium
- cloudflare octorpki, debian linux +1 moreOctoRPKI crashes when processing GZIP bomb returned via malicious repositoryCVE-2021-3912Fix available4.2 Medium
- cloudflare octorpki, debian linux +1 moreInfinite certificate chain depth results in OctoRPKI running foreverCVE-2021-3908Fix available5.9 Medium
- cloudflare octorpki, debian linux +1 moreInfinite open connection causes OctoRPKI to hang foreverCVE-2021-3909Fix available4.4 Medium
- cloudflare octorpki, debian linux +1 moreNUL character in ROA causes OctoRPKI to crashCVE-2021-3910Fix available4.4 Medium
- cloudflare octorpki, debian linux +1 moreArbitrary filepath traversal via URI injectionCVE-2021-3907Fix available7.4 High
- cloudflare octorpki, debian linux +1 moreMisconfigured IP address field in ROA leads to OctoRPKI crashCVE-2021-3911Fix available4.2 Medium
- nlnet labs routinator, debian linux +1 moregzip transfer encoding caused out-of-memory crashCVE-2021-43174Fix available7.5 High
- nlnet labs routinator, debian linux +1 moreHanging RRDP requestCVE-2021-43173Fix available7.5 High
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow could occur when OpenEXR processes a crafted file on systems where size_t <...CVE-2021-3933Fix available5.5 Medium
- fort validator project validator, debian linux +1 moreFORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate...CVE-2021-43114Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +1 more +3 moreMultiple flaws were found in the way samba AD DC implemented access and conformance checking of...CVE-2020-25722Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote...CVE-2021-38003In KEVPublic exploitFix availableEPSS 38.6%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker...CVE-2021-38002Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to...CVE-2021-38001Public exploitFix availableEPSS 26.7%8.8 High
- google android, chrome, debian linux +2 more +4 moreInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0...CVE-2021-38000In KEVFix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a...CVE-2021-37999Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote...CVE-2021-37998Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who...CVE-2021-37997Fix available8.8 High
- golang go, debian linux, fedoraproject fedora +2 moreImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...CVE-2021-41771Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse of Uninitialized Variable in vim/vimCVE-2021-3928Fix available7.3 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3927Fix available7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreOWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is...CVE-2021-35368Fix available9.8 Critical
- debian linux, linux kernel, oracle communications cloud native core binding support function +3 more +5 moreAn issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds...CVE-2021-43389Fix available5.5 Medium
- bluez, debian linux +1 moreAn issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a...CVE-2021-43400Fix available9.1 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free could have occured when an HTTP2 session object was released on a different...CVE-2021-43535Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 93 and...CVE-2021-43534Fix available8.8 High
- llhttp, debian linux, nodejs node +1 more +3 moreThe parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body...CVE-2021-22960Fix available6.5 Medium
- htmldoc project htmldoc, debian linux +1 moreBuffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of...CVE-2021-40985Fix available5.5 Medium
- Show moreLoading…