Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Debian

Debian vulnerabilities

Products

Linux10,019
Advanced Package Tool21
Dpkg15
Pdns14
Apt8
Shadow8
Lintian6
Devscripts3
Freedombox3
Horde3
Icoutils3
Reportbug3
Apt-cacher2
Aptlinex2
Cifs-utils2
Debusine2
Dpkg-dev2
Fsp2
Horde Groupware2
Mime-support2
Netkit2
Netqmail2
Python-apt2
Python-dns2
Qpopper2
Xsabre2
Yubiserver2

Newest

Known exploitedIn KEVPublic exploitFix available

debian linux, linux kernel, fedoraproject fedora +6 more +8 moreAn issue was discovered in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks...CVE-2022-25258Public exploitFix available4.6 MediumFebruary 16, 2022
debian linux, teluu pjsip +1 moreBuffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer'...CVE-2021-43303Fix available9.8 CriticalFebruary 16, 2022
debian linux, teluu pjsip +1 moreRead out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled ...CVE-2021-43302Fix available9.1 CriticalFebruary 16, 2022
debian linux, teluu pjsip +1 moreStack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled ...CVE-2021-43301Fix available9.8 CriticalFebruary 16, 2022
debian linux, teluu pjsip +1 moreStack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename'...CVE-2021-43300Fix available9.8 CriticalFebruary 16, 2022
debian linux, teluu pjsip +1 moreStack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename'...CVE-2021-43299Fix available9.8 CriticalFebruary 16, 2022
libexpat project libexpat, debian linux, oracle http server +5 more +7 morexmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...CVE-2022-25236Public exploitFix availableEPSS 35.3%9.8 CriticalFebruary 15, 2022
libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 morexmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...CVE-2022-25235Public exploitFix available9.8 CriticalFebruary 15, 2022
polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreThere is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to...CVE-2021-4115Fix available5.5 MediumFebruary 14, 2022
wireshark, debian linux, fedoraproject fedora +2 moreInfinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...CVE-2022-0586Fix available6.3 MediumFebruary 14, 2022
wireshark, debian linux, fedoraproject fedora +2 moreCrash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...CVE-2022-0583Fix available6.3 MediumFebruary 14, 2022
wireshark, debian linux, fedoraproject fedora +2 moreUnaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11...CVE-2022-0582Fix available6.3 MediumFebruary 14, 2022
wireshark, debian linux, fedoraproject fedora +2 moreCrash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial...CVE-2022-0581Fix available6.3 MediumFebruary 14, 2022
zsh, apple mac os x, macos +2 more +4 moreIn zsh before 5.8.1, an attacker can achieve code execution if they control a command output...CVE-2021-45444Fix available7.8 HighFebruary 13, 2022
vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0572Fix availableEPSS 26.5%8.4 HighFebruary 13, 2022
puma, rubyonrails rails, debian linux +1 more +3 moreInformation Exposure when using Puma with RailsCVE-2022-23634Fix available8.0 HighFebruary 11, 2022
debian linux, linux kernel, fedoraproject fedora +8 more +10 moredrivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.CVE-2022-24958Fix available7.8 HighFebruary 11, 2022
debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in...CVE-2022-24959Fix available5.5 MediumFebruary 11, 2022
golang go, debian linux, netapp beegfs csi driver +3 more +5 moreRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...CVE-2022-23772Fix available7.5 HighFebruary 11, 2022
golang go, debian linux, netapp beegfs csi driver +3 more +5 moreCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...CVE-2022-23806Fix available9.1 CriticalFebruary 11, 2022
rails, debian linux +1 moreExposure of sensitive information in Action PackCVE-2022-23633Fix available7.4 HighFebruary 11, 2022
libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in...CVE-2022-0562Fix available5.5 MediumFebruary 11, 2022
libtiff, debian linux, fedoraproject fedora +2 more +4 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in...CVE-2022-0561Fix available5.5 MediumFebruary 11, 2022
debian debian-edu-config, linux +1 moreIt was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu...CVE-2021-20001Fix available9.8 CriticalFebruary 11, 2022
debian linux, linux kernel, redhat enterprise linux +2 moreA vulnerability was found in the Linux kernel's EBPF verifier when handling internal data...CVE-2021-4159Fix available4.4 MediumFebruary 10, 2022
vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0554Fix available8.4 HighFebruary 10, 2022
info-zip unzip, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in unzip 6.0. The vulnerability occurs during the conversion of wide string to...CVE-2022-0529Public exploitFix available5.5 MediumFebruary 9, 2022
info-zip unzip, apple mac os x, macos +3 more +5 moreA flaw was found in unzip 6.0. The vulnerability occurs during the conversion of an utf-8 string...CVE-2022-0530Fix available5.5 MediumFebruary 9, 2022
htmldoc project htmldoc, debian linux +1 moreA vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes...CVE-2022-0534Fix available5.5 MediumFebruary 9, 2022
samba, debian linux, redhat enterprise linux +4 more +6 moreA flaw was found in the way Samba handled file/directory metadata. This flaw allows an...CVE-2021-20316Fix available6.8 MediumFebruary 8, 2022
debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0492In KEVPublic exploitFix available7.8 HighFebruary 8, 2022
twisted, debian linux, fedoraproject fedora +2 moreCookie and header exposure in twistedCVE-2022-21712Fix available7.5 HighFebruary 7, 2022
debian permperM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.)CVE-2021-381729.8 CriticalFebruary 5, 2022
debian linux, linux kernel, redhat enterprise linux +2 moreA use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host...CVE-2022-0487Fix available5.5 MediumFebruary 4, 2022
kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23947Fix available7.8 HighFebruary 4, 2022
kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23946Fix available7.8 HighFebruary 4, 2022
symfony twig, debian linux, fedoraproject fedora +2 moreCode injection in TwigCVE-2022-23614Public exploitFix available8.8 HighFebruary 4, 2022
atftp project atftp, debian linux +1 moreoptions.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server...CVE-2021-46671Fix available5.3 MediumFebruary 4, 2022
debian linux, linux kernel +1 moreAn issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets...CVE-2022-24448Fix available3.3 LowFebruary 4, 2022
gpac, gpac gpac/gpac, debian linux +2 moreNULL Pointer Dereference in gpac/gpacCVE-2021-4043Public exploitFix available5.8 MediumFebruary 4, 2022
gerbv, debian linux, fedoraproject fedora +2 moreAn information disclosure vulnerability exists in the pick-and-place rotation parsing...CVE-2021-40403Fix available5.8 MediumFebruary 4, 2022
gerbv, debian linux, fedoraproject fedora +2 moreA use-after-free vulnerability exists in the RS-274X aperture definition tokenization...CVE-2021-40401Fix available10.0 CriticalFebruary 4, 2022
minetest, debian linux +1 moreMinetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item...CVE-2022-24300Fix available9.8 CriticalFebruary 2, 2022
minetest, debian linux +1 moreIn Minetest before 5.4.0, players can add or subtract items from a different player's inventory.CVE-2022-24301Fix available6.5 MediumFebruary 2, 2022
postgresql jdbc driver, debian linux, fedoraproject fedora +1 more +3 moreUnchecked Class Instantiation when providing Plugin ClassesCVE-2022-21724Fix available7.0 HighFebruary 2, 2022
vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-0443Fix available8.4 HighFebruary 2, 2022
mariadb, debian linux, fedoraproject fedora +2 moreMariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the...CVE-2021-46669Fix available7.5 HighFebruary 1, 2022
x-stream xstream, debian linux, fedoraproject fedora +8 more +10 moreDenial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859Fix available7.5 HighFebruary 1, 2022
twisted treq, debian linux +1 moreUnsafe handling of user-specified cookies in treqCVE-2022-23607Fix available6.5 MediumFebruary 1, 2022
djangoproject django, debian linux, fedoraproject fedora +2 moreInfinite Loop in DjangoCVE-2022-23833Fix availableEPSS 49.5%7.5 HighFebruary 1, 2022
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open