Skip to contentDebian vulnerabilities
Newest
- debian linux, linux kernel +1 morefs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_superCVE-2024-26688Fix available5.5 Medium
- debian linux, linux kernel +1 morexen/events: close evtchn after mapping cleanupCVE-2024-26687Fix available5.5 Medium
- debian linux, linux kernel +1 morenilfs2: fix potential bug in end_buffer_async_writeCVE-2024-26685Fix available5.5 Medium
- debian linux, linux kernel +1 morecan: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)CVE-2023-52637Fix available7.8 High
- python pillow, debian linux, fedoraproject fedora +2 morePillow buffer overflow vulnerabilityCVE-2024-28219Fix available6.7 Medium
- debian linux, linux kernel +1 morenet: stmmac: xgmac: fix handling of DPP safety error for DMA channelsCVE-2024-26684Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreinet: read sk->sk_family once in inet_recv_error()CVE-2024-26679Fix available5.5 Medium
- debian linux, linux kernel +1 moreppp_async: limit MRU to 64KCVE-2024-26675Fix available5.5 Medium
- debian linux, linux kernel +1 morenetfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectationsCVE-2024-26673Fix available7.1 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreblk-mq: fix IO hang from sbitmap wakeup raceCVE-2024-26671Fix available4.7 Medium
- debian linux, linux kernel +1 morePM / devfreq: Synchronize devfreq_monitor_[start/stop]CVE-2023-52635Fix available5.5 Medium
- debian linux, linux kernel +1 moretunnels: fix out of bounds access when building IPv6 PMTU errorCVE-2024-26665Fix available9.1 Critical
- debian linux, linux kernel +1 morehwmon: (coretemp) Fix out-of-bounds memory accessCVE-2024-26664Fix available7.8 High
- debian linux, linux kernel +1 moretipc: Check the bearer type before calling tipc_udp_nl_bearer_add()CVE-2024-26663Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morexhci: handle isoc Babble and Buffer Overrun events properlyCVE-2024-26659Fix available7.8 High
- debian linux, linux kernel +1 moreALSA: sh: aica: reorder cleanup operations to avoid UAF bugsCVE-2024-26654Fix available7.8 High
- debian linux, kernel util-linux, siemens ruggedcom rox mx5000 +13 more +15 morewall in util-linux through 2.40, often installed with setgid tty permissions, allows escape...CVE-2024-28085Public exploitFix available3.3 Low
- debian linux, linux kernel +1 moreiio: adc: ad7091r: Allow users to configure device eventsCVE-2023-52627Fix available5.5 Medium
- debian linux, linux kernel +1 moreSUNRPC: Fix a suspicious RCU usage warningCVE-2023-52623Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreext4: avoid online resizing failures due to oversized flex bgCVE-2023-52622Fix available5.5 Medium
- debian linux, linux kernel +1 morebpf: Check rcu_read_lock_trace_held() before calling bpf map helpersCVE-2023-52621Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moretracing: Ensure visibility when inserting an element into tracing_mapCVE-2024-26645Fix available5.5 Medium
- debian linux, linux kernel +1 morebtrfs: don't abort filesystem when attempting to snapshot deleted subvolumeCVE-2024-26644Fix available5.5 Medium
- gnu emacs, org mode, debian linux +2 moreIn Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org...CVE-2024-30205Fix available7.1 High
- gnu emacs, debian linux, gnu org mode +2 moreIn Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.CVE-2024-30204Fix available2.8 Low
- gnu emacs, debian linux, gnu org mode +2 moreIn Emacs before 29.3, Gnus treats inline MIME contents as trusted.CVE-2024-30203Fix available5.5 Medium
- mozilla firefox, firefox esr, debian linux +2 moreAn attacker was able to inject an event handler into a privileged object that would allow...CVE-2024-29944Fix available8.4 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_tables: mark set as dead when unbinding anonymous set with timeoutCVE-2024-26643Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_tables: disallow anonymous set with timeout flagCVE-2024-26642Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...CVE-2024-2614Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...CVE-2024-2611Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe permission prompt input delay could have expired while the window is not in focus, which made...CVE-2024-2609Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 more`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...CVE-2024-2608Fix available8.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....CVE-2024-2607Fix available8.1 High
- debian linux, linux kernel, netapp a150 firmware +11 more +13 moreip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()CVE-2024-26641Fix available8.6 High
- debian linux, linux kernel +1 moretcp: add sanity checks to rx zerocopyCVE-2024-26640Fix available7.8 High
- debian linux, linux kernel +1 morepstore/ram: Fix crash when setting number of cpus to an odd numberCVE-2023-52619Fix available5.5 Medium
- debian linux, linux kernel +1 moreblock/rnbd-srv: Check for unlikely string overflowCVE-2023-52618Fix available5.3 Medium
- debian linux, linux kernel +1 morePCI: switchtec: Fix stdev_release() crash after surprise hot removeCVE-2023-52617Fix available4.4 Medium
- debian linux, linux kernel +1 morellc: make llc_ui_sendmsg() more robust against bonding changesCVE-2024-26636Fix available5.5 Medium
- debian linux, linux kernel +1 morellc: Drop support for ETH_P_TR_802_2.CVE-2024-26635Fix available5.5 Medium
- debian linux, linux kernel +1 morecrypto: lib/mpi - Fix unexpected pointer access in mpi_ec_initCVE-2023-52616Fix available7.8 High
- debian linux, linux kernel, netapp 9500 firmware +17 more +19 moreip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()CVE-2024-26633Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morecrypto: scomp - fix req->dst buffer overflowCVE-2023-52612Fix available7.8 High
- debian linux, linux kernel +1 morebinder: fix race between mmput() and do_exit()CVE-2023-52609Fix available4.7 Medium
- bizdelnick gross, debian linux +1 moregross - security updateCVE-2023-52159Fix available7.5 High
- redhat libvirt, debian linux, red hat enterprise linux 6 +5 more +7 moreLibvirt: null pointer dereference in udevconnectlistallinterfaces()CVE-2024-2496Fix available5.0 Medium
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: WebSocket DoS with incomplete closing handshakeCVE-2024-23672Fix available6.3 Medium
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: HTTP/2 header handling DoSCVE-2024-24549Public exploitFix availableEPSS 23.1%7.5 High
- latchset jwcrypto, debian linux +1 moreJWCrypto vulnerable to JWT bomb Attack in `deserialize` functionCVE-2024-28102Fix available6.8 Medium
- Show moreLoading…