Skip to contentDebian vulnerabilities
Newest
- debian linux, linux kernel +1 moredmaengine: fsl-qdma: Fix a memory leak related to the queue command DMACVE-2024-35833Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moremedia: tc358743: register v4l2 async device only after successful setupCVE-2024-35830Fix available7.8 High
- debian linux, linux kernel +1 moredrm/lima: fix a memleak in lima_heap_allocCVE-2024-35829Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()CVE-2024-35828Fix available5.5 Medium
- debian linux, linux kernel +1 moreusb: gadget: ncm: Fix handling of zero block length packetsCVE-2024-35825Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevt: fix unicode buffer corruption when deleting charactersCVE-2024-35823Fix available5.3 Medium
- debian linux, linux kernel +1 moreusb: udc: remove warning when queue disabled epCVE-2024-35822Fix available5.5 Medium
- debian linux, linux kernel +1 moreubifs: Set page uptodate in the correct placeCVE-2024-35821Fix available5.5 Medium
- debian linux, linux kernel +1 moresoc: fsl: qbman: Use raw spinlock for cgr_lockCVE-2024-35819Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversionCVE-2024-35815Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremmc: core: Avoid negative index with array accessCVE-2024-35813Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detachCVE-2024-35811Fix available8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morePCI/PM: Drain runtime-idle callbacks before driver removalCVE-2024-35809Fix available4.7 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreext4: fix corruption during on-line resizeCVE-2024-35807Fix available5.5 Medium
- debian linux, linux kernel +1 moresoc: fsl: qbman: Always disable interrupts when taking cgr_lockCVE-2024-35806Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm snapshot: fix lockup in dm_exception_table_exitCVE-2024-35805Fix available5.5 Medium
- debian linux, linux kernel +1 morenet: ll_temac: platform_get_resource replaced by wrong functionCVE-2024-35796Fix available5.5 Medium
- debian linux, linux kernel +1 moreKVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()CVE-2024-35791Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mac80211: check/clear fast rx for non-4addr sta VLAN changesCVE-2024-35789Fix available8.0 High
- debian linux, linux kernel +1 moretee: optee: Fix kernel panic caused by incorrect error handlingCVE-2024-35785Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: usb-audio: Stop parsing channels bits when all channels are found.CVE-2024-27436Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecpumap: Zero-initialise xdp_rxq_info struct before running XDP programCVE-2024-27431Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetrom: Fix data-races around sysctl_net_busy_readCVE-2024-27419Fix available4.7 Medium
- debian linux, linux kernel +1 moreipv6: fix potential "struct net" leak in inet6_rtm_getaddr()CVE-2024-27417Fix available5.5 Medium
- debian linux, linux kernel +1 moreBluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUESTCVE-2024-27416Fix available8.8 High
- debian linux, linux kernel +1 morertnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing backCVE-2024-27414Fix available7.8 High
- debian linux, linux kernel +1 moreefi/capsule-loader: fix incorrect allocation sizeCVE-2024-27413Fix available5.5 Medium
- debian linux, linux kernel +1 morepower: supply: bq27xxx-i2c: Do not free non existing IRQCVE-2024-27412Fix available5.5 Medium
- debian linux, linux kernel +1 morewifi: nl80211: reject iftype change with mesh ID changeCVE-2024-27410Fix available7.8 High
- debian linux, linux kernel +1 moreusb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBsCVE-2024-27405Fix available7.5 High
- libreoffice, debian linux, fedoraproject fedora +2 moreGraphic on-click binding allows unchecked script executionCVE-2024-3044Fix available6.5 Medium
- git, debian linux, fedoraproject fedora +2 moreGit's protections for cloning untrusted repositories can be bypassedCVE-2024-32465Fix available7.4 High
- git, debian linux, fedoraproject fedora +2 moreLocal Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directoryCVE-2024-32021Fix available3.9 Low
- git, debian linux, fedoraproject fedora +2 moreGit vulnerable to Remote Code Execution while cloning special-crafted local repositoriesCVE-2024-32004Public exploitFix available8.2 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...CVE-2024-4777Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen importing resources using Web Workers, error messages would distinguish the difference...CVE-2024-4769Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...CVE-2024-4768Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...CVE-2024-4767Fix available4.3 Medium
- debian linux, linux kernel +1 moreio_uring: drop any code related to SCM_RIGHTSCVE-2023-52656Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 morefirewire: nosy: ensure user_length is taken into account when fetching packet contentsCVE-2024-27401Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreBluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeoutCVE-2024-27399Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreBluetooth: Fix use-after-free bugs caused by sco_sock_timeoutCVE-2024-27398Public exploitFix available8.0 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: gtp: Fix Use-After-Free in gtp_dellinkCVE-2024-27396Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: openvswitch: Fix Use-After-Free in ovs_ct_exitCVE-2024-27395Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +5 more +7 morePDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDFCVE-2024-4367Public exploitFix availableEPSS 70.7%8.8 High
- gnome glib, debian linux, fedoraproject fedora +7 more +9 moreAn issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a...CVE-2024-34397Fix available5.2 Medium
- pallets werkzeug, debian linux, fedoraproject fedora +2 moreWerkzeug's improper usage of a pathname and improper CSRF protection results in the remote command executionCVE-2024-34069Public exploitFix available7.5 High
- offis dcmtk, debian linux +1 moredcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.CVE-2024-34509Fix available5.3 Medium
- offis dcmtk, debian linux +1 moredcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.CVE-2024-34508Fix available4.3 Medium
- debian linux, linux kernel +1 moreSUNRPC: fix some memleaks in gssx_dec_option_arrayCVE-2024-27388Fix available9.8 Critical
- Show moreLoading…