Skip to contentDebian vulnerabilities
Newest
- struktur libheif, debian linux +1 moreIn Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing...CVE-2024-41311Fix available8.1 High
- debian linux, linux kernel +1 moredrm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAXCVE-2024-46871Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn attacker was able to achieve code execution in the content process by exploiting a use-after...CVE-2024-9680In KEVPublic exploitFix availableEPSS 23.2%9.8 Critical
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data...CVE-2024-46956Fix available7.8 High
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of...CVE-2024-46955Fix available5.5 Medium
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer...CVE-2024-46953Fix available7.8 High
- artifex ghostscript, debian linux +1 moreAn issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a...CVE-2024-46952Fix available7.8 High
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked...CVE-2024-46951Fix available7.8 High
- nlnet labs unbound, debian linux +1 moreUnbounded name compression could lead to Denial of ServiceCVE-2024-8508Fix available5.3 Medium
- debian linux, linux kernel +1 moreplatform/x86: panasonic-laptop: Fix SINF array out of bounds accessesCVE-2024-46859Fix available7.8 High
- debian linux, linux kernel +1 morespi: nxp-fspi: fix the KASAN report out-of-bounds bugCVE-2024-46853Fix available7.8 High
- debian linux, linux kernel +1 moredma-buf: heaps: Fix off-by-one in CMA heap fault handlerCVE-2024-46852Fix available7.8 High
- debian linux, linux kernel +1 moreASoC: meson: axg-card: fix 'use-after-free'CVE-2024-46849Fix available7.8 High
- debian linux, linux kernel +1 moreKVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTSCVE-2024-46830Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amd/pm: Fix negative array index readCVE-2024-46821Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amd/display: Skip inactive planes within ModeSupportAndSystemConfigurationCVE-2024-46812Fix available7.8 High
- openprinting libppd, debian linux +1 morelibppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD bufferCVE-2024-47175Public exploitFix availableEPSS 63.6%8.6 High
- apache tomcat connectors, debian linux +1 moreApache Tomcat Connectors: mod_jk: local users can view and modify configurationCVE-2024-46544Fix available5.9 Medium
- debian linux, linux kernel +1 moreHID: amd_sfh: free driver_data after destroying hid deviceCVE-2024-46746Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amdgpu: Fix out-of-bounds write warningCVE-2024-46725Fix available7.8 High
- debian linux, linux kernel +1 moreACPI: processor: idle: Check acpi_fetch_acpi_dev() return valueCVE-2022-50327Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreNFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAINCVE-2025-38393Fix available7.5 High
- debian linux, linux kernel +1 moreice: arfs: fix use-after-free when freeing @rx_cpu_rmapCVE-2022-49063Fix available7.8 High
- curl, debian linux, netapp active iq unified manager +26 more +28 moreOCSP stapling bypass with GnuTLSCVE-2024-8096Fix available6.5 Medium
- debian linux, linux kernel +1 moreipv6: fix possible UAF in ip6_finish_output2()CVE-2024-44986Fix available8.1 High
- debian linux, linux kernel +1 moredrm/amdgpu: Validate TA binary sizeCVE-2024-44977Fix available7.8 High
- debian linux, linux kernel +1 moremptcp: pm: avoid possible UaF when selecting endpCVE-2024-44974Fix available7.8 High
- debian linux, linux kernel +1 morefou: remove warn in gue_gro_receive on unsupported protocolCVE-2024-44940Fix available7.5 High
- debian linux, linux kernel +1 morebna: adjust 'name' buf size of bna_tcb and bna_ccb structuresCVE-2024-43839Fix available7.8 High
- debian linux, linux kernel +1 morebtrfs: fix extent map use-after-free when adding pages to compressed bioCVE-2024-42314Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morePCI/DPC: Fix use-after-free on concurrent DPC and hot-removalCVE-2024-42302Fix available7.8 High
- debian linux, flatpak +1 moreFlatpak may allow access to files outside sandbox for certain appsCVE-2024-42472Fix available10.0 Critical
- debian linux, linux kernel +1 moref2fs: check validation of fault attrs in f2fs_build_fault_attr()CVE-2024-42160Fix available7.8 High
- debian linux, linux kernel +1 morecdrom: rearrange last_media_change check to avoid unintentional overflowCVE-2024-42136Fix available7.8 High
- debian linux, linux kernel +1 morePCI/MSI: Fix UAF in msi_capability_initCVE-2024-41096Fix available7.8 High
- debian linux, linux kernel +1 morenvme: avoid double free special payloadCVE-2024-41073Fix available9.8 Critical
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreblock/ioctl: prefer different overflow checkCVE-2024-41000Fix available7.8 High
- debian linux, linux kernel +1 morebtrfs: zoned: fix use-after-free due to race with dev replaceCVE-2024-39496Fix available7.8 High
- debian linux, linux kernel +1 moreima: Fix use-after-free on a dentry's dname.nameCVE-2024-39494Fix available7.8 High
- debian linux, linux kernel +1 morescsi: mpi3mr: Sanitise num_physCVE-2024-42159Fix available7.8 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- mit kerberos 5, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS...CVE-2024-37371Fix available9.1 Critical
- openssl, debian linux, netapp 500f firmware +40 more +42 moreSSL_select_next_proto buffer overreadCVE-2024-5535Public exploitFix available9.1 Critical
- debian linux, linux kernel +1 moreftrace: Fix possible use-after-free issue in ftrace_location()CVE-2024-38588Fix available7.8 High
- python urllib3, debian linux, netapp active iq unified manager +2 moreProxy-Authorization request header isn't stripped during cross-origin redirects in urllib3CVE-2024-37891Fix available4.4 Medium
- debian linux, openprinting cups +1 moreCupsd Listen arbitrary chmod 0140777CVE-2024-35235Fix available4.4 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...CVE-2024-5696Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy monitoring the time certain operations take, an attacker could have guessed which external...CVE-2024-5690Fix available4.3 Medium
- android kernel, debian linux +1 morenet: fix __dst_negative_advice() raceCVE-2024-36971In KEVPublic exploitFix available7.8 High
- roundcube webmail, debian linux +1 moreRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user...CVE-2024-37384Fix available6.1 Medium
- Show moreLoading…