Debian

Debian Linux

9142 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2015-2191

  • EPSS 3.29%
  • Veröffentlicht 08.03.2015 02:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length...

5

CVE-2015-2189

  • EPSS 0.3%
  • Veröffentlicht 08.03.2015 02:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via...

5

CVE-2015-2188

  • EPSS 0.34%
  • Veröffentlicht 08.03.2015 02:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and applicatio...

4.4

CVE-2015-0239

Exploit
  • EPSS 0.1%
  • Veröffentlicht 02.03.2015 11:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service (guest OS crash) by triggering u...

2.1

CVE-2014-9644

  • EPSS 0.04%
  • Veröffentlicht 02.03.2015 11:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) ...

5

CVE-2014-8160

  • EPSS 2.9%
  • Veröffentlicht 02.03.2015 11:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass in...

2.1

CVE-2013-7421

Exploit
  • EPSS 0.03%
  • Veröffentlicht 02.03.2015 11:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.

5

CVE-2015-0885

  • EPSS 0.89%
  • Veröffentlicht 28.02.2015 02:59:35
  • Zuletzt bearbeitet 12.04.2025 10:46:40

checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.

7.8

CVE-2015-1414

  • EPSS 0.89%
  • Veröffentlicht 27.02.2015 15:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10. 10.0 before p18, and 10.1 before p6 allows remote attackers to cause a denial of service (crash) via a crafted IGMP packet, which triggers an incorrect size calculation and allocation of...

4.6

CVE-2015-1572

  • EPSS 0.12%
  • Veröffentlicht 24.02.2015 15:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an...