Debian

Debian Linux

9145 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2020-10188

  • EPSS 8.55%
  • Published 06.03.2020 15:15:14
  • Last modified 21.11.2024 04:54:55

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.

3.5

CVE-2019-20382

  • EPSS 0.18%
  • Published 05.03.2020 19:15:11
  • Last modified 21.11.2024 04:38:20

QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.

8.8

CVE-2020-9402

  • EPSS 84.43%
  • Published 05.03.2020 15:15:12
  • Last modified 21.11.2024 05:40:33

Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggreg...

7.5

CVE-2020-8659

  • EPSS 1.02%
  • Published 04.03.2020 21:15:11
  • Last modified 21.11.2024 05:39:12

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks.

5.5

CVE-2020-10029

Exploit
  • EPSS 0.05%
  • Published 04.03.2020 15:15:13
  • Last modified 21.11.2024 04:54:40

The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl...

9.8

CVE-2020-10018

  • EPSS 2.04%
  • Published 02.03.2020 23:15:11
  • Last modified 21.11.2024 04:54:39

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution. This issue has been fixed in 2.28.0 with improved memor...

7.8

CVE-2020-9549

Exploit
  • EPSS 0.73%
  • Published 02.03.2020 05:15:13
  • Last modified 21.11.2024 05:40:50

In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document.

9.8

CVE-2020-9547

  • EPSS 53.37%
  • Published 02.03.2020 04:15:11
  • Last modified 21.11.2024 05:40:50

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).

9.8

CVE-2020-9548

  • EPSS 70.37%
  • Published 02.03.2020 04:15:11
  • Last modified 21.11.2024 05:40:50

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).

9.8

CVE-2020-9546

  • EPSS 2.33%
  • Published 02.03.2020 04:15:10
  • Last modified 21.11.2024 05:40:50

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).