Debian

Debian Linux

9198 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.4

CVE-2019-19318

Exploit
  • EPSS 0.35%
  • Published 28.11.2019 00:15:11
  • Last modified 21.11.2024 04:34:34

In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,

5.3

CVE-2011-2515

  • EPSS 0.17%
  • Published 27.11.2019 21:15:12
  • Last modified 21.11.2024 01:28:26

PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.

10

CVE-2011-2523

Exploit
  • EPSS 94.27%
  • Published 27.11.2019 21:15:12
  • Last modified 21.11.2024 01:28:27

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

5.3

CVE-2011-2207

Exploit
  • EPSS 1.45%
  • Published 27.11.2019 19:15:11
  • Last modified 21.11.2024 01:27:49

dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service (DOS) via a specially-crafted certificate.

6.5

CVE-2013-2625

  • EPSS 0.18%
  • Published 27.11.2019 19:15:11
  • Last modified 21.11.2024 01:52:03

An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified

3.3

CVE-2012-6655

Exploit
  • EPSS 0.03%
  • Published 27.11.2019 18:15:11
  • Last modified 21.11.2024 01:46:37

An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.

7.8

CVE-2011-2187

Exploit
  • EPSS 0.1%
  • Published 27.11.2019 18:15:10
  • Last modified 21.11.2024 01:27:46

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.

9.3

CVE-2012-2248

  • EPSS 2.44%
  • Published 27.11.2019 18:15:10
  • Last modified 21.11.2024 01:38:46

An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable.

6.1

CVE-2016-1000110

  • EPSS 9.14%
  • Published 27.11.2019 17:15:14
  • Last modified 21.11.2024 02:42:52

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.

9.3

CVE-2019-10220

  • EPSS 0.74%
  • Published 27.11.2019 16:15:11
  • Last modified 21.11.2024 04:18:41

Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.