Debian

Debian Linux

10010 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-39352

Exploit
  • EPSS 1.3%
  • Veröffentlicht 31.08.2023 21:15:07
  • Zuletzt bearbeitet 03.11.2025 21:15:58

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values `rect->left` ...

7.5

CVE-2023-39350

Exploit
  • EPSS 1.39%
  • Veröffentlicht 31.08.2023 20:15:08
  • Zuletzt bearbeitet 03.11.2025 21:15:58

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS (e.g. abort due to `WINPR_ASSERT` with default compilation flags). When an ins...

7.5

CVE-2023-39351

Exploit
  • EPSS 1.32%
  • Veröffentlicht 31.08.2023 20:15:08
  • Zuletzt bearbeitet 03.11.2025 21:15:58

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_...

7.5

CVE-2023-39354

Exploit
  • EPSS 1.33%
  • Veröffentlicht 31.08.2023 20:15:08
  • Zuletzt bearbeitet 03.11.2025 21:15:58

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `nsc_rle_decompress_data` function. The Out-Of-Bounds Read occurs because it proce...

9.8

CVE-2023-39355

Exploit
  • EPSS 1.07%
  • Veröffentlicht 31.08.2023 20:15:08
  • Zuletzt bearbeitet 21.11.2024 08:15:13

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before beta3 are subject to a Use-After-Free in processing `RDPGFX_CMDID_RESETGRAPHICS` packets. I...

7.5

CVE-2023-40589

Exploit
  • EPSS 1.2%
  • Veröffentlicht 31.08.2023 19:15:11
  • Zuletzt bearbeitet 03.11.2025 21:16:01

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrush_decompress function. Feeding crafted input into this function can trigger t...

7.5

CVE-2023-20900

  • EPSS 1.19%
  • Veröffentlicht 31.08.2023 10:15:08
  • Zuletzt bearbeitet 08.10.2026 22:17:22

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if ...

8.8

CVE-2023-4572

  • EPSS 0.94%
  • Veröffentlicht 29.08.2023 20:15:10
  • Zuletzt bearbeitet 21.11.2024 08:35:27

Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

7.5

CVE-2023-38802

Exploit
  • EPSS 1.44%
  • Veröffentlicht 29.08.2023 16:15:09
  • Zuletzt bearbeitet 21.11.2024 08:14:13

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).

9.8

CVE-2023-41361

  • EPSS 0.77%
  • Veröffentlicht 29.08.2023 04:15:17
  • Zuletzt bearbeitet 21.11.2024 08:21:09

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.