Debian

Debian Linux

9998 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-28044

Exploit
  • EPSS 1.9%
  • Veröffentlicht 15.04.2022 14:15:07
  • Zuletzt bearbeitet 21.11.2024 06:56:40

Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control.

7.5

CVE-2022-26498

  • EPSS 16.41%
  • Veröffentlicht 15.04.2022 05:15:06
  • Zuletzt bearbeitet 21.11.2024 06:54:03

An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not certificates. These files could be much larger than what one would expect to download, leading to Resource Exhaustion. This is fix...

9.1

CVE-2022-26499

  • EPSS 7.68%
  • Veröffentlicht 15.04.2022 05:15:06
  • Zuletzt bearbeitet 21.11.2024 06:54:03

An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests (such as GET) to interfaces such as localhost by using the Identity header. This is fixed in 16.25.2, 18.11.2, and 19.3.2.

9.8

CVE-2022-26651

  • EPSS 6.98%
  • Veröffentlicht 15.04.2022 05:15:06
  • Zuletzt bearbeitet 21.11.2024 06:54:15

An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc module provides possibly inadequate escaping functionality for backslash characters in SQL queries, resulting in user-provided data creating a ...

5.3

CVE-2022-1328

Exploit
  • EPSS 1.71%
  • Veröffentlicht 14.04.2022 21:15:08
  • Zuletzt bearbeitet 21.11.2024 06:40:29

Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line

7.5

CVE-2022-27452

Exploit
  • EPSS 2.19%
  • Veröffentlicht 14.04.2022 13:15:12
  • Zuletzt bearbeitet 21.11.2024 06:55:45

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.

7.5

CVE-2022-27456

Exploit
  • EPSS 2.13%
  • Veröffentlicht 14.04.2022 13:15:12
  • Zuletzt bearbeitet 21.11.2024 06:55:46

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.

7.5

CVE-2022-27445

Exploit
  • EPSS 2.17%
  • Veröffentlicht 14.04.2022 13:15:11
  • Zuletzt bearbeitet 21.11.2024 06:55:44

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.

7.5

CVE-2022-27447

Exploit
  • EPSS 2.25%
  • Veröffentlicht 14.04.2022 13:15:11
  • Zuletzt bearbeitet 21.11.2024 06:55:45

MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.

7.5

CVE-2022-27448

Exploit
  • EPSS 2.15%
  • Veröffentlicht 14.04.2022 13:15:11
  • Zuletzt bearbeitet 21.11.2024 06:55:45

There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.