Debian

Debian Linux

10009 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-32761

  • EPSS 31.05%
  • Veröffentlicht 21.07.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 06:07:41

Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BI...

6.4

CVE-2021-37159

  • EPSS 0.39%
  • Veröffentlicht 21.07.2021 15:16:20
  • Zuletzt bearbeitet 08.10.2026 22:17:11

hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.

5.1

CVE-2021-2388

  • EPSS 4.01%
  • Veröffentlicht 21.07.2021 15:15:40
  • Zuletzt bearbeitet 27.05.2025 16:45:29

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult ...

4.3

CVE-2021-2369

  • EPSS 3.44%
  • Veröffentlicht 21.07.2021 15:15:31
  • Zuletzt bearbeitet 27.05.2025 16:44:57

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Eas...

4.3

CVE-2021-2341

  • EPSS 4.24%
  • Veröffentlicht 21.07.2021 15:15:17
  • Zuletzt bearbeitet 27.05.2025 16:47:32

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. ...

5.5

CVE-2020-19609

Exploit
  • EPSS 1.05%
  • Veröffentlicht 21.07.2021 15:15:12
  • Zuletzt bearbeitet 21.11.2024 05:09:15

Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service.

7.8

CVE-2021-33909

Exploit
  • EPSS 9.73%
  • Veröffentlicht 20.07.2021 19:15:09
  • Zuletzt bearbeitet 21.11.2024 06:09:45

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

5.5

CVE-2021-33910

Exploit
  • EPSS 8.79%
  • Veröffentlicht 20.07.2021 19:15:09
  • Zuletzt bearbeitet 14.10.2026 12:17:12

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

8.8

CVE-2021-3246

Exploit
  • EPSS 3.29%
  • Veröffentlicht 20.07.2021 15:15:11
  • Zuletzt bearbeitet 21.11.2024 06:21:09

A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.

7.5

CVE-2021-22235

Exploit
  • EPSS 3.3%
  • Veröffentlicht 20.07.2021 12:15:07
  • Zuletzt bearbeitet 21.11.2024 05:49:45

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file