Debian

Debian Linux

9979 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2018-10839

Exploit
  • EPSS 1.56%
  • Veröffentlicht 16.10.2018 14:29:01
  • Zuletzt bearbeitet 21.11.2024 03:42:06

Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to cra...

6.1

CVE-2017-5934

  • EPSS 0.65%
  • Veröffentlicht 15.10.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 03:28:42

Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5.5

CVE-2018-15378

  • EPSS 1.62%
  • Veröffentlicht 15.10.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 03:50:39

A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be...

6.3

CVE-2018-18073

  • EPSS 0.28%
  • Veröffentlicht 15.10.2018 16:29:03
  • Zuletzt bearbeitet 21.11.2024 03:55:26

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.

8.6

CVE-2018-17961

Exploit
  • EPSS 11.33%
  • Veröffentlicht 15.10.2018 16:29:02
  • Zuletzt bearbeitet 21.11.2024 03:55:17

Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.

5.5

CVE-2018-18310

Exploit
  • EPSS 0.09%
  • Veröffentlicht 15.10.2018 02:29:00
  • Zuletzt bearbeitet 21.11.2024 03:55:40

An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated b...

7.8

CVE-2018-18226

  • EPSS 1.48%
  • Veröffentlicht 12.10.2018 06:29:01
  • Zuletzt bearbeitet 21.11.2024 03:55:33

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.

7.5

CVE-2018-18227

  • EPSS 1.84%
  • Veröffentlicht 12.10.2018 06:29:01
  • Zuletzt bearbeitet 21.11.2024 03:55:34

In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.

7.5

CVE-2018-18225

  • EPSS 1.18%
  • Veröffentlicht 12.10.2018 06:29:00
  • Zuletzt bearbeitet 21.11.2024 03:55:33

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.

5.9

CVE-2018-16758

  • EPSS 0.15%
  • Veröffentlicht 10.10.2018 21:29:02
  • Zuletzt bearbeitet 21.11.2024 03:53:17

Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.