Debian

Debian Linux

9142 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2023-34256

  • EPSS 0.02%
  • Veröffentlicht 31.05.2023 20:15:10
  • Zuletzt bearbeitet 11.03.2025 16:15:14

An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties ...

6.5

CVE-2023-2952

Exploit
  • EPSS 0.01%
  • Veröffentlicht 30.05.2023 23:15:09
  • Zuletzt bearbeitet 13.01.2025 20:15:26

XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

5.5

CVE-2023-34151

Exploit
  • EPSS 0.06%
  • Veröffentlicht 30.05.2023 22:15:11
  • Zuletzt bearbeitet 02.12.2024 14:34:36

A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546).

6.5

CVE-2023-2650

  • EPSS 91.97%
  • Veröffentlicht 30.05.2023 14:15:09
  • Zuletzt bearbeitet 19.03.2025 16:15:21

Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF o...

5.3

CVE-2023-32762

  • EPSS 0.12%
  • Veröffentlicht 28.05.2023 23:15:09
  • Zuletzt bearbeitet 21.11.2024 08:03:59

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly ...

7.5

CVE-2023-32307

  • EPSS 0.39%
  • Veröffentlicht 26.05.2023 23:15:10
  • Zuletzt bearbeitet 14.01.2025 20:15:26

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54), several other potential heap-over-...

4.7

CVE-2023-2898

  • EPSS 0.02%
  • Veröffentlicht 26.05.2023 22:15:14
  • Zuletzt bearbeitet 21.11.2024 07:59:31

There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.

7.5

CVE-2023-2879

Exploit
  • EPSS 0.04%
  • Veröffentlicht 26.05.2023 21:15:19
  • Zuletzt bearbeitet 15.01.2025 22:15:26

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

6.5

CVE-2023-2857

Exploit
  • EPSS 0.05%
  • Veröffentlicht 26.05.2023 21:15:18
  • Zuletzt bearbeitet 15.01.2025 16:15:27

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

6.5

CVE-2023-2858

Exploit
  • EPSS 0.03%
  • Veröffentlicht 26.05.2023 21:15:18
  • Zuletzt bearbeitet 15.01.2025 16:15:27

NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file