Debian

Debian Linux

9979 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2018-6358

  • EPSS 0.58%
  • Veröffentlicht 27.01.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 04:10:33

The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file.

8.8

CVE-2018-6359

Exploit
  • EPSS 0.98%
  • Veröffentlicht 27.01.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 04:10:33

The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.

7.8

CVE-2017-12374

Exploit
  • EPSS 7.33%
  • Veröffentlicht 26.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:09:24

The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input valid...

7.8

CVE-2017-12375

Exploit
  • EPSS 9.67%
  • Veröffentlicht 26.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:09:24

The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input valid...

9.3

CVE-2017-12376

Exploit
  • EPSS 17.82%
  • Veröffentlicht 26.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:09:24

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerabili...

10

CVE-2017-12377

Exploit
  • EPSS 21.36%
  • Veröffentlicht 26.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:09:25

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerabili...

7.1

CVE-2017-12378

Exploit
  • EPSS 7.71%
  • Veröffentlicht 26.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:09:25

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation...

10

CVE-2017-12379

Exploit
  • EPSS 15.69%
  • Veröffentlicht 26.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:09:25

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerabili...

7.8

CVE-2017-12380

Exploit
  • EPSS 13.22%
  • Veröffentlicht 26.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:09:25

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation...

7.5

CVE-2017-18076

  • EPSS 0.44%
  • Veröffentlicht 26.01.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:18

In strategy.rb in OmniAuth before 1.3.2, the authenticity_token value is improperly protected because POST (in addition to GET) parameters are stored in the session and become available in the environment of the callback phase.