Debian

Debian Linux

9979 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2016-3074

Exploit
  • EPSS 60.49%
  • Veröffentlicht 26.04.2016 14:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflo...

7.5

CVE-2015-8852

  • EPSS 1.09%
  • Veröffentlicht 25.04.2016 14:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction...

5.9

CVE-2016-4085

  • EPSS 0.88%
  • Veröffentlicht 25.04.2016 10:59:10
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long st...

5.9

CVE-2016-4082

  • EPSS 0.23%
  • Veröffentlicht 25.04.2016 10:59:07
  • Zuletzt bearbeitet 06.05.2026 22:30:45

epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service (out-of-bounds access and appl...

5.9

CVE-2016-4079

  • EPSS 0.23%
  • Veröffentlicht 25.04.2016 10:59:04
  • Zuletzt bearbeitet 06.05.2026 22:30:45

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via ...

10

CVE-2016-3427

Warnung
  • EPSS 93.31%
  • Veröffentlicht 21.04.2016 11:00:21
  • Zuletzt bearbeitet 22.04.2026 13:41:41

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

4.1

CVE-2016-0668

  • EPSS 0.36%
  • Veröffentlicht 21.04.2016 10:59:32
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.

5.5

CVE-2016-0666

  • EPSS 0.24%
  • Veröffentlicht 21.04.2016 10:59:30
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to Secu...

4.7

CVE-2016-0655

  • EPSS 0.24%
  • Veröffentlicht 21.04.2016 10:59:22
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.

5.5

CVE-2016-0650

  • EPSS 0.21%
  • Veröffentlicht 21.04.2016 10:59:18
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to Repl...