Debian

Debian Linux

9947 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2015-8560

  • EPSS 10.78%
  • Veröffentlicht 14.04.2016 14:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different...

9.3

CVE-2015-8540

  • EPSS 13.55%
  • Veröffentlicht 14.04.2016 14:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impa...

8

CVE-2015-5343

  • EPSS 19.09%
  • Veröffentlicht 14.04.2016 14:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbi...

5.9

CVE-2016-0787

  • EPSS 4.07%
  • Veröffentlicht 13.04.2016 17:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes...

5.9

CVE-2016-0739

  • EPSS 4.31%
  • Veröffentlicht 13.04.2016 17:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH ...

7.5

CVE-2015-8806

  • EPSS 6.05%
  • Veröffentlicht 13.04.2016 17:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.

6.5

CVE-2015-8784

  • EPSS 1.52%
  • Veröffentlicht 13.04.2016 17:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.

5.5

CVE-2015-8683

  • EPSS 0.21%
  • Veröffentlicht 13.04.2016 17:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.

7.5

CVE-2015-3146

  • EPSS 2.85%
  • Veröffentlicht 13.04.2016 17:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted S...

6.5

CVE-2015-1547

Exploit
  • EPSS 4.45%
  • Veröffentlicht 13.04.2016 17:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.