Debian

Debian Linux

10010 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2014-8602

  • EPSS 25.21%
  • Veröffentlicht 11.12.2014 02:59:03
  • Zuletzt bearbeitet 06.05.2026 22:30:45

iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals.

5

CVE-2014-8601

  • EPSS 68.88%
  • Veröffentlicht 10.12.2014 15:59:17
  • Zuletzt bearbeitet 06.05.2026 22:30:45

PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezd...

6.5

CVE-2014-8102

  • EPSS 4.38%
  • Veröffentlicht 10.12.2014 15:59:14
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of...

6.5

CVE-2014-8098

  • EPSS 5.19%
  • Veröffentlicht 10.12.2014 15:59:10
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly exec...

6.5

CVE-2014-8096

  • EPSS 4.62%
  • Veröffentlicht 10.12.2014 15:59:08
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds rea...

6.5

CVE-2014-8095

  • EPSS 4.43%
  • Veröffentlicht 10.12.2014 15:59:07
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary...

6.5

CVE-2014-8094

  • EPSS 4.3%
  • Veröffentlicht 10.12.2014 15:59:06
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbi...

7.5

CVE-2014-9274

Exploit
  • EPSS 5.83%
  • Veröffentlicht 09.12.2014 23:59:10
  • Zuletzt bearbeitet 06.05.2026 22:30:45

UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".

4.3

CVE-2014-3616

  • EPSS 5.65%
  • Veröffentlicht 08.12.2014 11:59:03
  • Zuletzt bearbeitet 06.05.2026 22:30:45

nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual...

7.5

CVE-2014-8990

Exploit
  • EPSS 5.24%
  • Veröffentlicht 05.12.2014 16:59:11
  • Zuletzt bearbeitet 06.05.2026 22:30:45

default-rsyncssh.lua in Lsyncd 2.1.5 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.