debian debian linux 10.0 vulnerabilities and exploits

(subscribe to this query)

5.5

CVSSv3

An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c....

Linux Linux Kernel Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

6.5

CVSSv3

Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver...

Linux Linux Kernel Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

5.5

CVSSv3

A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash....

Linux Linux Kernel Debian Debian Linux 9.0 Debian Debian Linux 10.01 Github repository available

7.5

CVSSv3

The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other...

Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

7.8

CVSSv3

The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation....

Debian X11-common Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

7.5

CVSSv3

In affected versions of WordPress, some private posts, which were previously public, can result in unauthenticated disclosure under a specific set of conditions. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3,...

Wordpress Wordpress Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 8.02 Github repositories available

9.8

CVSSv3

cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system...

Apple Cups Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

5.9

CVSSv3

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks....

Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Offlineimap Offlineimap

7.5

CVSSv3

SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)...

Inverse Sogo Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

5.9

CVSSv3

In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011....

Gnome Grilo Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook