debian debian linux 7.0 vulnerabilities and exploits

(subscribe to this query)

5.5

CVSSv3

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash....

Linux Linux Kernel Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Redhat Virtualization Host 4.0 Redhat Enterprise Linux Workstation 7.01 Github repository available

NA

The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI...

Debian Debian Linux 8.0 Debian Debian Linux 7.0

7.8

CVSSv3

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or...

Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Libreoffice Libreoffice Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

7.8

CVSSv3

sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other...

Libreoffice Libreoffice Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

7.8

CVSSv3

An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate commands and perform...

Zmanda Amanda 3.3.1 Redhat Enterprise Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 10.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0

9.8

CVSSv3

CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)...

Python Python Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.01 Github repository available

9.8

CVSSv3

Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution...

Lcdf Gifsicle Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0

6.1

CVSSv3

The consentAdmin module in SimpleSAMLphp through 1.14.15 is vulnerable to a Cross-Site Scripting attack, allowing an attacker to craft links that could execute arbitrary JavaScript code on the victim's web browser....

Simplesamlphp Simplesamlphp Debian Debian Linux 7.0 Debian Debian Linux 9.0 Debian Debian Linux 8.0

4.7

CVSSv3

Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in various custom and contributed modules. This vulnerability could allow an attacker to trick users into unwillingly...

Drupal Drupal Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0

7.5

CVSSv3

The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input....

Simplesamlphp Simplesamlphp Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook