debian debian linux 8.0 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other...

Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

5.5

CVSSv3

The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling....

Linux Linux Kernel Debian Debian Linux 8.0 Debian Debian Linux 9.01 Github repository available

NA

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet...

Linux Linux Kernel Debian Debian Linux 7.0 Debian Debian Linux 8.01 Github repository available

5.5

CVSSv3

An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service (out-of-bounds memory access and BUG) can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr....

Linux Linux Kernel Debian Debian Linux 8.0 Debian Debian Linux 9.01 Github repository available

NA

The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI...

Debian Debian Linux 8.0 Debian Debian Linux 7.0

6.5

CVSSv3

In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets....

Otrs Otrs Debian Debian Linux 7.0 Debian Debian Linux 9.0 Debian Debian Linux 8.0

9.8

CVSSv3

The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions....

Simplesamlphp Simplesamlphp Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

7.5

CVSSv3

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparse.c by limiting the recursion depth....

Wireshark Wireshark Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0

6.5

CVSSv3

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by correcting the signature timestamp bounds checks....

Wireshark Wireshark Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

7.5

CVSSv3

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was addressed in epan/dissectors/asn1/nbap/nbap.cnf by ensuring DCH ID initialization....

Wireshark Wireshark Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook