← Back

Debian Linux

debian_linux

Vendor: Debian • 10,013 CVEs

CVEs (10,013)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Faad2 Project
2Debian Linux
Faad2
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an attacker to cause Denial of Service.
2Debian
Faad2 Project
2Debian Linux
Faad2
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_synthesis_64 located in sbr_qmf.c. It allows an attacker to cause code Execution.
2Debian
Faad2 Project
2Debian Linux
Faad2
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution.
2Debian
Faad2 Project
2Debian Linux
Faad2
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution.
2Debian
Unicode
2Debian Linux
International Components For Unicode
Oct 14, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
3Debian
LinuxNetapp
11Cloud Backup
Debian LinuxH300e Firmware+8 more
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs be...Show more
arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture.Show less
3Apache
DebianOracle
18Agile Product Lifecycle Management
Commerce Guided SearchCommerce Platform+15 more
Oct 8, 2026
Sep 19, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference e...Show more
All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.Show less
4Debian
FedoraprojectLinux+1 more
13Cloud Backup
Debian LinuxFedora+10 more
Jun 17, 2026
Sep 19, 2021
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/ma...Show more
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation.Show less
2Debian
Nth Check Project
2Debian Linux
Nth Check
Jun 17, 2026
Sep 17, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
nth-check is vulnerable to Inefficient Regular Expression Complexity
2Debian
Object Path Project
2Debian Linux
Object Path
Jun 17, 2026
Sep 17, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
2Debian
Struktur
2Debian Linux
Libde265
Jun 17, 2026
Sep 16, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file.
2Debian
Struktur
2Debian Linux
Libde265
Jun 17, 2026
Sep 16, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file.
2Debian
Struktur
2Debian Linux
Libde265
Jun 17, 2026
Sep 16, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file.
2Debian
Struktur
2Debian Linux
Libde265
Jun 17, 2026
Sep 16, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libde265 v1.0.4 contains a global buffer overflow in the decode_CABAC_bit function, which can be exploited via a crafted a file.
2Debian
Xfig Project
2Debian Linux
Fig2dev
Jun 17, 2026
Sep 16, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.
2Debian
Xfig Project
2Debian Linux
Fig2dev
Jun 17, 2026
Sep 16, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.
2Debian
Xfig Project
2Debian Linux
Fig2dev
Jun 17, 2026
Sep 16, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
2Debian
Xfig Project
2Debian Linux
Fig2dev
Jun 17, 2026
Sep 16, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
2Debian
Xfig Project
2Debian Linux
Fig2dev
Jun 17, 2026
Sep 16, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
2Debian
Xfig Project
2Debian Linux
Fig2dev
Jun 17, 2026
Sep 16, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.