Debian Linux

debian_linux

Vendor: Debian • 10,013 CVEs

CVEs (10,013)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-20005 2Debian F5 2Debian Linux Nginx Dec 5, 2025 Jun 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), wh...Show more NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.Show less
CVE-2021-33054 2Debian Inverse 2Debian Linux Sogo Jun 17, 2026 Jun 4, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authent...Show more SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)Show less
CVE-2021-28091 3Debian EntrouvertFedoraproject 3Debian Linux FedoraLasso Jun 17, 2026 Jun 4, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.
CVE-2020-22054 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c.
CVE-2015-1877 2Debian Freedesktop 2Debian Linux Xdg Utils Nov 21, 2024 Jun 2, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file.
CVE-2021-3468 2Avahi Debian 2Avahi Debian Linux Jun 17, 2026 Jun 2, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attac...Show more A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.Show less
CVE-2020-22049 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.
CVE-2020-22048 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c.
CVE-2020-22046 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.
CVE-2019-12067 4Debian FedoraprojectQemu+1 more 5Debian Linux Enterprise LinuxFedora+2 more Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.
CVE-2021-3546 2Debian Qemu 2Debian Linux Qemu Jun 17, 2026 Jun 2, 2021 N/A· v4 8.2 HIGH· v3 4.6 MEDIUM· v2 An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command fr...Show more An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.Show less
CVE-2021-3545 2Debian Qemu 2Debian Linux Qemu Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virgl_cmd_get_capset_info() in contrib/vhost-user-gpu...Show more An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virgl_cmd_get_capset_info() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host.Show less
CVE-2021-3544 2Debian Qemu 2Debian Linux Qemu Jun 17, 2026 Jun 2, 2021 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c d...Show more Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime.Show less
CVE-2018-10195 3Debian Lrzsz ProjectSuse 5Debian Linux Linux Enterprise DebuginfoLinux Enterprise Desktop+2 more Nov 21, 2024 Jun 2, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.
CVE-2020-22044 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c.
CVE-2020-22042 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c.
CVE-2020-22041 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc.
CVE-2020-22037 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.
CVE-2020-22036 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption and other potential consequences.
CVE-2020-22035 2Debian Ffmpeg 2Debian Linux Ffmpeg Jun 17, 2026 Jun 1, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might lead to memory corruption and other potential consequences.

Previous 1...163164165...501 Next