← Back

Debian Linux

debian_linux

Vendor: Debian • 10,001 CVEs

CVEs (10,001)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-16296
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is f...Show more
A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.Show less
CVE-2020-16295
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...Show more
A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.Show less
CVE-2020-16294
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16293
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a...Show more
A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.Show less
CVE-2020-16292
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16291
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16290
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16289
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16288
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16287
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-17507
3Debian
FedoraprojectQt
3Debian Linux
FedoraQt
Jun 17, 2026
Aug 12, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.
CVE-2020-17446
2Debian
Magic
2Asyncpg
Debian Linux
Jun 17, 2026
Aug 12, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array dat...Show more
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.Show less
CVE-2020-12674
4Canonical
DebianDovecot+1 more
4Debian Linux
DovecotFedora+1 more
Jun 17, 2026
Aug 12, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled.
CVE-2020-12673
4Canonical
DebianDovecot+1 more
4Debian Linux
DovecotFedora+1 more
Jun 17, 2026
Aug 12, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.
CVE-2020-12100
4Canonical
DebianDovecot+1 more
4Debian Linux
DovecotFedora+1 more
Jun 17, 2026
Aug 12, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.
CVE-2020-17489
4Canonical
DebianGnome+1 more
4Debian Linux
Gnome ShellLeap+1 more
Jun 17, 2026
Aug 11, 2020
N/A· v4
4.3 MEDIUM· v3
1.9 LOW· v2
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had dec...Show more
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)Show less
CVE-2020-0256
2Debian
Google
2Android
Debian Linux
Jun 17, 2026
Aug 11, 2020
N/A· v4
6.8 MEDIUM· v3
7.2 HIGH· v2
In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution...Show more
In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864Show less
CVE-2020-17368
4Debian
FedoraprojectFirejail Project+1 more
4Debian Linux
FedoraFirejail+1 more
Jun 17, 2026
Aug 11, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection.
CVE-2020-17367
4Debian
FedoraprojectFirejail Project+1 more
4Debian Linux
FedoraFirejail+1 more
Jun 17, 2026
Aug 11, 2020
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection.
CVE-2020-16092
4Canonical
DebianOpensuse+1 more
4Debian Linux
LeapQemu+1 more
Jun 17, 2026
Aug 11, 2020
N/A· v4
3.8 LOW· v3
2.1 LOW· v2
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU proc...Show more
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.Show less