← Back

Debian Linux

debian_linux

Vendor: Debian • 10,002 CVEs

CVEs (10,002)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
5Canonical
DebianElfutils Project+2 more
11Debian Linux
ElfutilsEnterprise Linux+8 more
Jun 17, 2026
Feb 9, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash...Show more
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does not reject malformed core file notes.Show less
4Canonical
DebianLibtiff+1 more
4Debian Linux
LeapLibtiff+1 more
Jun 17, 2026
Feb 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leve...Show more
An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.Show less
2Debian
Genivia
2Debian Linux
Gsoap
Jun 17, 2026
Feb 9, 2019
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This...Show more
Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries, as these are built with that flag.Show less
3Canonical
DebianRdflib Project
3Debian Linux
RdflibUbuntu Linux
Jun 17, 2026
Feb 9, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demo...Show more
The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.Show less
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 8, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 8, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 8, 2019
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
5Canonical
DebianFedoraproject+2 more
6Backports Sle
Debian LinuxFedora+3 more
Jun 17, 2026
Feb 8, 2019
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 7, 2019
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 7, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 7, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 7, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 7, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 7, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Feb 7, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
3Canonical
DebianGpac Project
3Debian Linux
GpacUbuntu Linux
Nov 21, 2024
Feb 6, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because of missing szLineConv bounds checking.
3Canonical
DebianGpac Project
3Debian Linux
GpacUbuntu Linux
Nov 21, 2024
Feb 6, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames.
3Canonical
DebianGpac Project
3Debian Linux
GpacUbuntu Linux
Nov 21, 2024
Feb 6, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_manager.c in libgpac_static.a.
3Canonical
DebianGpac
3Debian Linux
GpacUbuntu Linux
Nov 21, 2024
Feb 6, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled.
5Debian
OpensuseOracle+2 more
9Backports Sle
Communications Operations MonitorDebian Linux+6 more
Jun 17, 2026
Feb 6, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.