← Back

Debian Linux

debian_linux

Vendor: Debian • 10,001 CVEs

CVEs (10,001)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-5099
2Debian
Google
2Chrome
Debian Linux
May 13, 2026
Oct 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page.
CVE-2017-5098
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
May 13, 2026
Oct 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVE-2017-5097
2Debian
Google
2Chrome
Debian Linux
May 13, 2026
Oct 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVE-2017-5095
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
May 13, 2026
Oct 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.
CVE-2017-5094
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
May 13, 2026
Oct 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page.
CVE-2017-5093
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
May 13, 2026
Oct 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed v...Show more
Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page.Show less
CVE-2017-5092
2Debian
Google
2Chrome
Debian Linux
May 13, 2026
Oct 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2017-5091
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
May 13, 2026
Oct 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVE-2017-5081
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
May 13, 2026
Oct 27, 2017
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by m...Show more
Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.Show less
CVE-2017-15906
5Debian
NetappOpenbsd+2 more
21Active Iq Unified Manager
Cloud BackupClustered Data Ontap+18 more
May 28, 2026
Oct 26, 2017
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
CVE-2017-15873
3Busybox
CanonicalDebian
3Busybox
Debian LinuxUbuntu Linux
May 13, 2026
Oct 24, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation.
CVE-2017-12613
3Apache
DebianRedhat
11Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+8 more
May 13, 2026
Oct 24, 2017
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_t...Show more
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.Show less
CVE-2017-15723
2Debian
Irssi
2Debian Linux
Irssi
May 13, 2026
Oct 22, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message.
CVE-2017-15722
2Debian
Irssi
2Debian Linux
Irssi
May 13, 2026
Oct 22, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string.
CVE-2017-15721
2Debian
Irssi
2Debian Linux
Irssi
May 13, 2026
Oct 22, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative to CVE-2017-9468.
CVE-2015-5177
2Debian
Openslp
2Debian Linux
Openslp
May 13, 2026
Oct 22, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
CVE-2013-6049
2Apt Listbugs Project
Debian
2Apt Listbugs
Debian Linux
May 13, 2026
Oct 20, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via unknown vectors.
CVE-2017-15642
2Debian
Sound Exchange Project
2Debian Linux
Sound Exchange
May 13, 2026
Oct 19, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.
CVE-2017-10388
4Debian
NetappOracle+1 more
29Active Iq Unified Manager
Cloud BackupDebian Linux+26 more
May 13, 2026
Oct 19, 2017
N/A· v4
7.5 HIGH· v3
5.1 MEDIUM· v2
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exp...Show more
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).Show less
CVE-2017-10384
5Debian
MariadbNetapp+2 more
17Active Iq Unified Manager
Debian LinuxEnterprise Linux Desktop+14 more
May 13, 2026
Oct 19, 2017
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability...Show more
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).Show less