← Back

Debian Linux

debian_linux

Vendor: Debian • 10,013 CVEs

CVEs (10,013)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-12135
3Citrix
DebianXen
3Debian Linux
XenXenserver
May 13, 2026
Aug 24, 2017
N/A· v4
8.8 HIGH· v3
4.6 MEDIUM· v2
Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.
CVE-2017-12809
2Debian
Qemu
2Debian Linux
Qemu
May 13, 2026
Aug 23, 2017
N/A· v4
6.5 MEDIUM· v3
2.1 LOW· v2
QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing a...Show more
QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive.Show less
CVE-2017-12904
2Debian
Newsbeuter
2Debian Linux
Newsbeuter
May 13, 2026
Aug 23, 2017
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item tha...Show more
Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL.Show less
CVE-2017-11610
4Debian
FedoraprojectRedhat+1 more
4Cloudforms
Debian LinuxFedora+1 more
May 13, 2026
Aug 23, 2017
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nest...Show more
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.Show less
CVE-2017-13145
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Aug 23, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash.
CVE-2017-13139
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Aug 23, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
CVE-2017-5208
3Debian
Icoutils ProjectRedhat
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+5 more
May 13, 2026
Aug 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash)...Show more
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.Show less
CVE-2017-13065
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
May 13, 2026
Aug 22, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c.
CVE-2017-13064
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
May 13, 2026
Aug 22, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12.
CVE-2017-13063
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
May 13, 2026
Aug 22, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12.
CVE-2017-10661
3Debian
LinuxRedhat
6Debian Linux
Enterprise LinuxEnterprise Linux Aus+3 more
May 13, 2026
Aug 19, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that le...Show more
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.Show less
CVE-2017-12937
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
May 13, 2026
Aug 18, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read.
CVE-2017-12936
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
May 13, 2026
Aug 18, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.
CVE-2017-12935
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
May 13, 2026
Aug 18, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c.
CVE-2017-7548
2Debian
Postgresql
2Debian Linux
Postgresql
May 13, 2026
Aug 16, 2017
N/A· v4
7.5 HIGH· v3
4.0 MEDIUM· v2
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulti...Show more
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.Show less
CVE-2017-7546
2Debian
Postgresql
2Debian Linux
Postgresql
May 13, 2026
Aug 16, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
CVE-2017-12864
2Debian
Opencv
2Debian Linux
Opencv
May 13, 2026
Aug 15, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. T...Show more
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.Show less
CVE-2017-12863
2Debian
Opencv
2Debian Linux
Opencv
May 13, 2026
Aug 15, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This aff...Show more
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.Show less
CVE-2017-12862
2Debian
Opencv
2Debian Linux
Opencv
May 13, 2026
Aug 15, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial o...Show more
In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.Show less
CVE-2016-6796
6Apache
CanonicalDebian+3 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
Oct 8, 2026
Aug 11, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the...Show more
A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.Show less