← Back

Debian Linux

debian_linux

Vendor: Debian • 10,001 CVEs

CVEs (10,001)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Debian
FedoraprojectJasper Project
3Debian Linux
FedoraJasper
May 13, 2026
Feb 15, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP im...Show more
The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.Show less
3Debian
GraphicsmagickOpensuse
3Debian Linux
GraphicsmagickOpensuse
May 13, 2026
Feb 15, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for co...Show more
The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."Show less
3Debian
GraphicsmagickOpensuse
3Debian Linux
GraphicsmagickOpensuse
May 13, 2026
Feb 15, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corru...Show more
The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."Show less
3Debian
GraphicsmagickOpensuse
3Debian Linux
GraphicsmagickOpensuse
May 13, 2026
Feb 15, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
2Debian
Dicom
2Dcmtk
Debian Linux
May 13, 2026
Feb 15, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long string sent to TCP po...Show more
Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long string sent to TCP port 4242.Show less
2Artifex
Debian
2Debian Linux
Mupdf
May 13, 2026
Feb 15, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask paintin...Show more
An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected.Show less
4Canonical
DebianLibjpeg Turbo+1 more
4Debian Linux
Enterprise LinuxLibjpeg Turbo+1 more
May 13, 2026
Feb 13, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
4Debian
MariadbOracle+1 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+5 more
May 13, 2026
Feb 12, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
4Debian
GstreamerGstreamer Project+1 more
9Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+6 more
May 13, 2026
Feb 9, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.
3Debian
GstreamerGstreamer Project
3Debian Linux
GstreamerGstreamer
May 13, 2026
Feb 9, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving exte...Show more
The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors.Show less
3Busybox
CanonicalDebian
3Busybox
Debian LinuxUbuntu Linux
May 13, 2026
Feb 9, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.
3Busybox
CanonicalDebian
3Busybox
Debian LinuxUbuntu Linux
May 13, 2026
Feb 9, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write.
2Debian
Libtiff
2Debian Linux
Libtiff
May 13, 2026
Feb 6, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file.
3Debian
GraphicsmagickOpensuse
4Debian Linux
GraphicsmagickLeap+1 more
May 13, 2026
Feb 6, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-b...Show more
Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow.Show less
3Debian
GraphicsmagickOpensuse
4Debian Linux
GraphicsmagickLeap+1 more
May 13, 2026
Feb 6, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a file containing an "unterminated" string.
3Debian
GraphicsmagickOpensuse
4Debian Linux
GraphicsmagickLeap+1 more
May 13, 2026
Feb 6, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
The Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of service (CPU consumption or large memory allocations) via vectors involving the header information and the file size.
3Debian
GraphicsmagickOpensuse
4Debian Linux
GraphicsmagickLeap+1 more
May 13, 2026
Feb 6, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors.
3Debian
GraphicsmagickOpensuse
4Debian Linux
GraphicsmagickLeap+1 more
May 13, 2026
Feb 6, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2...Show more
Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317.Show less
6Canonical
DebianLittlecms+3 more
19Active Iq Unified Manager
Debian LinuxE Series Santricity Management+16 more
May 13, 2026
Feb 3, 2017
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bo...Show more
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.Show less
3Debian
GraphicsmagickOpensuse
4Debian Linux
GraphicsmagickLeap+1 more
May 13, 2026
Feb 3, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application crash) via a crafted svg file.