← Back

Debian Linux

debian_linux

Vendor: Debian • 10,011 CVEs

CVEs (10,011)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-8346
2Debian
Redmine
2Debian Linux
Redmine
May 6, 2026
Apr 12, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form.
CVE-2016-2857
4Canonical
DebianQemu+1 more
11Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+8 more
May 6, 2026
Apr 12, 2016
N/A· v4
8.4 HIGH· v3
3.6 LOW· v2
The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.
CVE-2016-1568
3Debian
QemuRedhat
4Debian Linux
OpenstackQemu+1 more
May 6, 2026
Apr 12, 2016
N/A· v4
8.8 HIGH· v3
6.9 MEDIUM· v2
Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHC...Show more
Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.Show less
CVE-2015-8710
2Debian
Xmlsoft
2Debian Linux
Libxml2
May 6, 2026
Apr 11, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified...Show more
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.Show less
CVE-2016-2385
2Debian
Kamailio
2Debian Linux
Kamailio
May 6, 2026
Apr 11, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and pro...Show more
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and process crash) or possibly execute arbitrary code via a large SIP packet.Show less
CVE-2016-1235
2Debian
Oar Project
2Debian Linux
Oar
May 6, 2026
Apr 11, 2016
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options.
CVE-2012-6700
2Debian
Dhcpcd Project
2Debian Linux
Dhcpcd
May 6, 2026
Apr 11, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response.
CVE-2012-6699
2Debian
Dhcpcd Project
2Debian Linux
Dhcpcd
May 6, 2026
Apr 11, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response.
CVE-2012-6698
2Debian
Dhcpcd Project
2Debian Linux
Dhcpcd
May 6, 2026
Apr 11, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
CVE-2016-2381
5Canonical
DebianOpensuse+2 more
10Communications Billing And Revenue Management
Configuration ManagerDatabase Server+7 more
May 6, 2026
Apr 8, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.
CVE-2016-3153
2Debian
Spip
2Debian Linux
Spip
May 6, 2026
Apr 8, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrer_entites function.
CVE-2016-2851
3Cypherpunks
DebianOpensuse
4Debian Linux
LeapLibotr+1 more
May 6, 2026
Apr 7, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR me...Show more
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.Show less
CVE-2016-2098
2Debian
Rubyonrails
3Debian Linux
RailsRuby On Rails
May 6, 2026
Apr 7, 2016
N/A· v4
7.3 HIGH· v3
7.5 HIGH· v2
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
CVE-2016-2511
2Debian
Websvn
2Debian Linux
Websvn
May 6, 2026
Apr 7, 2016
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php.
CVE-2016-2510
3Beanshell
CanonicalDebian
3Beanshell
Debian LinuxUbuntu Linux
May 6, 2026
Apr 7, 2016
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Hand...Show more
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.Show less
CVE-2016-2858
3Canonical
DebianQemu
3Debian Linux
QemuUbuntu Linux
May 6, 2026
Apr 7, 2016
N/A· v4
6.5 MEDIUM· v3
1.9 LOW· v2
QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allo...Show more
QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption.Show less
CVE-2015-8837
3Debian
FedoraprojectFuseiso Project
3Debian Linux
FedoraFuseiso
May 6, 2026
Mar 30, 2016
N/A· v4
7.3 HIGH· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathnam...Show more
Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathname in an ISO file.Show less
CVE-2016-1650
3Debian
GoogleOpensuse
3Chrome
Debian LinuxOpensuse
May 6, 2026
Mar 29, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have u...Show more
The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document.Show less
CVE-2016-1649
4Canonical
DebianGoogle+1 more
4Chrome
Debian LinuxOpensuse+1 more
May 6, 2026
Mar 29, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial o...Show more
The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.Show less
CVE-2016-1648
3Debian
GoogleOpensuse
3Chrome
Debian LinuxOpensuse
May 6, 2026
Mar 29, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of se...Show more
Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.Show less