← Back

Debian Linux

debian_linux

Vendor: Debian • 10,011 CVEs

CVEs (10,011)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Sudo Project
2Debian Linux
Sudo
Apr 16, 2026
May 16, 2002
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly...Show more
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.Show less
6Debian
FreebsdGnu+3 more
6Debian Linux
FreebsdLinux+3 more
Jul 23, 2026
Mar 8, 2002
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."
8Caldera
DebianFreebsd+5 more
9Debian Linux
FreebsdLinux+6 more
Apr 16, 2026
Feb 27, 2002
N/A· v4
N/A· v3
7.2 HIGH· v2
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
3Debian
GnuRedhat
3Debian Linux
EnscriptLinux
Apr 16, 2026
Jan 31, 2002
N/A· v4
N/A· v3
3.6 LOW· v2
GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.
2Debian
John Bovey
2Debian Linux
Xvt
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.
2Debian
Redhat
2Debian Linux
Linux
Apr 16, 2026
Dec 21, 2001
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that ends in a brace "{" character.
4Conectiva
DebianHtdig+1 more
4Debian Linux
HtdigLinux+1 more
Apr 16, 2026
Dec 6, 2001
N/A· v4
N/A· v3
6.4 MEDIUM· v2
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) b...Show more
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.Show less
2Debian
Suse
2Debian Linux
Suse Linux
Apr 16, 2026
Oct 18, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.
1Debian
1Debian Linux
Apr 16, 2026
Oct 18, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command.
2Debian
Immunix
2Debian Linux
Immunix
Apr 16, 2026
Oct 18, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.
4Conectiva
DebianRedhat+1 more
4Debian Linux
EximLinux+1 more
Apr 16, 2026
Sep 20, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.
9Debian
FreebsdIbm+6 more
11Aix
Debian LinuxFreebsd+8 more
Apr 16, 2026
Aug 14, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by t...Show more
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.Show less
4Debian
MandrakesoftOpenldap+1 more
6Debian Linux
LinuxMandrake Linux+3 more
Apr 16, 2026
Jul 16, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.
1Debian
1Debian Linux
Apr 16, 2026
Jul 2, 2001
N/A· v4
N/A· v3
3.6 LOW· v2
Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files.
4Debian
MandrakesoftRalf S. Engelschall+1 more
4Debian Linux
EperlMandrake Linux+1 more
Apr 16, 2026
Jun 27, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
1Debian
1Debian Linux
Apr 16, 2026
Jun 27, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).
1Debian
1Debian Linux
Apr 16, 2026
Jun 27, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than in...Show more
postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended.Show less
3Debian
MandrakesoftRedhat
4Debian Linux
LinuxMandrake Linux+1 more
Apr 16, 2026
Jun 27, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.
2Debian
Progeny
2Debian
Debian Linux
Apr 16, 2026
May 3, 2001
N/A· v4
N/A· v3
1.2 LOW· v2
mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks.
2Debian
Mandrakesoft
3Debian Linux
Mandrake LinuxMandrake Linux Corporate Server
Apr 16, 2026
May 3, 2001
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.