← Back

Debian

debian

10,156 CVEs • 112 products

Products (112)

Click to collapse
Toggle
Dpkg
dpkg
Shadow
shadow
Lintian
lintian
Apt
apt
Reportbug
reportbug
Horde
horde
Devscripts
devscripts
Mime Support
mime-support
Fsp
fsp
Netkit
netkit
Qpopper
qpopper
Apt Cacher
apt-cacher
Aptlinex
aptlinex
Python Dns
python-dns
Xsabre
xsabre
Cifs Utils
cifs-utils
Dpkg Dev
dpkg-dev
Python Apt
python-apt
Yubiserver
yubiserver
Elvis Tiny
elvis_tiny
Sgml Tools
sgml-tools
Netstd
netstd
Bsdmainutils
bsdmainutils
Tetex Bin
tetex-bin
Debmake
debmake
Bsmtpd
bsmtpd
Sympa
sympa
Ppxp
ppxp
Apt Setup
apt-setup
Backupninja
backupninja
Amaya
amaya
Base Config
base-config
Apache
apache
Gfax
gfax
Reprepro
reprepro
Debian Goodies
debian-goodies
Guilt
guilt
Unp
unp
Tss
tss
Projectl
projectl
Turba
turba
Honeyd Common
honeyd_common
Citadel Server
citadel_server
Feta
feta
Dpkg Cross
dpkg-cross
Myspell
myspell
Newsgate
newsgate
Os Prober
os-prober
Mailscanner
mailscanner
Ltp
ltp
Horde Imp
horde_imp
Nss Ldap
nss-ldap
Libdbd Pg Perl
libdbd-pg-perl
Pyftpd
pyftpd
Mono Debugger
mono-debugger
Tex Common
tex-common
Php5 Common
php5-common
Logol
logol
Devotee
devotee
Apache2
apache2
Cfingerd
cfingerd
Latd
latd
Phpbb3
phpbb3
Txt2man
txt2man
Adequate
adequate
Localepurge
localepurge
Syncevolution
syncevolution
Axiom
axiom
Ppthtml
ppthtml
Xbuffy
xbuffy
Strongswan
strongswan
Kde4libs
kde4libs
Python Imaging
python-imaging
Hivex
hivex
Dbd Firebird
dbd-firebird
Fuse
fuse
Tor
tor
Ftpsync
ftpsync
Most
most
Tin
tin
Crossroads
crossroads
Tmpreaper
tmpreaper
Cron
cron
Overkill
overkill
Duplicity
duplicity

CVEs (10,156)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Semi
2Debian Linux
Semi
Apr 16, 2026
Aug 18, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
1Debian
1Debian Linux
Apr 16, 2026
Jul 2, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
2Debian
Michael Jennings
2Debian Linux
Eterm
Apr 16, 2026
Jul 2, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable.
2Debian
Gnu
2Debian Linux
Gzip
Apr 16, 2026
Jul 2, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.
1Debian
1Debian Linux
Apr 16, 2026
Jun 9, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines.
1Debian
1Debian Linux
Apr 16, 2026
Jun 9, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.
1Debian
1Debian Linux
Apr 16, 2026
Jun 9, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
3Debian
Falconseye ProjectNethack
3Debian Linux
FalconseyeNethack
Apr 16, 2026
Jun 9, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.
2Debian
Sendmail
2Debian Linux
Sendmail
Apr 16, 2026
May 15, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
1Debian
1Mime Support
Apr 16, 2026
May 12, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
2Apcupsd
Debian
2Apcupsd
Debian Linux
Apr 16, 2026
Mar 3, 2003
N/A· v4
N/A· v3
10.0 HIGH· v2
Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.
1Debian
1Internet Message
Apr 16, 2026
Jan 17, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite...Show more
Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.Show less
6Debian
MandrakesoftMicrosoft+3 more
11Debian Linux
Enterprise LinuxEnterprise Linux Desktop+8 more
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
4.9 MEDIUM· v2
The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target t...Show more
The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.Show less
2Apple
Debian
3Cups
Debian LinuxMac Os X
Apr 16, 2026
Dec 26, 2002
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaust...Show more
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.Show less
3Debian
KthMit
4Debian Linux
Kerberos 5Kth Kerberos 4+1 more
Apr 16, 2026
Nov 4, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in K...Show more
The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.Show less
3Debian
HpRedhat
3Debian Linux
LinuxSecure Os
Apr 16, 2026
Nov 4, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does no...Show more
Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.Show less
2Apache
Debian
2Debian Linux
Http Server
Apr 16, 2026
Oct 11, 2002
N/A· v4
N/A· v3
7.2 HIGH· v2
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or...Show more
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.Show less
1Debian
1Debian Linux
Apr 16, 2026
Oct 4, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow.
1Debian
1Netstd
Apr 16, 2026
Oct 4, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to.
2Debian
Sgi
3Debian Linux
FamIrix
Apr 16, 2026
Sep 5, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.