← Back

Debian

debian

10,147 CVEs • 112 products

Products (112)

Click to collapse
Toggle
Debian Linux
debian_linux
10,002 CVEs
Advanced Package Tool
advanced_package_tool
21 CVEs
Dpkg
dpkg
14 CVEs
Shadow
shadow
8 CVEs
Lintian
lintian
6 CVEs
Apt
apt
5 CVEs
Reportbug
reportbug
3 CVEs
Horde
horde
3 CVEs
Devscripts
devscripts
3 CVEs
Mime Support
mime-support
2 CVEs
Fsp
fsp
2 CVEs
Netkit
netkit
2 CVEs
Qpopper
qpopper
2 CVEs
Apt Cacher
apt-cacher
2 CVEs
Aptlinex
aptlinex
2 CVEs
Python Dns
python-dns
2 CVEs
Xsabre
xsabre
2 CVEs
Horde Groupware
horde_groupware
2 CVEs
Cifs Utils
cifs-utils
2 CVEs
Dpkg Dev
dpkg-dev
2 CVEs
Python Apt
python-apt
2 CVEs
Yubiserver
yubiserver
2 CVEs
Elvis Tiny
elvis_tiny
1 CVE
Sgml Tools
sgml-tools
1 CVE
Netstd
netstd
1 CVE
Internet Message
internet_message
1 CVE
Bsdmainutils
bsdmainutils
1 CVE
Tetex Bin
tetex-bin
1 CVE
Debmake
debmake
1 CVE
Bsmtpd
bsmtpd
1 CVE
Toolchain Source
toolchain-source
1 CVE
Sympa
sympa
1 CVE
Ppxp
ppxp
1 CVE
Apt Setup
apt-setup
1 CVE
Backupninja
backupninja
1 CVE
Kernel Patch Vserver
kernel-patch-vserver
1 CVE
Libmail Audit Perl
libmail-audit-perl
1 CVE
Amaya
amaya
1 CVE
Base Config
base-config
1 CVE
Apache
apache
1 CVE
Gfax
gfax
1 CVE
Reprepro
reprepro
1 CVE
Debian Goodies
debian-goodies
1 CVE
Guilt
guilt
1 CVE
Unp
unp
1 CVE
Apt Listchanges
apt-listchanges
1 CVE
Tss
tss
1 CVE
Projectl
projectl
1 CVE
Turba
turba
1 CVE
Honeyd Common
honeyd_common
1 CVE
Citadel Server
citadel_server
1 CVE
Feta
feta
1 CVE
Dpkg Cross
dpkg-cross
1 CVE
Myspell
myspell
1 CVE
Newsgate
newsgate
1 CVE
Initramfs Tools
initramfs-tools
1 CVE
Os Prober
os-prober
1 CVE
Mailscanner
mailscanner
1 CVE
Ltp
ltp
1 CVE
Horde Imp
horde_imp
1 CVE
Nss Ldap
nss-ldap
1 CVE
Libdbd Pg Perl
libdbd-pg-perl
1 CVE
Pyftpd
pyftpd
1 CVE
Mono Debugger
mono-debugger
1 CVE
Tex Common
tex-common
1 CVE
Texlive Extra Utils
texlive-extra-utils
1 CVE
Php5 Common
php5-common
1 CVE
Logol
logol
1 CVE
Devotee
devotee
1 CVE
Apache2
apache2
1 CVE
Cfingerd
cfingerd
1 CVE
Latd
latd
1 CVE
Phpbb3
phpbb3
1 CVE
Txt2man
txt2man
1 CVE
Adequate
adequate
1 CVE
Localepurge
localepurge
1 CVE
Syncevolution
syncevolution
1 CVE
Axiom
axiom
1 CVE
Ppthtml
ppthtml
1 CVE
Xbuffy
xbuffy
1 CVE
Strongswan
strongswan
1 CVE
Kde4libs
kde4libs
1 CVE
Python Imaging
python-imaging
1 CVE
Exuberant Ctags
exuberant_ctags
1 CVE
Hivex
hivex
1 CVE
Dbd Firebird
dbd-firebird
1 CVE
Unattended Upgrades
unattended-upgrades
1 CVE
Fuse
fuse
1 CVE
Tor
tor
1 CVE
Xbindkeys Config
xbindkeys-config
1 CVE
Ftpsync
ftpsync
1 CVE
Most
most
1 CVE
Postgresql Common
postgresql-common
1 CVE
Tin
tin
1 CVE
Crossroads
crossroads
1 CVE
Tmpreaper
tmpreaper
1 CVE
Cron
cron
1 CVE
Overkill
overkill
1 CVE
Duplicity
duplicity
1 CVE
Debian Lan Config
debian-lan-config
1 CVE

CVEs (10,147)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-16291
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16290
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16289
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16288
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-16287
3Artifex
CanonicalDebian
3Debian Linux
GhostscriptUbuntu Linux
Jun 17, 2026
Aug 13, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVE-2020-17507
3Debian
FedoraprojectQt
3Debian Linux
FedoraQt
Jun 17, 2026
Aug 12, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.
CVE-2020-17446
2Debian
Magic
2Asyncpg
Debian Linux
Jun 17, 2026
Aug 12, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array dat...Show more
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.Show less
CVE-2020-12674
4Canonical
DebianDovecot+1 more
4Debian Linux
DovecotFedora+1 more
Jun 17, 2026
Aug 12, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled.
CVE-2020-12673
4Canonical
DebianDovecot+1 more
4Debian Linux
DovecotFedora+1 more
Jun 17, 2026
Aug 12, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.
CVE-2020-12100
4Canonical
DebianDovecot+1 more
4Debian Linux
DovecotFedora+1 more
Jun 17, 2026
Aug 12, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.
CVE-2020-17489
4Canonical
DebianGnome+1 more
4Debian Linux
Gnome ShellLeap+1 more
Jun 17, 2026
Aug 11, 2020
N/A· v4
4.3 MEDIUM· v3
1.9 LOW· v2
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had dec...Show more
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)Show less
CVE-2020-0256
2Debian
Google
2Android
Debian Linux
Jun 17, 2026
Aug 11, 2020
N/A· v4
6.8 MEDIUM· v3
7.2 HIGH· v2
In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution...Show more
In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864Show less
CVE-2020-17368
4Debian
FedoraprojectFirejail Project+1 more
4Debian Linux
FedoraFirejail+1 more
Jun 17, 2026
Aug 11, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection.
CVE-2020-17367
4Debian
FedoraprojectFirejail Project+1 more
4Debian Linux
FedoraFirejail+1 more
Jun 17, 2026
Aug 11, 2020
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection.
CVE-2020-16092
4Canonical
DebianOpensuse+1 more
4Debian Linux
LeapQemu+1 more
Jun 17, 2026
Aug 11, 2020
N/A· v4
3.8 LOW· v3
2.1 LOW· v2
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU proc...Show more
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.Show less
CVE-2020-9490
7Apache
CanonicalDebian+4 more
25Communications Element Manager
Communications Session Report ManagerCommunications Session Route Manager+22 more
Jun 17, 2026
Aug 7, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Confi...Show more
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.Show less
CVE-2020-11993
7Apache
CanonicalDebian+4 more
13Clustered Data Ontap
Communications Element ManagerCommunications Session Report Manager+10 more
Jun 17, 2026
Aug 7, 2020
N/A· v4
7.5 HIGH· v3
4.3 MEDIUM· v2
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory...Show more
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.Show less
CVE-2020-11984
7Apache
CanonicalDebian+4 more
13Clustered Data Ontap
Communications Element ManagerCommunications Session Report Manager+10 more
Jun 17, 2026
Aug 7, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
CVE-2020-16845
4Debian
FedoraprojectGolang+1 more
4Debian Linux
FedoraGo+1 more
Jun 17, 2026
Aug 6, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
CVE-2020-17353
4Debian
FedoraprojectLilypond+1 more
5Backports Sle
Debian LinuxFedora+2 more
Jun 17, 2026
Aug 5, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code.