DEBIAN-CVE-2023-22485

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the validateprotocol function. We believe this bug is harmless in practice, because the out-of-bounds...

DEBIAN-CVE-2022-26386

Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in /tmp, but this behavior was changed to download them to /tmp where they could be affected by other local users. This behavior was reverted to the original, user-specific directory. This bug only...

DEBIAN-CVE-2021-3155

snapd 2.54.2 and earlier created /snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1...

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

UBUNTU-CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

DEBIAN-CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

DEBIAN-CVE-2018-4359

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

DEBIAN-CVE-2017-13767

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation...

DEBIAN-CVE-2016-6160

tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service segmentation fault via a large frame, a related issue to CVE-2017-14266...

[SECURITY] [DSA 3083-1] mutt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3083-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 30, 2014 http://www.debian.org/security/faq -...

Fedora 13 : Ajaxterm-0.10-13.fc13 (2010-18867)

Include several fixes from Debian Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

[SECURITY] [DSA 1957-1] New aria2 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1957-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 28, 2009 http://www.debian.org/security/faq -...

CVE-2008-1333

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by 1 the astverbose logging API call, or 2 the astmanappend function...

[SECURITY] [DSA 1267-1] New webcalendar packages fix remote file inclusion

-------------------------------------------------------------------------- Debian Security Advisory DSA 1267-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 675-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 662-1] New squirrelmail package fixes several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 662-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 653-1] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 653-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories

-------------------------------------------------------------------------- Debian Security Advisory DSA 615-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2004 http://www.debian.org/security/faq -...