11209 matches found
ECHO-D2D1-578D-1A9C
Bulletin has no description...
ECHO-490E-06BA-F374
Bulletin has no description...
ECHO-1EEA-BB40-C2E4
Bulletin has no description...
ECHO-2182-2E8A-6286
Bulletin has no description...
ECHO-8835-2681-4829 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-ECF7-D413-F297 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-B9AF-DF64-A726
Bulletin has no description...
ECHO-AD54-7743-1269 suexec in Apache HTTP Server 2.2.3 does not verify user/group ID combinations, which "might allow local users to leverage other vulnerabilities". The vendor disputes the issue because the attack "rely on an insecure server configuration" in which the unprivileged server user already has write access to the document root and can run arbitrary code; the suexec security model is not intended to protect against privilege escalation in such a configuration. NVD lists only 2.2.3 as affected (shipped version is 2.4.68). Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2007-1743
Bulletin has no description...
ECHO-038B-1877-5351
Bulletin has no description...
ECHO-07BD-5728-1AD8 Assertion failure (abort/DoS) in jxl::PlaneBase::PlaneBase() reachable only when the cjxl encoder is used to encode a maliciously crafted GIF. There is no memory corruption and no upstream fix: the upstream tracking issues (#422, #762) remain open with no merged commit, and Debian rates the issue "unimportant" with a "Negligible security impact" note and no fixed version in any suite (bookworm through sid). With no upstream remediation available and negligible impact on the libjxl decode path we ship, this is not actionable as a backport.
Bulletin has no description...
ECHO-D76D-8B79-4473 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-401A-73DF-0D29
Bulletin has no description...
ECHO-8F94-ADFC-30E7
Bulletin has no description...
ECHO-AABB-5650-DEE3
Bulletin has no description...
ECHO-1C8B-6A01-2CFE
Bulletin has no description...
ECHO-AE5E-0A53-0B5F
Bulletin has no description...
ECHO-0DB4-A794-6040
Bulletin has no description...
ECHO-D361-202F-EABD
Bulletin has no description...
ECHO-3879-0D40-E19E
Bulletin has no description...
ECHO-FF0E-D680-A287
Bulletin has no description...
ECHO-BBDD-CC38-C3A7
Bulletin has no description...
ECHO-451B-C709-8943 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-12DC-016D-7EBF
Bulletin has no description...
ECHO-14CE-5047-A43F
Bulletin has no description...
ECHO-DF2B-C938-96C6
Bulletin has no description...
ECHO-6D8F-2062-51BD
Bulletin has no description...
ECHO-ABC7-D4B7-5B10
Bulletin has no description...
ECHO-DEA7-DAB0-28C7 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-A777-BF3C-CF20
Bulletin has no description...
ECHO-B78D-D090-F185
Bulletin has no description...
ECHO-93C5-5788-8DA1 Integer overflow in internal_dwa_compressor.h:1040. Vulnerability introduced in 3.2.0; the affected code path does not exist in 3.1.x.
Bulletin has no description...
ECHO-0B3B-7E35-1F11 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-EBEC-F6F4-A98D Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-CD45-387C-D24D
Bulletin has no description...
ECHO-7C96-23E5-AD5B
Bulletin has no description...
ECHO-4934-4695-29C7
Bulletin has no description...
ECHO-ACBD-3259-3098
Bulletin has no description...
ECHO-D2A3-9D9C-9856 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-1DBA-BADF-F45E Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-DCA5-C0F2-32B1 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-84AF-DFBE-441A Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-50F5-F38A-4329 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-7610-17CE-56E5 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-B32D-0D77-F517
Bulletin has no description...
ECHO-2DA9-4B68-5ABE
Bulletin has no description...
ECHO-C7C4-0020-BC83
Bulletin has no description...
ECHO-C67B-44B0-FF31
Bulletin has no description...
ECHO-21A6-33D6-5465 Tor Browser information exposure vulnerability. This CVE is for Tor Browser, not Firefox ESR. Tracked against firefox-esr only because Tor Browser is based on Firefox, but the vulnerability is in Tor-specific code not present in firefox-esr. https://security-tracker.debian.org/tracker/CVE-2019-12383
Bulletin has no description...