11209 matches found
ECHO-765B-ECFF-5A35
Bulletin has no description...
ECHO-28DC-6B89-79B2
Bulletin has no description...
ECHO-310B-3EDB-2BA5 mod_usertrack in Apache 1.3.11 through 1.3.20 generates predictable session IDs (host IP, system time, PID), which "allows local users to obtain session IDs and bypass authentication when these session IDs are used for authentication". Red Hat states "This is not a security issue. The mod_usertrack cookies are not designed to be used for authentication." NVD affected range is 1.3.11-1.3.20, far below the shipped 2.4.68. Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2001-1534
Bulletin has no description...
ECHO-1E54-75FE-1AAE Local DoS in Apache httpd 2.0.59/2.2.4 with the Prefork MPM: a worker process can stop request processing or force the master to fork many workers. Both the Apache and Red Hat vendors state this is "by design" and "Not a vulnerability" - in the httpd security model the less privileged children fully handle connections, so any local user able to run arbitrary code in a child can do this; hosts with untrusted local users must use suexec. NVD lists only 2.0.59/2.2.4 (shipped is 2.4.68). Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2007-3303
Bulletin has no description...
ECHO-19A7-8D2C-488F
Bulletin has no description...
ECHO-4685-AA81-91FD Reported against the mod_php module for Apache 2.0.x, allowing local users with write access to PHP scripts to signal the server process group and reuse its file descriptors. The PHP developers disputed the report ("The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP"), and Red Hat states it "is not a vulnerability" since mod_php runs with the privileges of the httpd child by design. NVD carries the "disputed" tag. mod_php is not shipped by the apache2 source package and is not used in these images. https://security-tracker.debian.org/tracker/CVE-2003-1307
Bulletin has no description...
ECHO-E379-3651-BF29
Bulletin has no description...
ECHO-FD8B-B31C-648D
Bulletin has no description...
ECHO-5523-AAD4-D06D
Bulletin has no description...
ECHO-E5E9-738B-90E8
Bulletin has no description...
ECHO-05D0-935C-6543
Bulletin has no description...
ECHO-33BC-266D-182A
Bulletin has no description...
ECHO-E37E-1B12-4526 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-9E64-7660-3A96 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-4587-2D95-FBA0
Bulletin has no description...
ECHO-56A7-5917-6302
Bulletin has no description...
ECHO-35AF-8DFC-9FEE
Bulletin has no description...
ECHO-FA5B-6CEC-3E77 the cve is dependent on LOG_UNKFAIL_ENAB in login.defs being no, which is not the default. https://security-tracker.debian.org/tracker/CVE-2007-5686 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=290803
Bulletin has no description...
ECHO-B38A-85DA-32AD
Bulletin has no description...
ECHO-EF09-14AB-A33B
Bulletin has no description...
ECHO-E2C1-B758-80FD
Bulletin has no description...
ECHO-5230-5CA0-0D39 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-D063-9BB1-9530 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-EB16-EA83-4769 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-70F8-2B6B-3DB6
Bulletin has no description...
ECHO-2F43-CC05-EEE0 Vulnerability is in the NGX updater, part of the host display-driver install. Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Bulletin has no description...
ECHO-CD26-8AF5-522C
Bulletin has no description...
ECHO-7B6E-F313-9DC9
Bulletin has no description...
ECHO-6F38-4AB4-57A4
Bulletin has no description...
ECHO-6659-05EA-AF1C
Bulletin has no description...
ECHO-A682-88B3-1F8B
Bulletin has no description...
ECHO-43B5-A32B-C56F
Bulletin has no description...
ECHO-20A6-5D48-2092
Bulletin has no description...
ECHO-38B6-7FA2-72B8
Bulletin has no description...
ECHO-1D5F-0C94-937D
Bulletin has no description...
ECHO-A835-6F03-EF3A
Bulletin has no description...
ECHO-FCDA-4DF0-F457
Bulletin has no description...
ECHO-5FB1-B244-F005
Bulletin has no description...
ECHO-E7BF-4909-BEC3
Bulletin has no description...
ECHO-99E2-CB4C-84F4
Bulletin has no description...
ECHO-08E8-B5D5-DBA7
Bulletin has no description...
ECHO-D505-EF7C-089C
Bulletin has no description...
ECHO-9A28-8A09-4E5A
Bulletin has no description...
ECHO-9DB0-DFD3-A7BB
Bulletin has no description...
ECHO-B6FB-3D23-A17E
Bulletin has no description...
ECHO-E22F-3A38-1187
Bulletin has no description...
ECHO-3BF2-B44C-E0E9
Bulletin has no description...
ECHO-7A2C-85D2-41E3
Bulletin has no description...