exploit the possibilities
Showing 1 - 25 of 3,799 RSS Feed

Files from Debian

Email addresssecurity at debian.org
First Active2003-09-13
Last Active2019-11-13
Debian Security Advisory 4563-1
Posted Nov 13, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4563-1 - These vulnerabilities have been discovered in the webkit2gtk web engine.

tags | advisory, web, vulnerability
systems | linux, debian
advisories | CVE-2019-8812, CVE-2019-8814
MD5 | bdae95b27392a87d80e9b9cd0dff8b49
Debian Security Advisory 4567-1
Posted Nov 13, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4567-1 - It was discovered that the vhost PMD in DPDK, a set of libraries for fast packet processing, was affected by memory and file descriptor leaks which could result in denial of service.

tags | advisory, denial of service
systems | linux, debian
advisories | CVE-2019-14818
MD5 | c9d3e2983ddd71f19660262b821b45f9
Debian Security Advisory 4566-1
Posted Nov 13, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4566-1 - This update for QEMU, a fast processor emulator, backports support to passthrough the pschange-mc-no CPU flag. The virtualised MSR seen by a guest is set to show the bug as fixed, allowing to disable iTLB Multihit mitigations in nested hypervisors (cf. DSA 4564-1).

tags | advisory
systems | linux, debian
MD5 | 6c10651280ea0b6c570a099acae56fa9
Debian Security Advisory 4565-1
Posted Nov 13, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4565-1 - This update ships updated CPU microcode for some types of Intel CPUs. In particular it provides mitigations for the TAA (TSX Asynchronous Abort) vulnerability. For affected CPUs, to fully mitigate the vulnerability it is also necessary to update the Linux kernel packages as released in DSA 4564-1.

tags | advisory, kernel
systems | linux, debian
advisories | CVE-2019-11135, CVE-2019-11139
MD5 | 30b6f81bb1d50603c7ed82337d5113a2
Debian Security Advisory 4564-1
Posted Nov 12, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4564-1 - Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, or information leak.

tags | advisory, denial of service, kernel, vulnerability
systems | linux, debian
advisories | CVE-2018-12207, CVE-2019-0154, CVE-2019-0155, CVE-2019-11135
MD5 | c9f2f8f2ab7eb7ff20f4ea3572236714
Debian Security Advisory 4562-1
Posted Nov 11, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4562-1 - Several vulnerabilities have been discovered in the chromium web browser.

tags | advisory, web, vulnerability
systems | linux, debian
advisories | CVE-2019-13659, CVE-2019-13660, CVE-2019-13661, CVE-2019-13662, CVE-2019-13663, CVE-2019-13664, CVE-2019-13665, CVE-2019-13666, CVE-2019-13667, CVE-2019-13668, CVE-2019-13669, CVE-2019-13670, CVE-2019-13671, CVE-2019-13673, CVE-2019-13674, CVE-2019-13675, CVE-2019-13676, CVE-2019-13677, CVE-2019-13678, CVE-2019-13679, CVE-2019-13680, CVE-2019-13681, CVE-2019-13682, CVE-2019-13683, CVE-2019-13685, CVE-2019-13686
MD5 | 51e287808c40898ffae74b8b36159d0a
Debian Security Advisory 4561-1
Posted Nov 8, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4561-1 - Alex Murray discovered a stack-based buffer overflow vulnerability in fribidi, an implementation of the Unicode Bidirectional Algorithm algorithm, which could result in denial of service or potentially the execution of arbitrary code, when processing a large number of unicode isolate directional characters.

tags | advisory, denial of service, overflow, arbitrary
systems | linux, debian
advisories | CVE-2019-18397
MD5 | ce1d8a43a11a6aafc4ddd0b0df7d4d8f
Debian Security Advisory 4560-1
Posted Nov 6, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4560-1 - It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, it was possible to circumvent XML signature verification on SAML messages.

tags | advisory, protocol
systems | linux, debian
advisories | CVE-2019-3465
MD5 | 7e7a6b8efe14b279c471b4e19b7d85be
Debian Security Advisory 4559-1
Posted Nov 6, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4559-1 - Stephan Zeisberg discovered that missing input validation in ProFTPD, a FTP/SFTP/FTPS server, could result in denial of service via an infinite loop.

tags | advisory, denial of service
systems | linux, debian
advisories | CVE-2019-18217
MD5 | 0593df4978da5dc1e51ff3e39f464d16
Debian Security Advisory 4558-1
Posted Nov 5, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4558-1 - Several vulnerabilities have been discovered in the webkit2gtk web engine.

tags | advisory, web, vulnerability
systems | linux, debian
advisories | CVE-2019-8625, CVE-2019-8720, CVE-2019-8769, CVE-2019-8771
MD5 | 580a8c9e2bdfb8b9f3bb86bb5a69d251
Debian Security Advisory 4557-1
Posted Nov 4, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4557-1 - A use-after-free was found in libarchive, a multi-format archive and compression library, which could result in denial of service and potentially the execution of arbitrary code is a malformed archive is processed.

tags | advisory, denial of service, arbitrary
systems | linux, debian
advisories | CVE-2019-18408
MD5 | 2078a9ac723187a37317c8926167b24c
Debian Security Advisory 4556-1
Posted Nov 3, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4556-1 - An out-of-bounds memory access was discovered in the Qt library, which could result in denial of service through a text file containing many directional characters.

tags | advisory, denial of service
systems | linux, debian
advisories | CVE-2019-18281
MD5 | 3da13c9c290ac2d34ba91b9a73587a55
Debian Security Advisory 4549-1
Posted Oct 25, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4549-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, cross-site scripting or denial of service.

tags | advisory, web, denial of service, arbitrary, xss, info disclosure
systems | linux, debian
advisories | CVE-2019-11757, CVE-2019-11759, CVE-2019-11760, CVE-2019-11761, CVE-2019-11762, CVE-2019-11763, CVE-2019-11764, CVE-2019-15903
MD5 | a2fae2df77ddbc883a3c20de51c59856
Debian Security Advisory 4548-1
Posted Oct 21, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4548-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in cross-site scripting, denial of service, information disclosure or Kerberos user impersonation.

tags | advisory, java, denial of service, vulnerability, xss, info disclosure
systems | linux, debian
advisories | CVE-2019-2894, CVE-2019-2945, CVE-2019-2949, CVE-2019-2962, CVE-2019-2964, CVE-2019-2973, CVE-2019-2975, CVE-2019-2978, CVE-2019-2981, CVE-2019-2983, CVE-2019-2987, CVE-2019-2988, CVE-2019-2989, CVE-2019-2992, CVE-2019-2999
MD5 | 0994e5a4758eeaaa57ca5f5d82735491
Debian Security Advisory 4547-1
Posted Oct 21, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4547-1 - Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service or, potentially, execution of arbitrary code.

tags | advisory, denial of service, arbitrary, vulnerability
systems | linux, debian
advisories | CVE-2018-10103, CVE-2018-10105, CVE-2018-14461, CVE-2018-14462, CVE-2018-14463, CVE-2018-14464, CVE-2018-14465, CVE-2018-14466, CVE-2018-14467, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14879, CVE-2018-14880, CVE-2018-14881, CVE-2018-14882, CVE-2018-16227, CVE-2018-16228, CVE-2018-16229, CVE-2018-16230, CVE-2018-16300, CVE-2018-16451, CVE-2018-16452, CVE-2019-15166
MD5 | 18def9452a0bc04b4e1b2e53c0591584
Debian Security Advisory 4546-1
Posted Oct 21, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4546-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in cross-site scripting, denial of service, information disclosure or Kerberos user impersonation.

tags | advisory, java, denial of service, vulnerability, xss, info disclosure
systems | linux, debian
advisories | CVE-2019-2894, CVE-2019-2945, CVE-2019-2949, CVE-2019-2962, CVE-2019-2964, CVE-2019-2973, CVE-2019-2975, CVE-2019-2977, CVE-2019-2978, CVE-2019-2981, CVE-2019-2983, CVE-2019-2987, CVE-2019-2988, CVE-2019-2989, CVE-2019-2992, CVE-2019-2999
MD5 | 659dd072d1f840c4b1e838aed6a7c7e1
Debian Security Advisory 4545-1
Posted Oct 21, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4545-1 - It was discovered that the Special:Redirect functionality of MediaWiki, a website engine for collaborative work, could expose suppressed user names, resulting in an information leak.

tags | advisory
systems | linux, debian
advisories | CVE-2019-16738
MD5 | ee9db3704eff59719eaaf5447c20add4
Debian Security Advisory 4544-1
Posted Oct 16, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4544-1 - X41 D-Sec discovered that unbound, a validating, recursive, and caching DNS resolver, did not correctly process some NOTIFY queries. This could lead to remote denial-of-service by application crash.

tags | advisory, remote
systems | linux, debian
advisories | CVE-2019-16866
MD5 | e2863cd2579b2db0e1f3f181b40026d8
Debian Security Advisory 4509-3
Posted Oct 16, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4509-3 - It was reported that the apache2 update released as DSA 4509-1 incorrectly fixed CVE-2019-10092. Updated apache2 packages are now available to correct this issue.

tags | advisory
systems | linux, debian
advisories | CVE-2019-10092
MD5 | 0441e2ea741f543bc347005a39944b68
Debian Security Advisory 4543-1
Posted Oct 15, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4543-1 - Joe Vennix discovered that sudo, a program designed to provide limited super user privileges to specific users, when configured to allow a user to run commands as an arbitrary user via the ALL keyword in a Runas specification, allows to run commands as root by specifying the user ID - -1 or 4294967295. This could allow a user with sufficient sudo privileges to run commands as root even if the Runas specification explicitly disallows root access.

tags | advisory, arbitrary, root
systems | linux, debian
advisories | CVE-2019-14287
MD5 | ec6c909fbfdafb0f16d2670450ed784f
Debian Security Advisory 4539-3
Posted Oct 14, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4539-3 - The update for openssl released as DSA 4539-1 introduced a regression where AES-CBC-HMAC-SHA ciphers were not enabled. Updated openssl packages are now available to correct this issue.

tags | advisory
systems | linux, debian
MD5 | d217a034b47a535bcef4bdcc66ba7ea3
Debian Security Advisory 4539-2
Posted Oct 8, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4539-2 - A change introduced in openssl 1.1.1d (which got released as DSA 4539-1) requires sandboxing features which are not available in Linux kernels before 3.19, resulting in OpenSSH rejecting connection attempts if running on an old kernel. This does not affect Linux kernels shipped in Debian oldstable/stable, but may affect buster systems which are running on an older kernel.

tags | advisory, kernel
systems | linux, debian
MD5 | b9087af4c771134759e3ebd251f92210
Debian Security Advisory 4542-1
Posted Oct 7, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4542-1 - It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deserialization. This allowed an attacker providing maliciously crafted input to perform code execution, or read arbitrary files on the server.

tags | advisory, java, arbitrary, code execution
systems | linux, debian
advisories | CVE-2019-12384, CVE-2019-14439, CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943
MD5 | e509eea85afe53f7ec68ab71ee2d7af6
Debian Security Advisory 4541-1
Posted Oct 6, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4541-1 - Max Kellermann reported a NULL pointer dereference flaw in libapreq2, a generic Apache request library, allowing a remote attacker to cause a denial of service against an application using the library (application crash) if an invalid nested "multipart" body is processed.

tags | advisory, remote, denial of service
systems | linux, debian
advisories | CVE-2019-12412
MD5 | 0c6e8369712db46f7c5651015d394e76
Debian Security Advisory 4509-2
Posted Oct 2, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4509-2 - The security fixes for the HTTP/2 code in Apache 2 shipped in DSA 4509 unveiled a bug in Subversion which caused a regression in mod_dav_svn when used with HTTP/2.

tags | advisory, web
systems | linux, debian
MD5 | b43e3e470404467764f582810ed52f6e
Page 1 of 152
Back12345Next

File Archive:

November 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    28 Files
  • 2
    Nov 2nd
    1 Files
  • 3
    Nov 3rd
    1 Files
  • 4
    Nov 4th
    12 Files
  • 5
    Nov 5th
    19 Files
  • 6
    Nov 6th
    65 Files
  • 7
    Nov 7th
    22 Files
  • 8
    Nov 8th
    18 Files
  • 9
    Nov 9th
    1 Files
  • 10
    Nov 10th
    1 Files
  • 11
    Nov 11th
    11 Files
  • 12
    Nov 12th
    65 Files
  • 13
    Nov 13th
    27 Files
  • 14
    Nov 14th
    22 Files
  • 15
    Nov 15th
    10 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    0 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close