Debian vulnerabilities
Published CVEs affecting Debian products: 955 record(s), with severity, exploitation and fixes.
CVE-2021-3759
Medium · 5.5
CWE-770 Aug 23, 2022
A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg...
A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.
CVE-2022-26373
Medium · 5.5
Aug 18, 2022
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors...
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVE-2022-37434
Critical · 9.8
CWE-787 Aug 5, 2022
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
CVE-2022-2509
High · 7.5
CWE-415 Aug 1, 2022
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs...
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
CVE-2022-36946
High · 7.5
Jul 27, 2022
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote...
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.
CVE-2022-36879
Medium · 5.5
Jul 27, 2022
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm...
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
CVE-2021-46828
High · 7.5
CWE-755 Jul 20, 2022
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a…
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
CVE-2021-33656
Medium · 6.8
CWE-787 Jul 18, 2022
Out-of-bounds Write in Openatom Openeuler
When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
CVE-2021-33655
Medium · 6.7
CWE-787 Jul 18, 2022
When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory...
When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.
CVE-2022-32208
Medium · 5.9
CWE-787 Jul 7, 2022
When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...
When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.
CVE-2022-32207
Critical · 9.8
CWE-276 Jul 7, 2022
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.
CVE-2022-32206
Medium · 6.5
CWE-770 Jul 7, 2022
curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...
curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable "links" in this "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a "malloc bomb", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.
CVE-2022-32205
Medium · 4.3
CWE-770 Jul 7, 2022
A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...
A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger than the threshold that curl uses internally to avoid sending crazy large requests (1048576 bytes) and instead returns an error.This denial state might remain for as long as the same cookies are kept, match and haven't expired. Due to cookie matching rules, a server on `foo.example.com` can set cookies that also would match for `bar.example.com`, making it it possible for a "sister server" to effectively cause a denial of service for a sibling site on the same second level domain using this method.
CVE-2022-2304
High · 7.8
CWE-121 Jul 5, 2022
Stack-based Buffer Overflow in vim/vim
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2097
Medium · 5.3
CWE-327 Jul 5, 2022
AES OCB fails to encrypt some bytes
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
CVE-2022-34918
High · 7.8
Public exploit CWE-843 Jul 4, 2022
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in...
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
CVE-2022-2285
High · 7.8
CWE-190 Jul 2, 2022
Integer Overflow or Wraparound in vim/vim
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.
CVE-2022-2078
Medium · 5.5
CWE-121 Jun 30, 2022
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw...
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
CVE-2022-2068
High · 7.3
CWE-78 Jun 21, 2022
The c_rehash script allows command injection
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).
CVE-2022-2129
High · 7.8
CWE-787 Jun 19, 2022
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-2126
High · 7.8
CWE-125 Jun 19, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2124
High · 7.8
CWE-126 Jun 19, 2022
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-21166
Medium · 5.5
CWE-459 Jun 15, 2022
Incomplete cleanup in specific special register write operations for some Intel(R)…
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-21125
Medium · 5.5
CWE-459 Jun 15, 2022
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an...
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-21123
Medium · 5.5
CWE-459 Jun 15, 2022
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an...
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.