Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 05.11.2025., Proizvođač: debian'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-4775 7.8 A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write du 2026-10-02 02:17:02
CVE-2026-24061 9.8 telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. 2026-09-29 20:17:19
CVE-2025-6966 5.5 NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key. 2026-09-25 23:10:00
CVE-2026-23490 7.5 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2. 2026-08-27 13:17:03
CVE-2026-9256 8.1 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for ex 2026-08-25 13:19:33
CVE-2026-46333 7.1 In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from whether it can core dump or n 2026-08-24 13:18:59
CVE-2026-12996 8.1 A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry 2026-08-05 19:38:07
CVE-2026-49975 7.5 Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67. 2026-08-05 13:23:23
CVE-2026-56968 3.7 GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server. 2026-07-31 06:16:30
CVE-2026-31431 7.8 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-pl 2026-07-28 14:54:01
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/3
Zapisa po stranici: