Debian
Page 69 of 100 — Debian CVEs from a corpus of 10223, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7792 | Critical | 9.8 | 2018-06-11 | A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This resul… |
CVE-2017-7791 | Medium | 5.3 | 2018-06-11 | On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoo… |
CVE-2017-7787 | High | 7.5 | 2018-06-11 | Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page… |
CVE-2017-7786 | Critical | 9.8 | 2018-06-11 | A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulne… |
CVE-2017-7785 | Critical | 9.8 | 2018-06-11 | A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable… |
CVE-2017-7784 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potent… |
CVE-2017-7779 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume… |
CVE-2017-7778 | Critical | 9.8 | 2018-06-11 | A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized me… |
CVE-2017-7764 | Medium | 5.3 | 2018-06-11 | Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as th… |
CVE-2017-7763 | Medium | 5.3 | 2018-06-11 | Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing at… |
CVE-2017-7758 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerabilit… |
CVE-2017-7757 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a pote… |
CVE-2017-7756 | Critical | 9.8 | 2018-06-11 | A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a potentially exploitable… |
CVE-2017-7754 | High | 7.5 | 2018-06-11 | An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerability affects Firefox < 54, Firefox ESR < 52… |
CVE-2017-7753 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbir… |
CVE-2017-7752 | High | 8.8 | 2018-06-11 | A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This resul… |
CVE-2017-7751 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox… |
CVE-2017-7750 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced i… |
CVE-2017-7749 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerabil… |
CVE-2017-5472 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no… |
CVE-2017-5470 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2017-5469 | Critical | 9.8 | 2018-06-11 | Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45… |
CVE-2017-5465 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied i… |
CVE-2017-5464 | Critical | 9.8 | 2018-06-11 | During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruptio… |
CVE-2017-5462 | Medium | 5.3 | 2018-06-11 | A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS libr… |
CVE-2017-5460 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potential… |
CVE-2017-5459 | Critical | 9.8 | 2018-06-11 | A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR… |
CVE-2017-5448 | High | 8.6 | 2018-06-11 | An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media… |
CVE-2017-5447 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to… |
CVE-2017-5446 | Critical | 9.8 | 2018-06-11 | An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. Th… |
CVE-2017-5445 | High | 7.5 | 2018-06-11 | A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the readi… |
CVE-2017-5444 | High | 7.5 | 2018-06-11 | A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows fo… |
CVE-2017-5443 | Critical | 9.8 | 2018-06-11 | An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9… |
CVE-2017-5442 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affe… |
CVE-2017-5441 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thund… |
CVE-2017-5440 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objec… |
CVE-2017-5439 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulner… |
CVE-2017-5438 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially ex… |
CVE-2017-5436 | High | 8.8 | 2018-06-11 | An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issu… |
CVE-2017-5435 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable cr… |
CVE-2017-5434 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird… |
CVE-2017-5433 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller whi… |
CVE-2017-5432 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird… |
CVE-2017-5429 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption a… |
CVE-2017-5410 | Critical | 9.8 | 2018-06-11 | Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for me… |
CVE-2017-5408 | Medium | 5.3 | 2018-06-11 | Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential informa… |
CVE-2017-5407 | Medium | 6.5 | 2018-06-11 | Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This c… |
CVE-2017-5405 | Medium | 5.3 | 2018-06-11 | Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox < 52, F… |
CVE-2017-5404 | Critical | 9.8 | 2018-06-11 | A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results i… |
CVE-2017-5402 | Critical | 9.8 | 2018-06-11 | A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This result… |
CVE-2017-5401 | Critical | 9.8 | 2018-06-11 | A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vu… |
CVE-2017-5400 | Critical | 9.8 | 2018-06-11 | JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vuln… |
CVE-2017-5398 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some… |
CVE-2017-5396 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. Th… |
CVE-2017-5390 | Critical | 9.8 | 2018-06-11 | The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, allowing for… |
CVE-2017-5386 | High | 7.3 | 2018-06-11 | WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or p… |
CVE-2017-5383 | Medium | 5.3 | 2018-06-11 | URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks i… |
CVE-2017-5380 | Critical | 9.8 | 2018-06-11 | A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and… |
CVE-2017-5378 | High | 7.5 | 2018-06-11 | Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, an… |
CVE-2017-5376 | Critical | 9.8 | 2018-06-11 | Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51. |
CVE-2017-5375 | Critical | 9.8 | 2018-06-11 | JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird <… |
CVE-2017-5373 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough… |
CVE-2016-9905 | High | 8.8 | 2018-06-11 | A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR < 45.6 and Thunderbir… |
CVE-2016-9904 | High | 7.5 | 2018-06-11 | An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be u… |
CVE-2016-9900 | High | 7.5 | 2018-06-11 | External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cros… |
CVE-2016-9899 | Critical | 9.8 | 2018-06-11 | Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 5… |
CVE-2016-9898 | Critical | 9.8 | 2018-06-11 | Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox < 50.1, Firefox ESR… |
CVE-2016-9897 | High | 7.5 | 2018-06-11 | Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vuln… |
CVE-2016-9895 | Medium | 6.1 | 2018-06-11 | Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects… |
CVE-2016-9893 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some… |
CVE-2016-9079 | High | 7.5 | 2018-06-11 | A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a… |
CVE-2016-9074 | Medium | 5.9 | 2018-06-11 | An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1… |
CVE-2016-9066 | High | 7.5 | 2018-06-11 | A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability… |
CVE-2016-9063 | Critical | 9.8 | 2018-06-11 | An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50. |
CVE-2016-5297 | Critical | 9.8 | 2018-06-11 | An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderb… |
CVE-2016-5296 | High | 7.5 | 2018-06-11 | A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability a… |
CVE-2016-5293 | Medium | 5.5 | 2018-06-11 | When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file. This… |
CVE-2016-5291 | Medium | 5.5 | 2018-06-11 | A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 4… |
CVE-2016-5290 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2018-12020 | High | 7.5 | 2018-06-08 | mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output… |
CVE-2018-12015 | High | 7.5 | 2018-06-07 | In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, vi… |
CVE-2017-7654 | High | 7.5 | 2018-06-05 | In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT pa… |
CVE-2017-7653 | Medium | 5.3 | 2018-06-05 | The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that do reject… |
CVE-2018-11743 | Critical | 9.8 | 2018-06-05 | The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_h… |
CVE-2018-1000180 | High | 7.5 | 2018-06-05 | Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pai… |
CVE-2016-1000346 | Low | 3.7 | 2018-06-04 | In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be u… |
CVE-2016-1000345 | Medium | 5.9 | 2018-06-04 | In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environme… |
CVE-2016-1000343 | High | 7.5 | 2018-06-04 | In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key… |
CVE-2016-1000342 | High | 7.5 | 2018-06-04 | In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject… |
CVE-2016-1000341 | Medium | 5.9 | 2018-06-04 | In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for t… |
CVE-2016-1000339 | Medium | 5.3 | 2018-06-04 | In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table driven approach use… |
CVE-2016-10538 | Low | 3.5 | 2018-05-31 | The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any f… |
CVE-2018-5388 | Medium | 6.5 | 2018-05-31 | In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial o… |
CVE-2018-10995 | Medium | 5.3 | 2018-05-30 | SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields). |
CVE-2018-11439 | Medium | 6.5 | 2018-05-30 | The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-… |
CVE-2018-11235 | High | 7.8 | 2018-05-30 | In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a craft… |
CVE-2018-11531 | Critical | 9.8 | 2018-05-29 | Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp. |
CVE-2018-11506 | High | 7.8 | 2018-05-28 | The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer ove… |
CVE-2018-11504 | Medium | 5.5 | 2018-05-26 | The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a… |
CVE-2018-11503 | Medium | 5.5 | 2018-05-26 | The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) vi… |