# debians

cve_id: CVE-2020-4047 wordpress
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) attacks, create open redirects, escalate privileges, and bypass authorization access.


cve_id: CVE-2020-4054 ruby-sanitize
date: 0001-01-01 00:00:00+00:00
more_info:
Michal Bentkowski discovered that ruby-sanitize, a whitelist-based HTML sanitizer, is prone to a HTML sanitization bypass vulnerability when using the <q>relaxed</q> or a custom config allowing certain elements. Content in a &lt;math&gt; or &lt;svg&gt; element may not be sanitized correctly even if math and svg are not in the allowlist.


cve_id: CVE-2020-5260 git
date: 0001-01-01 00:00:00+00:00
more_info:
Felix Wilhelm of Google Project Zero discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline, the credential helper machinery can be fooled to return credential information for a wrong host.


cve_id: CVE-2020-5390 python-pysaml2
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that pysaml2, a Python implementation of SAML to be used in a WSGI environment, was susceptible to XML signature wrapping attacks, which could result in a bypass of signature verification.


cve_id: CVE-2020-6071 vlc
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in the microdns plugin of the VLC media player, which could result in denial of service or potentially the execution of arbitrary code via malicious mDNS packets.


cve_id: CVE-2020-6802 python-bleach
date: 0001-01-01 00:00:00+00:00
more_info:
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when <q>noscript</q> and one or more raw text tags were whitelisted.


cve_id: CVE-2020-6816 python-bleach
date: 0001-01-01 00:00:00+00:00
more_info:
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when strip=False and <q>math</q> or <q>svg</q> tags and one or more of the RCDATA tags were whitelisted.


cve_id: CVE-2020-6819 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Two security issues have been found in the Mozilla Firefox web browser, which could result in the execution of arbitrary code.


cve_id: CVE-2020-7068 php7.3
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, information disclosure, cookie forgery or incorrect encryption.


cve_id: CVE-2020-7247 opensmtpd
date: 0001-01-01 00:00:00+00:00
more_info:
Qualys discovered that the OpenSMTPD SMTP server performed insufficient validation of email addresses which could result in the execution of arbitrary commands as root. In addition this update fixes a denial of service by triggering an opportunistic TLS downgrade.


cve_id: CVE-2020-7471 python-django
date: 0001-01-01 00:00:00+00:00
more_info:
Simon Charette discovered that Django, a high-level Python web development framework, did not properly handle input in its PostgreSQL module. A remote attacker could leverage this to perform SQL injection attacks.


cve_id: CVE-2020-7760 codemirror-js
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that codemirror, a browser-based text editor implemented in JavaScript, was vulnerable to regular expression denial-of-service.


cve_id: CVE-2020-8086 prosody-modules
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that the LDAP authentication modules for the Prosody Jabber/XMPP server incorrectly validated the XMPP address when checking whether a user has admin access.


cve_id: CVE-2020-8265 nodejs
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in Node.js, which could result in denial of service and potentially the execution of arbitrary code or HTTP request smuggling.


cve_id: CVE-2020-8597 ppp
date: 0001-01-01 00:00:00+00:00
more_info:
Ilja Van Sprundel reported a logic flaw in the Extensible Authentication Protocol (EAP) packet parser in the Point-to-Point Protocol Daemon (pppd). An unauthenticated attacker can take advantage of this flaw to trigger a stack-based buffer overflow, leading to denial of service (pppd daemon crash).


cve_id: CVE-2020-8608 qemu
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that incorrect memory handling in the SLIRP networking implementation could result in denial of service or potentially the execution of arbitrary code.


cve_id: CVE-2020-8625 bind9
date: 0001-01-01 00:00:00+00:00
more_info:
A buffer overflow vulnerability was discovered in the SPNEGO implementation affecting the GSSAPI security policy negotiation in BIND, a DNS server implementation, which could result in denial of service (daemon crash), or potentially the execution of arbitrary code.


cve_id: CVE-2020-8794 opensmtpd
date: 0001-01-01 00:00:00+00:00
more_info:
Qualys discovered that the OpenSMTPD SMTP server performed insufficient validation of SMTP commands, which could result in local privilege escalation or the execution of arbitrary code.


cve_id: CVE-2020-9273 proftpd-dfsg
date: 0001-01-01 00:00:00+00:00
more_info:
Antonio Morales discovered an use-after-free flaw in the memory pool allocator in ProFTPD, a powerful modular FTP/SFTP/FTPS server. Interrupting current data transfers can corrupt the ProFTPD memory pool, leading to denial of service, or potentially the execution of arbitrary code.


cve_id: CVE-2020-9355 network-manager-ssh
date: 0001-01-01 00:00:00+00:00
more_info:
Kobus van Schoor discovered that network-manager-ssh, a plugin to provide VPN integration for SSH in NetworkManager, is prone to a privilege escalation vulnerability. A local user with privileges to modify a connection can take advantage of this flaw to execute arbitrary commands as root.


cve_id: CVE-2020-9488 apache-log4j2
date: 0001-01-01 00:00:00+00:00
more_info:
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From version 2.15.0, this behavior has been disabled by default.


cve_id: CVE-2020-9494 trafficserver
date: 0001-01-01 00:00:00+00:00
more_info:
A vulnerability was discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service via malformed HTTP/2 headers.


cve_id: CVE-2021-0089 xen
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service or information leaks.


cve_id: CVE-2021-20001 debian-edu-config
date: 0001-01-01 00:00:00+00:00
more_info:
Marcel Neumann, Robert Altschaffel, Loris Guba and Dustin Hermann discovered that debian-edu-config, a set of configuration files used for the Debian Edu blend configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.


cve_id: CVE-2021-20270 mediawiki
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were found in MediaWiki, a website engine for collaborative work, which could result in incomplete page/blocking protection, denial of service or cross-site scripting.


cve_id: CVE-2021-20270 pygments
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that Pygments, a syntax highlighting package written in Python, could be forced into an infinite loop, resulting in denial of service.


cve_id: CVE-2021-20305 nettle
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilities were discovered in nettle, a low level cryptographic library, which could result in denial of service (remote crash in RSA decryption via specially crafted ciphertext, crash on ECDSA signature verification) or incorrect verification of ECDSA signatures.


cve_id: CVE-2021-20314 libspf2
date: 0001-01-01 00:00:00+00:00
more_info:
Philipp Jeitner and Haya Shulman discovered a stack-based buffer overflow in libspf2, a library for validating mail senders with SPF, which could result in denial of service, or potentially execution of arbitrary code when processing a specially crafted SPF record.


cve_id: CVE-2021-21261 flatpak
date: 0001-01-01 00:00:00+00:00
more_info:
Simon McVittie discovered a bug in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system (a sandbox escape).


cve_id: CVE-2021-21330 python-aiohttp
date: 0001-01-01 00:00:00+00:00
more_info:
Beast Glatisant and Jelmer Vernooij reported that python-aiohttp, a async HTTP client/server framework, is prone to an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website.


cve_id: CVE-2021-21341 libxstream-java
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security vulnerabilities have been discovered in XStream, a Java library to serialize objects to XML and back again.


cve_id: CVE-2021-21381 flatpak
date: 0001-01-01 00:00:00+00:00
more_info:
Anton Lydike discovered that sandbox restrictions in Flatpak, an application deployment framework for desktop apps, could be bypassed via a malicious .desktop file.


cve_id: CVE-2021-21408 smarty3
date: 0001-01-01 00:00:00+00:00
more_info:
Several security vulnerabilities have been discovered in smarty3, the compiling PHP template engine. Template authors are able to run restricted static php methods or even arbitrary PHP code by crafting a malicious math string or by choosing an invalid {block} or {include} file name. If a math string was passed through as user provided data to the math function, remote users were able to run arbitrary PHP code as well.


cve_id: CVE-2021-2163 openjdk-11
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that the OpenJDK Java platform incompletely enforced configuration settings used in Jar signing verifications.


cve_id: CVE-2021-21703 php7.3
date: 0001-01-01 00:00:00+00:00
more_info:
An out-of-bounds read and write flaw was discovered in the PHP-FPM code, which could result in escalation of privileges from local unprivileged user to the root user.


cve_id: CVE-2021-21704 php7.3
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result an SSRF bypass of the FILTER_VALIDATE_URL check and denial of service or potentially the execution of arbitrary code in the Firebird PDO.


cve_id: CVE-2021-21772 lib3mf
date: 0001-01-01 00:00:00+00:00
more_info:
A use-after-free was discovered in Lib3MF, a C++ implementation of the 3D Manufacturing Format, which could result in the execution of arbitrary code if a malformed file is opened.


cve_id: CVE-2021-21898 librecad
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in LibreCAD, an application for computer aided design (CAD) which could result in denial of service or the execution of arbitrary code if a malformed CAD file is opened.


cve_id: CVE-2021-22204 libimage-exiftool-perl
date: 0001-01-01 00:00:00+00:00
more_info:
A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed.


cve_id: CVE-2021-22207 wireshark
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer which could result in denial of service or the execution of arbitrary code.


cve_id: CVE-2021-22880 rails
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in the Rails web framework which could result in denial of service.


cve_id: CVE-2021-22883 nodejs
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in Node.js, which could result in denial of service or DNS rebinding attacks.


cve_id: CVE-2021-22895 nextcloud-desktop
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the Nextcloud desktop client, which could result in information disclosure.


cve_id: CVE-2021-22918 libuv1
date: 0001-01-01 00:00:00+00:00
more_info:
An out-of-bounds read was discovered in the uv__idna_to_ascii() function of Libuv, an asynchronous event notification library, which could result in denial of service or information disclosure.


cve_id: CVE-2021-23017 nginx
date: 0001-01-01 00:00:00+00:00
more_info:
Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denial of service and potentially the execution of arbitrary code.


cve_id: CVE-2021-23158 htmldoc
date: 0001-01-01 00:00:00+00:00
more_info:
A buffer overflow was discovered in HTMLDOC, a HTML processor that generates indexed HTML, PS, and PDF, which could potentially result in the execution of arbitrary code. In addition a number of crashes were addressed.


cve_id: CVE-2021-23214 postgresql-11
date: 0001-01-01 00:00:00+00:00
more_info:
Jacob Champion discovered two vulnerabilities in the PostgreSQL database system, which could result in man-in-the-middle attacks.


cve_id: CVE-2021-23358 underscore
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that missing input sanitising in the template() function of the Underscore JavaScript library could result in the execution of arbitrary code.


cve_id: CVE-2021-2341 openjdk-11
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in bypass of sandbox restrictions, incorrect validation of signed Jars or information disclosure.


cve_id: CVE-2021-23961 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, privilege escalation or spoofing.


cve_id: CVE-2021-23961 thunderbird
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. In addition a number of security issues were addressed in the OpenPGP support.


cve_id: CVE-2021-23968 thunderbird
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure.


cve_id: CVE-2021-23980 python-bleach
date: 0001-01-01 00:00:00+00:00
more_info:
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when <q>svg</q> or <q>math</q> are in the allowed tags, 'p' or <q>br</q> are in allowed tags, <q>style</q>, <q>title</q>, <q>noscript</q>, <q>script</q>, <q>textarea</q>, <q>noframes</q>, <q>iframe</q>, or <q>xmp</q> are in allowed tags and 'strip_comments=False' is set.


cve_id: CVE-2021-23981 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing attacks.


cve_id: CVE-2021-25122 tomcat9
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in information disclosure or denial of service.


cve_id: CVE-2021-25219 bind9
date: 0001-01-01 00:00:00+00:00
more_info:
Kishore Kumar Kothapalli discovered that the lame server cache in BIND, a DNS server implementation, can be abused by an attacker to significantly degrade resolver performance, resulting in denial of service (large delays for responses for client queries and DNS timeouts on client hosts).


cve_id: CVE-2021-25220 bind9
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were found in the BIND DNS server, which could result in denial of service or cache poisoning.


cve_id: CVE-2021-26675 connman
date: 0001-01-01 00:00:00+00:00
more_info:
A remote information leak vulnerability and a remote buffer overflow vulnerability were discovered in ConnMan, a network manager for embedded devices, which could result in denial of service or the execution of arbitrary code.


cve_id: CVE-2021-26910 firejail
date: 0001-01-01 00:00:00+00:00
more_info:
Roman Fiedler discovered a vulnerability in the OverlayFS code in firejail, a sandbox program to restrict the running environment of untrusted applications, which could result in root privilege escalation. This update disables OverlayFS support in firejail.


cve_id: CVE-2021-26933 xen
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, privilege escalation or memory disclosure.


cve_id: CVE-2021-26937 screen
date: 0001-01-01 00:00:00+00:00
more_info:
Felix Weinmann reported a flaw in the handling of combining characters in screen, a terminal multiplexer with VT100/ANSI terminal emulation, which can result in denial of service, or potentially the execution of arbitrary code via a specially crafted UTF-8 character sequence.


cve_id: CVE-2021-27212 openldap
date: 0001-01-01 00:00:00+00:00
more_info:
A vulnerability in the Certificate List Exact Assertion validation was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of this flaw to cause a denial of service (slapd daemon crash) via specially crafted packets.


cve_id: CVE-2021-27291 pygments
date: 0001-01-01 00:00:00+00:00
more_info:
Ben Caller discovered that Pygments, a syntax highlighting package written in Python 3, used regular expressions which could result in denial of service.


cve_id: CVE-2021-27577 trafficserver
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service, HTTP request smuggling or cache poisoning.


cve_id: CVE-2021-28089 tor
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in Tor, a connection-based low-latency anonymous communication system, which could lead to excessive CPU usage or cause a directory authority to crash.


cve_id: CVE-2021-28091 lasso
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that lasso, a library which implements SAML 2.0 and Liberty Alliance standards, did not properly verify that all assertions in a SAML response were properly signed, allowing an attacker to impersonate users or bypass access control.


cve_id: CVE-2021-28834 ruby-kramdown
date: 0001-01-01 00:00:00+00:00
more_info:
Stan Hu discovered that kramdown, a pure Ruby Markdown parser and converter, performed insufficient namespace validation of Rouge syntax highlighting formatters.


cve_id: CVE-2021-28957 lxml
date: 0001-01-01 00:00:00+00:00
more_info:
Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious user to mount a cross-site scripting attack.


cve_id: CVE-2021-28965 ruby2.5
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in the interpreter for the Ruby language and the Rubygems included, which may result in XML roundtrip attacks, the execution of arbitrary code, information disclosure, StartTLS stripping in IMAP or denial of service.


cve_id: CVE-2021-29447 wordpress
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform XML External Entity (XXE) attacks, and access private content.


cve_id: CVE-2021-29472 composer
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that composer, a dependency manager for PHP, did not properly sanitize Mercurial URLs, which could lead to arbitrary code execution.


cve_id: CVE-2021-29956 thunderbird
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. In adddition two security issues were addressed in the OpenPGP support.


cve_id: CVE-2021-29969 thunderbird
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code.


cve_id: CVE-2021-30640 tomcat9
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in denial of service.


cve_id: CVE-2021-31535 libx11
date: 0001-01-01 00:00:00+00:00
more_info:
Roman Fiedler reported that missing length validation in various functions provided by libx11, the X11 client-side library, allow to inject X11 protocol commands on X clients, leading to authentication bypass, denial of service or potentially the execution of arbitrary code.


cve_id: CVE-2021-3156 sudo
date: 0001-01-01 00:00:00+00:00
more_info:
The Qualys Research Labs discovered a heap-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users. Any local user (sudoers and non-sudoers) can exploit this flaw for root privilege escalation.


cve_id: CVE-2021-3181 mutt
date: 0001-01-01 00:00:00+00:00
more_info:
Tavis Ormandy discovered a memory leak flaw in the rfc822 group recipient parsing in Mutt, a text-based mailreader supporting MIME, GPG, PGP and threading, which could result in denial of service.


cve_id: CVE-2021-31826 shibboleth-sp
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that the Shibboleth Service Provider is prone to a NULL pointer dereference flaw in the cookie-based session recovery feature. A remote, unauthenticated attacker can take advantage of this flaw to cause a denial of service (crash in the shibd daemon/service).


cve_id: CVE-2021-3185 gst-plugins-bad1.0
date: 0001-01-01 00:00:00+00:00
more_info:
Andrew Wesie discovered a buffer overflow in the H264 support of the GStreamer multimedia framework, which could potentially result in the execution of arbitrary code.


cve_id: CVE-2021-32027 postgresql-11
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory content.


cve_id: CVE-2021-3246 libsndfile
date: 0001-01-01 00:00:00+00:00
more_info:
Andrea Fioraldi discovered a buffer overflow in libsndfile, a library for reading/writing audio files, which could result in denial of service or potentially the execution of arbitrary code when processing a malformed audio file.


cve_id: CVE-2021-32626 redis
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary code.


cve_id: CVE-2021-32917 prosody
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were found in Prosody, a lightweight Jabber/XMPP server, which could result in denial of service or information disclosure.


cve_id: CVE-2021-33037 tomcat9
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling, bypass of logout restrictions or authentications using variations of a valid user name.


cve_id: CVE-2021-33038 hyperkitty
date: 0001-01-01 00:00:00+00:00
more_info:
Amir Sarabadani and Kunal Mehta discovered that the import functionality of Hyperkitty, the web user interface to access Mailman 3 archives, did not restrict the visibility of private archives during the import, i.e. that during the import of a private Mailman 2 archive the archive was publicly accessible until the import completed.


cve_id: CVE-2021-33054 sogo
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that missing SAML signature validation in the SOGo groupware could result in impersonation attacks.


cve_id: CVE-2021-33285 ntfs-3g
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege escalation.


cve_id: CVE-2021-3449 openssl
date: 0001-01-01 00:00:00+00:00
more_info:
A NULL pointer dereference was found in the signature_algorithms processing in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service.


cve_id: CVE-2021-34548 tor
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security vulnerabilities were discovered in Tor, a connection-based low-latency anonymous communication system, which could result in denial of service or spoofing.


cve_id: CVE-2021-3472 xorg-server
date: 0001-01-01 00:00:00+00:00
more_info:
Jan-Niklas Sohn discovered that missing input sanitising in the XInput extension of the X.org X server may result in privilege escalation if the X server is running privileged.


cve_id: CVE-2021-34798 apache2
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition a vulnerability was discovered in mod_proxy with which an attacker could trick the server to forward requests to arbitrary origin servers.


cve_id: CVE-2021-3497 gst-plugins-good1.0
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened.


cve_id: CVE-2021-3504 hivex
date: 0001-01-01 00:00:00+00:00
more_info:
Jeremy Galindo discovered an out-of-bounds memory access in Hivex, a library to parse Windows Registry hive files.


cve_id: CVE-2021-35197 mediawiki
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were found in MediaWiki, a website engine for collaborative work, which could result in cross-site scripting, denial of service and a bypass of restrictions in the <q>Replace Text</q> extension.


cve_id: CVE-2021-3520 lz4
date: 0001-01-01 00:00:00+00:00
more_info:
Jasper Lievisse Adriaanse reported an integer overflow flaw in lz4, a fast LZ compression algorithm library, resulting in memory corruption.


cve_id: CVE-2021-35472 lemonldap-ng
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in lemonldap-ng, a Web-SSO system. The flaws could result in information disclosure, authentication bypass, or could allow an attacker to increase its authentication level or impersonate another user, especially when lemonldap-ng is configured to increase authentication level for users authenticated via a second factor.


cve_id: CVE-2021-3570 linuxptp
date: 0001-01-01 00:00:00+00:00
more_info:
Miroslav Lichvar reported that the ptp4l program in linuxptp, an implementation of the Precision Time Protocol (PTP), does not validate the messageLength field of incoming messages, allowing a remote attacker to cause a denial of service, information leak, or potentially remote code execution.


cve_id: CVE-2021-36222 krb5
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that the Key Distribution Center (KDC) in krb5, the MIT implementation of Kerberos, is prone to a NULL pointer dereference flaw. An unauthenticated attacker can take advantage of this flaw to cause a denial of service (KDC crash) by sending a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST.


cve_id: CVE-2021-3672 c-ares
date: 0001-01-01 00:00:00+00:00
more_info:
Philipp Jeitner and Haya Shulman discovered a flaw in c-ares, a library that performs DNS requests and name resolution asynchronously. Missing input validation of hostnames returned by DNS servers can lead to output of wrong hostnames (leading to Domain Hijacking).


cve_id: CVE-2021-3693 ledgersmb
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in LedgerSMB, a financial accounting and ERP program, which could result in cross-site scripting or clickjacking.


cve_id: CVE-2021-37147 trafficserver
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling or MITM attacks.


cve_id: CVE-2021-38165 lynx
date: 0001-01-01 00:00:00+00:00
more_info:
Thorsten Glaser and Axel Beckert reported that lynx, a non-graphical (text-mode) web browser, does not properly handle the userinfo subcomponent of a URI, which can lead to leaking of credential in cleartext in SNI data.


cve_id: CVE-2021-38385 tor
date: 0001-01-01 00:00:00+00:00
more_info:
Henry de Valence reported a flaw in the signature verification code in Tor, a connection-based low-latency anonymous communication system. A remote attacker can take advantage of this flaw to cause an assertion failure, resulting in denial of service.


cve_id: CVE-2021-38496 thunderbird
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code, spoofing, information disclosure, downgrade attacks on SMTP STARTTLS connections or misleading display of OpenPGP/MIME signatures.


cve_id: CVE-2021-3850 libphp-adodb
date: 0001-01-01 00:00:00+00:00
more_info:
Emmet Leahy reported that libphp-adodb, a PHP database abstraction layer library, allows to inject values into a PostgreSQL connection string. Depending on how the library is used this flaw can result in authentication bypass, reveal a server IP address or have other unspecified impact.


cve_id: DSA-4985-1 wordpress
date: 2021-10-14 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform Cross-Site Scripting (XSS) attacks or impersonate other users.


cve_id: CVE-2021-39365 grilo
date: 0001-01-01 00:00:00+00:00
more_info:
Michael Catanzaro reported a problem in Grilo, a framework for discovering and browsing media. TLS certificate verification is not enabled on the SoupSessionAsync objects created by Grilo, leaving users vulnerable to network MITM attacks.


cve_id: CVE-2021-4008 xorg-server
date: 0001-01-01 00:00:00+00:00
more_info:
Jan-Niklas Sohn discovered that multiple input validation failures in X server extensions of the X.org X server may result in privilege escalation if the X server is running privileged.


cve_id: CVE-2021-40085 neutron
date: 0001-01-01 00:00:00+00:00
more_info:
Pavel Toporkov discovered a vulnerability in Neutron, the OpenStack virtual network service, which allowed a reconfiguration of dnsmasq via crafted dhcp_extra_opts parameters.


cve_id: CVE-2021-40153 squashfs-tools
date: 0001-01-01 00:00:00+00:00
more_info:
Etienne Stalmans discovered that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not validate filenames for traversal outside of the destination directory. An attacker can take advantage of this flaw for writing to arbitrary files to the filesystem if a malformed Squashfs image is processed.


cve_id: CVE-2021-40347 postorius
date: 0001-01-01 00:00:00+00:00
more_info:
Kevin Israel discovered that Postorius, the administrative web frontend for Mailman 3, didn't validate whether a logged-in user owns the email address when unsubscribing.


cve_id: CVE-2021-40690 libxml-security-java
date: 0001-01-01 00:00:00+00:00
more_info:
Apache Santuario - XML Security for Java is vulnerable to an issue where the <q>secureValidation</q> property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.


cve_id: CVE-2021-41072 squashfs-tools
date: 0001-01-01 00:00:00+00:00
more_info:
Richard Weinberger reported that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not check for duplicate filenames within a directory. An attacker can take advantage of this flaw for writing to arbitrary files to the filesystem if a malformed Squashfs image is processed.


cve_id: CVE-2021-41079 tomcat9
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in denial of service.


cve_id: CVE-2021-4140 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, denial of service or spoofing.


cve_id: CVE-2021-4140 thunderbird
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code.


cve_id: CVE-2021-4160 openssl
date: 0001-01-01 00:00:00+00:00
more_info:
Tavis Ormandy discovered that the BN_mod_sqrt() function of OpenSSL could be tricked into an infinite loop. This could result in denial of service via malformed certificates.


cve_id: CVE-2021-41990 strongswan
date: 0001-01-01 00:00:00+00:00
more_info:
Researchers at the United States of America National Security Agency (NSA) identified two denial of services vulnerability in strongSwan, an IKE/IPsec suite.


cve_id: CVE-2021-42392 h2database
date: 0001-01-01 00:00:00+00:00
more_info:
Security researchers of JFrog Security and Ismail Aydemir discovered two remote code execution vulnerabilities in the H2 Java SQL database engine which can be exploited through various attack vectors, most notably through the H2 Console and by loading custom classes from remote servers through JNDI. The H2 console is a developer tool and not required by any reverse-dependency in Debian. It has been disabled in (old)stable releases. Database developers are advised to use at least version 2.1.210-1, currently available in Debian unstable.


cve_id: CVE-2021-42717 modsecurity-apache
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that modsecurity-apache, an Apache module to tighten the Web application security, does not properly handles excessively nested JSON objects, which could result in denial of service. The update introduces a new <q>SecRequestBodyJsonDepthLimit</q> option to limit the maximum request body JSON parsing depth which ModSecurity will accept (defaults to 10000).


cve_id: CVE-2021-42771 python-babel
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that missing input sanitising in Babel, a set of tools for internationalising Python applications, could result in the execution of arbitrary code.


cve_id: CVE-2021-43527 nss
date: 0001-01-01 00:00:00+00:00
more_info:
Tavis Ormandy discovered that nss, the Mozilla Network Security Service library, is prone to a heap overflow flaw when verifying DSA or RSA-PPS signatures, which could result in denial of service or potentially the execution of arbitrary code.


cve_id: CVE-2021-43818 lxml
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that lxml, a Python binding for the libxml2 and libxslt libraries, does not properly sanitize its input, which could lead to cross-site scripting.


cve_id: CVE-2021-44025 roundcube
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize requests and mail messages. This would allow an attacker to perform Cross-Side Scripting (XSS) or SQL injection attacks.


cve_id: CVE-2021-44142 samba
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Samba, a SMB/CIFS file, print, and login server for Unix.


cve_id: CVE-2021-44730 snapd
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilties were discovered in snapd, a daemon and tooling that enable Snap packages, which could result in bypass of access restrictions or privilege escalation.


cve_id: DSA-5021-1 mediawiki
date: 2021-12-15 00:00:00+00:00
more_info:
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work: Vulnerabilities in the mcrundo and rollback actions may allow an attacker to leak page content from private wikis or to bypass edit restrictions.


cve_id: CVE-2021-45079 strongswan
date: 0001-01-01 00:00:00+00:00
more_info:
Zhuowei Zhang discovered a bug in the EAP authentication client code of strongSwan, an IKE/IPsec suite, that may allow to bypass the client and in some scenarios even the server authentication, or could lead to a denial-of-service attack.


cve_id: CVE-2021-45105 apache-log4j2
date: 0001-01-01 00:00:00+00:00
more_info:
It was found that Apache Log4j2, a Logging Framework for Java, did not protect from uncontrolled recursion from self-referential lookups. When the logging configuration uses a non-default Pattern Layout with a Context Lookup (for example, $${ctx:loginId}), attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup, resulting in a denial of service.


cve_id: CVE-2021-45417 aide
date: 0001-01-01 00:00:00+00:00
more_info:
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be triggered via large extended file attributes or ACLs. This may result in denial of service or privilege escalation.


cve_id: CVE-2021-45444 zsh
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that zsh, a powerful shell and scripting language, did not prevent recursive prompt expansion. This would allow an attacker to execute arbitrary commands into a user's shell, for instance by tricking a vcs_info user into checking out a git branch with a specially crafted name.


cve_id: CVE-2021-45944 ghostscript
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary code if malformed document files are processed.


cve_id: CVE-2021-45960 expat
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitrary code, if a malformed XML file is processed.


cve_id: CVE-2021-46141 uriparser
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in uriparser, a library that parses Uniform Resource Identifiers (URIs), which may result in denial of service or potentially in the execution of arbitrary code.


cve_id: CVE-2021-46144 roundcube
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attacker to perform Cross-Site Scripting (XSS) attacks.


cve_id: CVE-2022-0217 prosody
date: 0001-01-01 00:00:00+00:00
more_info:
Matthew Wild discovered that the WebSockets code in Prosody, a lightweight Jabber/XMPP server, was susceptible to denial of service.


cve_id: DSA-5105-1 bind9
date: 2022-03-18 00:00:00+00:00
more_info:
Two vulnerabilities were found in the BIND DNS server, which could result in denial of service or cache poisoning.


cve_id: CVE-2022-0543 redis
date: 0001-01-01 00:00:00+00:00
more_info:
Reginaldo Silva discovered a (Debian-specific) Lua sandbox escape in Redis, a persistent key-value database.


cve_id: CVE-2022-0544 blender
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilities have been discovered in various image parsers in Blender, a 3D modeller/ renderer, which may result in denial of service or the execution of arbitrary code if a malformed file is opened.


cve_id: CVE-2022-0561 tiff
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service if malformed image files are processed.


cve_id: CVE-2022-0566 thunderbird
date: 0001-01-01 00:00:00+00:00
more_info:
An out-of-bounds write was discovered in Thunderbird, which could be triggered via a malformed email message.


cve_id: CVE-2022-1097 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing.


cve_id: CVE-2022-1271 gzip
date: 0001-01-01 00:00:00+00:00
more_info:
cleemy desu wayo reported that incorrect handling of filenames by zgrep in gzip, the GNU compression utilities, can result in overwrite of arbitrary files or execution of arbitrary code if a file with a specially crafted filename is processed.


cve_id: CVE-2022-1271 xz-utils
date: 0001-01-01 00:00:00+00:00
more_info:
cleemy desu wayo reported that incorrect handling of filenames by xzgrep in xz-utils, the XZ-format compression utilities, can result in overwrite of arbitrary files or execution of arbitrary code if a file with a specially crafted filename is processed.


cve_id: CVE-2022-1292 openssl
date: 0001-01-01 00:00:00+00:00
more_info:
Elison Niven discovered that the c_rehash script included in OpenSSL did not sanitise shell meta characters which could result in the execution of arbitrary commands.


cve_id: CVE-2022-1529 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Manfred Paul discovered two security issues in the Mozilla Firefox web browser, which could result in the execution of arbitrary code.


cve_id: CVE-2022-1552 postgresql-11
date: 0001-01-01 00:00:00+00:00
more_info:
Alexander Lakhin discovered that the autovacuum feature and multiple commands could escape the "security-restricted operation" sandbox.


cve_id: CVE-2022-1664 dpkg
date: 0001-01-01 00:00:00+00:00
more_info:
Max Justicz reported a directory traversal vulnerability in Dpkg::Source::Archive in dpkg, the Debian package management system. This affects extracting untrusted source packages in the v2 and v3 source package formats that include a debian.tar.


cve_id: CVE-2022-2068 openssl
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that the c_rehash script included in OpenSSL did not sanitise shell meta characters which could result in the execution of arbitrary commands.


cve_id: CVE-2022-21123 intel-microcode
date: 0001-01-01 00:00:00+00:00
more_info:
This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities.


cve_id: CVE-2022-21248 openjdk-11
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, bypass of deserialization restrictions or information disclosure.


cve_id: CVE-2022-21426 openjdk-11
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in information disclosure or denial of service.


cve_id: CVE-2022-21476 openjdk-11
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in information disclosure or denial of service.


cve_id: CVE-2022-21540 openjdk-11
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in the execution of arbitrary Java bytecode or the bypass of the Java sandbox.


cve_id: CVE-2022-21661 wordpress
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, bypass hardening, or perform Cross-Site Scripting (XSS) attacks.


cve_id: CVE-2022-21699 ipython
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that IPython, an enhanced interactive Python shell, executed config files from the current working directory, which could result in cross-user attacks if run from a directory multiple users may write to.


cve_id: CVE-2022-2200 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.


cve_id: CVE-2022-22707 lighttpd
date: 0001-01-01 00:00:00+00:00
more_info:
An out-of-bounds memory access was discovered in the mod_extforward plugin of the lighttpd web server, which may result in denial of service.


cve_id: CVE-2022-22747 nss
date: 0001-01-01 00:00:00+00:00
more_info:
Tavis Ormandy discovered that incorrect parsing of pkcs7 sequences in nss, the Mozilla Network Security Service library, may result in denial of service.


cve_id: CVE-2022-22815 pillow
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrary code if malformed images are processed.


cve_id: CVE-2022-23220 usbview
date: 0001-01-01 00:00:00+00:00
more_info:
Matthias Gerstner reported that usbview, a USB device viewer, does not properly handle authorization in the PolicyKit policy configuration, which could result in root privilege escalation.


cve_id: CVE-2022-24300 minetest
date: 0001-01-01 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in Minetest, a sandbox video game and game creation system. These issues may allow attackers to manipulate game mods and grant them an unfair advantage over other players. These flaws could also be abused for a denial of service attack against a Minetest server or if user input is passed directly to minetest.deserialize without serializing it first, then a malicious user could run Lua code in the server environment.


cve_id: CVE-2022-24407 cyrus-sasl2
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that the SQL plugin in cyrus-sasl2, a library implementing the Simple Authentication and Security Layer, is prone to a SQL injection attack. An authenticated remote attacker can take advantage of this flaw to execute arbitrary SQL commands and for privilege escalation.


cve_id: CVE-2022-2469 gsasl
date: 0001-01-01 00:00:00+00:00
more_info:
Simon Josefsson discovered an out-of-bounds memory read in GNU SASL, an implementation of the Simple Authentication and Security Layer framework, which could result in denial of service.


cve_id: CVE-2022-24761 waitress
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that the Waitress WSGI server was susceptible to HTTP request smuggling in some scenarios when used behind a proxy.


cve_id: CVE-2022-24884 ecdsautils
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that ecdsautils, a collection of ECDSA elliptic curve cryptography CLI tools verified some cryptographic signatures incorrectly: A signature consisting only of zeroes was always considered valid, making it trivial to forge signatures.


cve_id: CVE-2022-24903 rsyslog
date: 0001-01-01 00:00:00+00:00
more_info:
Peter Agten discovered that several modules for TCP syslog reception in rsyslog, a system and kernel logging daemon, have buffer overflow flaws when octet-counted framing is used, which could result in denial of service or potentially the execution of arbitrary code.


cve_id: CVE-2022-2553 booth
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that Booth, a cluster ticket manager, didn't correctly restrict intra-node communication when configuring the <q>authfile</q> configuration directive.


cve_id: CVE-2022-25802 request-tracker4
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system.


cve_id: CVE-2022-26381 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, spoofing or sandbox bypass.


cve_id: CVE-2022-26485 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Two security issues have been found in the Mozilla Firefox web browser, which result in the execution of arbitrary code.


cve_id: CVE-2022-26485 thunderbird
date: 0001-01-01 00:00:00+00:00
more_info:
Two security issues were discovered in Thunderbird, which could result in the execution of arbitrary code.


cve_id: CVE-2022-26495 nbd
date: 0001-01-01 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the server for the Network Block Device (NBD), which could result in the execution of arbitrary code.


cve_id: CVE-2022-26661 tryton-proteus
date: 0001-01-01 00:00:00+00:00
more_info:
Jeremy Mousset discovered two XML parsing vulnerabilities in the Tryton application platform, which may result in information disclosure or denial of service.


cve_id: CVE-2022-26691 cups
date: 0001-01-01 00:00:00+00:00
more_info:
Joshua Mason discovered that a logic error in the validation of the secret key used in the <q>local</q> authorisation mode of the CUPS printing system may result in privilege escalation.


cve_id: CVE-2022-27239 cifs-utils
date: 0001-01-01 00:00:00+00:00
more_info:
Jeffrey Bencteux reported two vulnerabilities in cifs-utils, the Common Internet File System utilities, which can result in escalation of privileges (<a href="https://security-tracker.debian.org/tracker/CVE-2022-27239">CVE-2022-27239</a>) or an information leak (<a href="https://security-tracker.debian.org/tracker/CVE-2022-29869">CVE-2022-29869</a>).


cve_id: CVE-2022-29155 openldap
date: 0001-01-01 00:00:00+00:00
more_info:
Jacek Konieczny discovered a SQL injection vulnerability in the back-sql backend to slapd in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, allowing an attacker to alter the database during an LDAP search operation when a specially crafted search filter is processed.


cve_id: CVE-2022-29824 libxml2
date: 0001-01-01 00:00:00+00:00
more_info:
Felix Wilhelm reported that several buffer handling functions in libxml2, a library providing support to read, modify and write XML and HTML files, don't check for integer overflows, resulting in out-of-bounds memory writes if specially crafted, multi-gigabyte XML files are processed. An attacker can take advantage of this flaw for denial of service or execution of arbitrary code.


cve_id: CVE-2022-30688 needrestart
date: 0001-01-01 00:00:00+00:00
more_info:
Jakub Wilk discovered a local privilege escalation in needrestart, a utility to check which daemons need to be restarted after library upgrades. Regular expressions to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.


cve_id: CVE-2022-31214 firejail
date: 0001-01-01 00:00:00+00:00
more_info:
Matthias Gerstner discovered that the --join option of Firejail, a sandbox to restrict an application environment, was susceptible to local privilege escalation to root.


cve_id: CVE-2022-31799 python-bottle
date: 0001-01-01 00:00:00+00:00
more_info:
Elton Nokaj discovered that incorrect error handling in Bottle, a WSGI framework for Python, could result in the disclosure of sensitive information.


cve_id: CVE-2022-32278 exo
date: 0001-01-01 00:00:00+00:00
more_info:
It was discovered that exo, a support library for the Xfce desktop environment, would allow executing remote .desktop files. In some scenario, an attacker could use this vulnerability to trick an user an execute arbitrary code on the platform with the privileges of that user.


cve_id: CVE-2022-34903 gnupg2
date: 0001-01-01 00:00:00+00:00
more_info:
Demi Marie Obenour discovered a flaw in GnuPG, allowing for signature spoofing via arbitrary injection into the status line. An attacker who controls the secret part of any signing-capable key or subkey in the victim's keyring, can take advantage of this flaw to provide a correctly-formed signature that some software, including gpgme, will accept to have validity and signer fingerprint chosen from the attacker.


cve_id: CVE-2022-35410 mat2
date: 0001-01-01 00:00:00+00:00
more_info:
A directory traversal vulnerability was discovered in the Metadata anonymisation toolkit, which could result in information disclosure via a malformed ZIP archive.


cve_id: CVE-2022-36318 firefox-esr
date: 0001-01-01 00:00:00+00:00
more_info:
Multiple security issues have been found in the Mozilla Firefox web browser, which could result in spoofing.


cve_id: DSA-4496-1 pango1.0
date: 2019-08-11 00:00:00+00:00
more_info:
Benno Fuenfstueck discovered that Pango, a library for layout and rendering of text with an emphasis on internationalization, is prone to a heap-based buffer overflow flaw in the pango_log2vis_get_embedding_levels function. An attacker can take advantage of this flaw for denial of service or potentially the execution of arbitrary code.


cve_id: DSA-4507-1 squid
date: 2019-08-24 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Squid, a fully featured web proxy cache. The flaws in the HTTP Digest Authentication processing, the HTTP Basic Authentication processing and in the cachemgr.cgi allowed remote attackers to perform denial of service and cross-site scripting attacks, and potentially the execution of arbitrary code.


cve_id: DSA-4538-1 wpa
date: 2019-09-29 00:00:00+00:00
more_info:
Two vulnerabilities were found in the WPA protocol implementation found in wpa_supplication (station) and hostapd (access point).


cve_id: DSA-4544-1 unbound
date: 2019-10-16 00:00:00+00:00
more_info:
X41 D-Sec discovered that unbound, a validating, recursive, and caching DNS resolver, did not correctly process some NOTIFY queries. This could lead to remote denial-of-service by application crash.


cve_id: DSA-4561-1 fribidi
date: 2019-11-08 00:00:00+00:00
more_info:
Alex Murray discovered a stack-based buffer overflow vulnerability in fribidi, an implementation of the Unicode Bidirectional Algorithm algorithm, which could result in denial of service or potentially the execution of arbitrary code, when processing a large number of unicode isolate directional characters.


cve_id: DSA-4566-1 qemu
date: 2019-11-12 00:00:00+00:00
more_info:
This update for QEMU, a fast processor emulator, backports support to passthrough the pschange-mc-no CPU flag. The virtualised MSR seen by a guest is set to show the bug as fixed, allowing to disable iTLB Multihit mitigations in nested hypervisors (cf. DSA 4564-1).


cve_id: DSA-4570-1 mosquitto
date: 2019-11-17 00:00:00+00:00
more_info:
A vulnerability was discovered in mosquitto, a MQTT version 3.1/3.1.1 compatible message broker, allowing a malicious MQTT client to cause a denial of service (stack overflow and daemon crash), by sending a specially crafted SUBSCRIBE packet containing a topic with a extremely deep hierarchy.


cve_id: DSA-4599-1 wordpress
date: 2020-01-08 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cross-Site Request Forgery (CSRF) attacks, create open redirects, poison cache, and bypass authorization access and input sanitation.


cve_id: DSA-4613-1 libidn2
date: 2020-02-01 00:00:00+00:00
more_info:
A heap-based buffer overflow vulnerability was discovered in the idn2_to_ascii_4i() function in libidn2, the GNU library for Internationalized Domain Names (IDNs), which could result in denial of service, or the execution of arbitrary code when processing a long domain string.


cve_id: DSA-4636-1 python-bleach
date: 2020-02-28 00:00:00+00:00
more_info:
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when <q>noscript</q> and one or more raw text tags were whitelisted.


cve_id: DSA-4643-1 python-bleach
date: 2020-03-20 00:00:00+00:00
more_info:
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when strip=False and <q>math</q> or <q>svg</q> tags and one or more of the RCDATA tags were whitelisted.


cve_id: DSA-4652-1 gnutls28
date: 2020-04-04 00:00:00+00:00
more_info:
A flaw was reported in the DTLS protocol implementation in GnuTLS, a library implementing the TLS and SSL protocols. The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol.


cve_id: DSA-4679-1 keystone
date: 2020-05-06 00:00:00+00:00
more_info:
A vulnerability was found in the EC2 credentials API of Keystone, the OpenStack identity service: Any user authenticated within a limited scope (trust/oauth/application credential) could create an EC2 credential with an escalated permission, such as obtaining <q>admin</q> while the user is on a limited <q>viewer</q> role.


cve_id: DSA-4684-1 libreswan
date: 2020-05-13 00:00:00+00:00
more_info:
Stephan Zeisberg discovered that the libreswan IPsec implementation could be forced into a crash/restart via a malformed IKEv1 Informational Exchange packet, resulting in denial of service.


cve_id: DSA-4690-1 dovecot
date: 2020-05-20 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in the Dovecot email server, which could cause crashes in the submission, submission-login or lmtp services, resulting in denial of service.


cve_id: DSA-4696-1 nodejs
date: 2020-06-06 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in Node.js, which could result in denial of service and potentially the execution of arbitrary code.


cve_id: DSA-4697-1 gnutls28
date: 2020-06-06 00:00:00+00:00
more_info:
A flaw was reported in the TLS session ticket key construction in GnuTLS, a library implementing the TLS and SSL protocols. The flaw caused the TLS server to not securely construct a session ticket encryption key considering the application supplied secret, allowing a man-in-the-middle attacker to bypass authentication in TLS 1.3 and recover previous conversations in TLS 1.2.


cve_id: DSA-4709-1 wordpress
date: 2020-06-23 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) attacks, create open redirects, escalate privileges, and bypass authorization access.


cve_id: DSA-4710-1 trafficserver
date: 2020-06-27 00:00:00+00:00
more_info:
A vulnerability was discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service via malformed HTTP/2 headers.


cve_id: DSA-4716-1 docker.io
date: 2020-07-02 00:00:00+00:00
more_info:
Etienne Champetier discovered that Docker, a Linux container runtime, created network bridges which by default accept IPv6 router advertisements. This could allow an attacker with the CAP_NET_RAW capability in a container to spoof router advertisements, resulting in information disclosure or denial of service.


cve_id: DSA-4720-1 roundcube
date: 2020-07-08 00:00:00+00:00
more_info:
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize incoming mail messages. This would allow a remote attacker to perform a Cross-Side Scripting (XSS) attack.


cve_id: DSA-4728-1 qemu
date: 2020-07-19 00:00:00+00:00
more_info:
Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service.


cve_id: DSA-4730-1 ruby-sanitize
date: 2020-07-19 00:00:00+00:00
more_info:
Michal Bentkowski discovered that ruby-sanitize, a whitelist-based HTML sanitizer, is prone to a HTML sanitization bypass vulnerability when using the <q>relaxed</q> or a custom config allowing certain elements. Content in a &lt;math&gt; or &lt;svg&gt; element may not be sanitized correctly even if math and svg are not in the allowlist.


cve_id: DSA-4733-1 qemu
date: 2020-07-24 00:00:00+00:00
more_info:
It was discovered that incorrect memory handling in the SLIRP networking implementation could result in denial of service or potentially the execution of arbitrary code.


cve_id: DSA-4737-1 xrdp
date: 2020-07-29 00:00:00+00:00
more_info:
Ashley Newson discovered that the XRDP sessions manager was susceptible to denial of service. A local attacker can further take advantage of this flaw to impersonate the XRDP sessions manager and capture any user credentials that are submitted to XRDP, approve or reject arbitrary login credentials or to hijack existing sessions for xorgxrdp sessions.


cve_id: DSA-4743-1 ruby-kramdown
date: 2020-08-10 00:00:00+00:00
more_info:
A flaw was discovered in ruby-kramdown, a fast, pure ruby, Markdown parser and converter, which could result in unintended read access to files or unintended embedded Ruby code execution when the &#123;::options /&#125; extension is used together with the <q>template</q> option.


cve_id: DSA-4744-1 roundcube
date: 2020-08-12 00:00:00+00:00
more_info:
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, is prone to cross-site scripting vulnerabilities in handling invalid svg and math tag content.


cve_id: DSA-4746-1 net-snmp
date: 2020-08-15 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in net-snmp, a suite of Simple Network Management Protocol applications, which could lead to privilege escalation.


cve_id: DSA-4747-1 icingaweb2
date: 2020-08-23 00:00:00+00:00
more_info:
A directory traversal vulnerability was discovered in Icinga Web 2, a web interface for Icinga, which could result in the disclosure of files readable by the process.


cve_id: DSA-4750-1 nginx
date: 2020-08-26 00:00:00+00:00
more_info:
It was reported that the Lua module for Nginx, a high-performance web and reverse proxy server, is prone to a HTTP request smuggling vulnerability.


cve_id: DSA-4751-1 squid
date: 2020-08-27 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Squid, a fully featured web proxy cache, which could result in request splitting, request smuggling (leading to cache poisoning) and denial of service when processing crafted cache digest responses messages.


cve_id: DSA-4753-1 mupdf
date: 2020-08-29 00:00:00+00:00
more_info:
A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if a malformed PDF file is opened.


cve_id: DSA-4758-1 xorg-server
date: 2020-09-04 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in the X.Org X server. Missing input sanitising in X server extensions may result in local privilege escalation if the X server is configured to run with root privileges. In addition an ASLR bypass was fixed.


cve_id: DSA-4759-1 ark
date: 2020-09-04 00:00:00+00:00
more_info:
Fabian Vogt reported that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives with symlinks writing outside the extraction directory.


cve_id: DSA-4764-1 inspircd
date: 2020-09-18 00:00:00+00:00
more_info:
Two security issues were discovered in the pgsql and mysql modules of the InspIRCd IRC daemon, which could result in denial of service.


cve_id: DSA-4771-1 spice
date: 2020-10-11 00:00:00+00:00
more_info:
Frediano Ziglio discovered multiple buffer overflow vulnerabilities in the QUIC image decoding process of spice, a SPICE protocol client and server library, which could result in denial of service, or possibly, execution of arbitrary code.


cve_id: DSA-4774-1 linux
date: 2020-10-19 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service or information leaks.


cve_id: DSA-4775-1 python-flask-cors
date: 2020-10-19 00:00:00+00:00
more_info:
A directory traversal vulnerability was discovered in python-flask-cors, a Flask extension for handling Cross Origin Resource Sharing (CORS), allowing to access private resources.


cve_id: DSA-4777-1 freetype
date: 2020-10-21 00:00:00+00:00
more_info:
Sergei Glazunov discovered a heap-based buffer overflow vulnerability in the handling of embedded PNG bitmaps in FreeType. Opening malformed fonts may result in denial of service or the execution of arbitrary code.


cve_id: DSA-4783-1 sddm
date: 2020-11-05 00:00:00+00:00
more_info:
Fabian Vogt discovered a flaw in sddm, a modern display manager for X11. A local attacker can take advantage of a race condition when creating the Xauthority file to escalate privileges.


cve_id: DSA-4784-1 wordpress
date: 2020-11-06 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to run insecure deserialization, embed spam, perform various Cross-Site Scripting (XSS) or Cross-Site Request Forgery (CSRF) attacks, escalate privileges, run arbitrary code, and delete arbitrary files.


cve_id: DSA-4785-1 raptor2
date: 2020-11-07 00:00:00+00:00
more_info:
It was discovered that raptor2, an RDF parser library, is prone to heap-based buffer overflow flaws, which could result in denial of service, or potentially the execution of arbitrary code, if a specially crafted file is processed.


cve_id: DSA-4791-1 pacemaker
date: 2020-11-13 00:00:00+00:00
more_info:
Ken Gaillot discovered a vulnerability in the Pacemaker cluster resource manager: If ACLs were configured for users in the <q>haclient</q> group, the ACL restrictions could be bypassed via unrestricted IPC communication, resulting in cluster-wide arbitrary code execution with root privileges.


cve_id: DSA-4794-1 mupdf
date: 2020-11-21 00:00:00+00:00
more_info:
A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if malformed documents are opened.


cve_id: DSA-4799-1 x11vnc
date: 2020-11-28 00:00:00+00:00
more_info:
Guenal Davalan reported a flaw in x11vnc, a VNC server to allow remote access to an existing X session. x11vnc creates shared memory segments with 0777 mode. A local attacker can take advantage of this flaw for information disclosure, denial of service or interfering with the VNC session of another user on the host.


cve_id: DSA-4800-1 libproxy
date: 2020-11-28 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in libproxy, an automatic proxy configuration management library, which could result in denial of service, or possibly, execution of arbitrary code.


cve_id: DSA-4806-1 minidlna
date: 2020-12-07 00:00:00+00:00
more_info:
It was discovered that missing input validation in minidlna, a lightweight DLNA/UPnP-AV server could result in the execution of arbitrary code. In addition minidlna was susceptible to the <q>CallStranger</q> UPnP vulnerability.


cve_id: DSA-4814-1 xerces-c
date: 2020-12-17 00:00:00+00:00
more_info:
It was discovered that xerces-c, a validating XML parser library for C++, did not correctly scan DTDs. The use-after-free vulnerability resulting from this issue would allow a remote attacker to leverage a specially crafted XML file in order to crash the application or potentially execute arbitrary code. Please note that the patch fixing this issue comes at the expense of a newly introduced memory leak.


cve_id: DSA-4816-1 mediawiki
date: 2020-12-18 00:00:00+00:00
more_info:
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in cross-site scripting or the disclosure of hidden users.


cve_id: DSA-4817-1 php-pear
date: 2020-12-19 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the PEAR Archive_Tar package for handling tar files in PHP, potentially allowing a remote attacker to execute arbitrary code or overwrite files.


cve_id: DSA-4818-1 sympa
date: 2020-12-23 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Sympa, a mailing list manager, which could result in local privilege escalation, denial of service or unauthorized access via the SOAP API.


cve_id: DSA-4821-1 roundcube
date: 2020-12-28 00:00:00+00:00
more_info:
Alex Birnberg discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, is prone to a cross-site scripting vulnerability in handling HTML or Plain text messages with malicious content.


cve_id: DSA-4831-1 ruby-redcarpet
date: 2021-01-15 00:00:00+00:00
more_info:
Johan Smits discovered that ruby-redcarpet, a markdown parser, did not properly validate its input. This would allow an attacker to mount a cross-site scripting attack.


cve_id: DSA-4834-1 vlc
date: 2021-01-22 00:00:00+00:00
more_info:
Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed media file is opened.


cve_id: DSA-4836-1 openvswitch
date: 2021-01-22 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the LLPD implementation of Open vSwitch, a software-based Ethernet virtual switch, which could result in denial of service.


cve_id: DSA-4838-1 mutt
date: 2021-01-25 00:00:00+00:00
more_info:
Tavis Ormandy discovered a memory leak flaw in the rfc822 group recipient parsing in Mutt, a text-based mailreader supporting MIME, GPG, PGP and threading, which could result in denial of service.


cve_id: DSA-4850-1 libzstd
date: 2021-02-10 00:00:00+00:00
more_info:
It was discovered that zstd, a compression utility, temporarily exposed a world-readable version of its input even if the original file had restrictive permissions.


cve_id: DSA-4851-1 subversion
date: 2021-02-13 00:00:00+00:00
more_info:
Thomas Akesson discovered a remotely triggerable vulnerability in the mod_authz_svn module in Subversion, a version control system. When using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option an unauthenticated remote client can take advantage of this flaw to cause a denial of service by sending a request for a non-existing repository URL.


cve_id: DSA-4852-1 openvswitch
date: 2021-02-15 00:00:00+00:00
more_info:
Joakim Hindersson discovered that Open vSwitch, a software-based Ethernet virtual switch, allowed a malicious user to cause a denial-of-service by sending a specially crafted packet.


cve_id: DSA-4853-1 spip
date: 2021-02-16 00:00:00+00:00
more_info:
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to perform cross-site scripting attacks, access sensitive information, or execute arbitrary code.


cve_id: DSA-4855-1 openssl
date: 2021-02-17 00:00:00+00:00
more_info:
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. An overflow bug in the x64_64 Montgomery squaring procedure, an integer overflow in CipherUpdate and a NULL pointer dereference flaw X509_issuer_and_serial_hash() were found, which could result in denial of service.


cve_id: DSA-4857-1 bind9
date: 2021-02-18 00:00:00+00:00
more_info:
A buffer overflow vulnerability was discovered in the SPNEGO implementation affecting the GSSAPI security policy negotiation in BIND, a DNS server implementation, which could result in denial of service (daemon crash), or potentially the execution of arbitrary code.


cve_id: DSA-4859-1 libzstd
date: 2021-02-20 00:00:00+00:00
more_info:
It was discovered that zstd, a compression utility, was vulnerable to a race condition: it temporarily exposed, during a very short timeframe, a world-readable version of its input even if the original file had restrictive permissions.


cve_id: DSA-4861-1 screen
date: 2021-02-21 00:00:00+00:00
more_info:
Felix Weinmann reported a flaw in the handling of combining characters in screen, a terminal multiplexer with VT100/ANSI terminal emulation, which can result in denial of service, or potentially the execution of arbitrary code via a specially crafted UTF-8 character sequence.


cve_id: DSA-4872-1 shibboleth-sp
date: 2021-03-18 00:00:00+00:00
more_info:
Toni Huttunen discovered that the Shibboleth service provider's template engine used to render error pages could be abused for phishing attacks.


cve_id: DSA-4873-1 squid
date: 2021-03-23 00:00:00+00:00
more_info:
Jianjun Chen discovered that the Squid proxy caching server was susceptible to HTTP request smuggling.


cve_id: DSA-4878-1 pygments
date: 2021-03-27 00:00:00+00:00
more_info:
Ben Caller discovered that Pygments, a syntax highlighting package written in Python 3, used regular expressions which could result in denial of service.


cve_id: DSA-4879-1 spamassassin
date: 2021-03-27 00:00:00+00:00
more_info:
Damian Lukowski discovered a flaw in spamassassin, a Perl-based spam filter using text analysis. Malicious rule configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios.


cve_id: DSA-4880-1 lxml
date: 2021-03-29 00:00:00+00:00
more_info:
Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious user to mount a cross-site scripting attack.


cve_id: DSA-4883-1 underscore
date: 2021-04-01 00:00:00+00:00
more_info:
It was discovered that missing input sanitising in the template() function of the Underscore JavaScript library could result in the execution of arbitrary code.


cve_id: DSA-4884-1 ldb
date: 2021-04-02 00:00:00+00:00
more_info:
Multiple vulnerabilities have been discovered in ldb, a LDAP-like embedded database built on top of TDB.


cve_id: DSA-4887-1 lib3mf
date: 2021-04-08 00:00:00+00:00
more_info:
A use-after-free was discovered in Lib3MF, a C++ implementation of the 3D Manufacturing Format, which could result in the execution of arbitrary code if a malformed file is opened.


cve_id: DSA-4890-1 ruby-kramdown
date: 2021-04-12 00:00:00+00:00
more_info:
Stan Hu discovered that kramdown, a pure Ruby Markdown parser and converter, performed insufficient namespace validation of Rouge syntax highlighting formatters.


cve_id: DSA-4892-1 python-bleach
date: 2021-04-18 00:00:00+00:00
more_info:
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when <q>svg</q> or <q>math</q> are in the allowed tags, 'p' or <q>br</q> are in allowed tags, <q>style</q>, <q>title</q>, <q>noscript</q>, <q>script</q>, <q>textarea</q>, <q>noframes</q>, <q>iframe</q>, or <q>xmp</q> are in allowed tags and 'strip_comments=False' is set.


cve_id: DSA-4894-1 php-pear
date: 2021-04-20 00:00:00+00:00
more_info:
It was discovered that the PEAR Archive_Tar package for handling tar files in PHP is prone to a directory traversal flaw due to inadequate checking of symbolic links.


cve_id: DSA-4896-1 wordpress
date: 2021-04-22 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform XML External Entity (XXE) attacks, and access private content.


cve_id: DSA-4900-1 gst-plugins-good1.0
date: 2021-04-24 00:00:00+00:00
more_info:
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened.


cve_id: DSA-4905-1 shibboleth-sp
date: 2021-04-27 00:00:00+00:00
more_info:
It was discovered that the Shibboleth Service Provider is prone to a NULL pointer dereference flaw in the cookie-based session recovery feature. A remote, unauthenticated attacker can take advantage of this flaw to cause a denial of service (crash in the shibd daemon/service).


cve_id: DSA-4910-1 libimage-exiftool-perl
date: 2021-05-02 00:00:00+00:00
more_info:
A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed.


cve_id: DSA-4913-1 hivex
date: 2021-05-10 00:00:00+00:00
more_info:
Jeremy Galindo discovered an out-of-bounds memory access in Hivex, a library to parse Windows Registry hive files.


cve_id: DSA-4914-1 graphviz
date: 2021-05-12 00:00:00+00:00
more_info:
A buffer overflow was discovered in Graphviz, which could potentially result in the execution of arbitrary code when processing a malformed file.


cve_id: DSA-4918-1 ruby-rack-cors
date: 2021-05-18 00:00:00+00:00
more_info:
Improper pathname handling in ruby-rack-cors, a middleware that makes Rack-based apps CORS compatible, may result in access to private resources.


cve_id: DSA-4919-1 lz4
date: 2021-05-21 00:00:00+00:00
more_info:
Jasper Lievisse Adriaanse reported an integer overflow flaw in lz4, a fast LZ compression algorithm library, resulting in memory corruption.


cve_id: DSA-4920-1 libx11
date: 2021-05-24 00:00:00+00:00
more_info:
Roman Fiedler reported that missing length validation in various functions provided by libx11, the X11 client-side library, allow to inject X11 protocol commands on X clients, leading to authentication bypass, denial of service or potentially the execution of arbitrary code.


cve_id: DSA-4921-1 nginx
date: 2021-05-28 00:00:00+00:00
more_info:
Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denial of service and potentially the execution of arbitrary code.


cve_id: DSA-4929-1 rails
date: 2021-06-09 00:00:00+00:00
more_info:
Multiple security issues were discovered in the Rails web framework which could result in denial of service.


cve_id: DSA-4932-1 tor
date: 2021-06-18 00:00:00+00:00
more_info:
Multiple security vulnerabilities were discovered in Tor, a connection-based low-latency anonymous communication system, which could result in denial of service or spoofing.


cve_id: DSA-4933-1 nettle
date: 2021-06-18 00:00:00+00:00
more_info:
Multiple vulnerabilities were discovered in nettle, a low level cryptographic library, which could result in denial of service (remote crash in RSA decryption via specially crafted ciphertext, crash on ECDSA signature verification) or incorrect verification of ECDSA signatures.


cve_id: DSA-4936-1 libuv1
date: 2021-07-05 00:00:00+00:00
more_info:
An out-of-bounds read was discovered in the uv__idna_to_ascii() function of Libuv, an asynchronous event notification library, which could result in denial of service or information disclosure.


cve_id: DSA-4938-1 linuxptp
date: 2021-07-13 00:00:00+00:00
more_info:
Miroslav Lichvar reported that the ptp4l program in linuxptp, an implementation of the Precision Time Protocol (PTP), does not validate the messageLength field of incoming messages, allowing a remote attacker to cause a denial of service, information leak, or potentially remote code execution.


cve_id: DSA-4944-1 krb5
date: 2021-07-25 00:00:00+00:00
more_info:
It was discovered that the Key Distribution Center (KDC) in krb5, the MIT implementation of Kerberos, is prone to a NULL pointer dereference flaw. An unauthenticated attacker can take advantage of this flaw to cause a denial of service (KDC crash) by sending a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST.


cve_id: DSA-4947-1 libsndfile
date: 2021-07-30 00:00:00+00:00
more_info:
Andrea Fioraldi discovered a buffer overflow in libsndfile, a library for reading/writing audio files, which could result in denial of service or potentially the execution of arbitrary code when processing a malformed audio file.


cve_id: DSA-4948-1 aspell
date: 2021-08-01 00:00:00+00:00
more_info:
A buffer overflow was discovered in the Aspell spell checker, which could result in the execution of arbitrary code.


cve_id: DSA-4952-1 tomcat9
date: 2021-08-09 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling, bypass of logout restrictions or authentications using variations of a valid user name.


cve_id: DSA-4953-1 lynx
date: 2021-08-10 00:00:00+00:00
more_info:
Thorsten Glaser and Axel Beckert reported that lynx, a non-graphical (text-mode) web browser, does not properly handle the userinfo subcomponent of a URI, which can lead to leaking of credential in cleartext in SNI data.


cve_id: DSA-4954-1 c-ares
date: 2021-08-10 00:00:00+00:00
more_info:
Philipp Jeitner and Haya Shulman discovered a flaw in c-ares, a library that performs DNS requests and name resolution asynchronously. Missing input validation of hostnames returned by DNS servers can lead to output of wrong hostnames (leading to Domain Hijacking).


cve_id: DSA-4964-1 grilo
date: 2021-08-27 00:00:00+00:00
more_info:
Michael Catanzaro reported a problem in Grilo, a framework for discovering and browsing media. TLS certificate verification is not enabled on the SoupSessionAsync objects created by Grilo, leaving users vulnerable to network MITM attacks.


cve_id: DSA-4971-1 ntfs-3g
date: 2021-09-09 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege escalation.


cve_id: DSA-4974-1 nextcloud-desktop
date: 2021-09-19 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the Nextcloud desktop client, which could result in information disclosure.


cve_id: DSA-4983-1 neutron
date: 2021-10-10 00:00:00+00:00
more_info:
Pavel Toporkov discovered a vulnerability in Neutron, the OpenStack virtual network service, which allowed a reconfiguration of dnsmasq via crafted dhcp_extra_opts parameters.


cve_id: DSA-4987-1 squashfs-tools
date: 2021-10-15 00:00:00+00:00
more_info:
Richard Weinberger reported that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not check for duplicate filenames within a directory. An attacker can take advantage of this flaw for writing to arbitrary files to the filesystem if a malformed Squashfs image is processed.


cve_id: DSA-5005-1 ruby-kaminari
date: 2021-11-10 00:00:00+00:00
more_info:
A security vulnerability has been found in Kaminari, a pagination engine plugin for Rails 3+ and other modern frameworks, that would allow an attacker to inject arbitrary code into pages with pagination links.


cve_id: DSA-5010-1 libxml-security-java
date: 2021-11-15 00:00:00+00:00
more_info:
Apache Santuario - XML Security for Java is vulnerable to an issue where the <q>secureValidation</q> property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.


cve_id: DSA-5011-1 salt
date: 2021-11-19 00:00:00+00:00
more_info:
Multiple security vulnerabilities have been discovered in Salt, a powerful remote execution manager, that allow for local privilege escalation on a minion, server side template injection attacks, insufficient checks for eauth credentials, shell and command injections or incorrect validation of SSL certificates.


cve_id: DSA-5013-1 roundcube
date: 2021-11-27 00:00:00+00:00
more_info:
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize requests and mail messages. This would allow an attacker to perform Cross-Side Scripting (XSS) or SQL injection attacks.


cve_id: DSA-5018-1 python-babel
date: 2021-12-09 00:00:00+00:00
more_info:
It was discovered that missing input sanitising in Babel, a set of tools for internationalising Python applications, could result in the execution of arbitrary code.


cve_id: DSA-5020-1 apache-log4j2
date: 2021-12-11 00:00:00+00:00
more_info:
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From version 2.15.0, this behavior has been disabled by default.


cve_id: DSA-5024-1 apache-log4j2
date: 2021-12-18 00:00:00+00:00
more_info:
It was found that Apache Log4j2, a Logging Framework for Java, did not protect from uncontrolled recursion from self-referential lookups. When the logging configuration uses a non-default Pattern Layout with a Context Lookup (for example, $${ctx:loginId}), attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup, resulting in a denial of service.


cve_id: DSA-5028-1 spip
date: 2021-12-22 00:00:00+00:00
more_info:
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to perform cross-site scripting and SQL injection attacks, or execute arbitrary code.


cve_id: DSA-5032-1 djvulibre
date: 2021-12-28 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in djvulibre, a library and set of tools to handle documents in the DjVu format. An attacker could crash document viewers and possibly execute arbitrary code through crafted DjVu files.


cve_id: DSA-5037-1 roundcube
date: 2022-01-08 00:00:00+00:00
more_info:
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attacker to perform Cross-Site Scripting (XSS) attacks.


cve_id: DSA-5039-1 wordpress
date: 2022-01-11 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, bypass hardening, or perform Cross-Site Scripting (XSS) attacks.


cve_id: DSA-5043-1 lxml
date: 2022-01-12 00:00:00+00:00
more_info:
It was discovered that lxml, a Python binding for the libxml2 and libxslt libraries, does not properly sanitize its input, which could lead to cross-site scripting.


cve_id: DSA-5071-1 samba
date: 2022-02-11 00:00:00+00:00
more_info:
Several vulnerabilities were discovered in Samba, a SMB/CIFS file, print, and login server for Unix.


cve_id: DSA-5073-1 expat
date: 2022-02-12 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitrary code, if a malformed XML file is processed.


cve_id: DSA-5075-1 minetest
date: 2022-02-14 00:00:00+00:00
more_info:
Several vulnerabilities have been discovered in Minetest, a sandbox video game and game creation system. These issues may allow attackers to manipulate game mods and grant them an unfair advantage over other players. These flaws could also be abused for a denial of service attack against a Minetest server or if user input is passed directly to minetest.deserialize without serializing it first, then a malicious user could run Lua code in the server environment.


cve_id: DSA-5076-1 h2database
date: 2022-02-15 00:00:00+00:00
more_info:
Security researchers of JFrog Security and Ismail Aydemir discovered two remote code execution vulnerabilities in the H2 Java SQL database engine which can be exploited through various attack vectors, most notably through the H2 Console and by loading custom classes from remote servers through JNDI. The H2 console is a developer tool and not required by any reverse-dependency in Debian. It has been disabled in (old)stable releases. Database developers are advised to use at least version 2.1.210-1, currently available in Debian unstable.


cve_id: DSA-5077-1 librecad
date: 2022-02-15 00:00:00+00:00
more_info:
Multiple security issues were discovered in LibreCAD, an application for computer aided design (CAD) which could result in denial of service or the execution of arbitrary code if a malformed CAD file is opened.


cve_id: DSA-5081-1 redis
date: 2022-02-18 00:00:00+00:00
more_info:
Reginaldo Silva discovered a (Debian-specific) Lua sandbox escape in Redis, a persistent key-value database.


cve_id: DSA-5093-1 spip
date: 2022-03-08 00:00:00+00:00
more_info:
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to execute arbitrary code.


cve_id: DSA-5100-1 nbd
date: 2022-03-12 00:00:00+00:00
more_info:
Two vulnerabilities were discovered in the server for the Network Block Device (NBD), which could result in the execution of arbitrary code.


cve_id: DSA-5101-1 libphp-adodb
date: 2022-03-13 00:00:00+00:00
more_info:
Emmet Leahy reported that libphp-adodb, a PHP database abstraction layer library, allows to inject values into a PostgreSQL connection string. Depending on how the library is used this flaw can result in authentication bypass, reveal a server IP address or have other unspecified impact.


cve_id: DSA-5103-1 openssl
date: 2022-03-15 00:00:00+00:00
more_info:
Tavis Ormandy discovered that the BN_mod_sqrt() function of OpenSSL could be tricked into an infinite loop. This could result in denial of service via malformed certificates.


cve_id: DSA-5111-1 zlib
date: 2022-04-01 00:00:00+00:00
more_info:
Danilo Ramos discovered that incorrect memory handling in zlib's deflate handling could result in denial of service or potentially the execution of arbitrary code if specially crafted input is processed.


cve_id: DSA-5122-1 gzip
date: 2022-04-18 00:00:00+00:00
more_info:
cleemy desu wayo reported that incorrect handling of filenames by zgrep in gzip, the GNU compression utilities, can result in overwrite of arbitrary files or execution of arbitrary code if a file with a specially crafted filename is processed.


cve_id: DSA-5123-1 xz-utils
date: 2022-04-18 00:00:00+00:00
more_info:
cleemy desu wayo reported that incorrect handling of filenames by xzgrep in xz-utils, the XZ-format compression utilities, can result in overwrite of arbitrary files or execution of arbitrary code if a file with a specially crafted filename is processed.


cve_id: DSA-5138-1 waitress
date: 2022-05-17 00:00:00+00:00
more_info:
It was discovered that the Waitress WSGI server was susceptible to HTTP request smuggling in some scenarios when used behind a proxy.


cve_id: DSA-5142-1 libxml2
date: 2022-05-22 00:00:00+00:00
more_info:
Felix Wilhelm reported that several buffer handling functions in libxml2, a library providing support to read, modify and write XML and HTML files, don't check for integer overflows, resulting in out-of-bounds memory writes if specially crafted, multi-gigabyte XML files are processed. An attacker can take advantage of this flaw for denial of service or execution of arbitrary code.


cve_id: DSA-5144-1 condor
date: 2022-05-22 00:00:00+00:00
more_info:
Several flaws have been discovered in HTCondor, a distributed workload management system, which allow users with only READ access to any daemon to use a different authentication method than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user and submit or remove jobs.


cve_id: DSA-5150-1 rsyslog
date: 2022-05-28 00:00:00+00:00
more_info:
Peter Agten discovered that several modules for TCP syslog reception in rsyslog, a system and kernel logging daemon, have buffer overflow flaws when octet-counted framing is used, which could result in denial of service or potentially the execution of arbitrary code.


cve_id: DSA-5151-1 smarty3
date: 2022-05-29 00:00:00+00:00
more_info:
Several security vulnerabilities have been discovered in smarty3, the compiling PHP template engine. Template authors are able to run restricted static php methods or even arbitrary PHP code by crafting a malicious math string or by choosing an invalid {block} or {include} file name. If a math string was passed through as user provided data to the math function, remote users were able to run arbitrary PHP code as well.


cve_id: DSA-5152-1 spip
date: 2022-05-30 00:00:00+00:00
more_info:
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to perform cross-site scripting attacks.


cve_id: DSA-5157-1 cifs-utils
date: 2022-06-03 00:00:00+00:00
more_info:
Jeffrey Bencteux reported two vulnerabilities in cifs-utils, the Common Internet File System utilities, which can result in escalation of privileges (<a href="https://security-tracker.debian.org/tracker/CVE-2022-27239">CVE-2022-27239</a>) or an information leak (<a href="https://security-tracker.debian.org/tracker/CVE-2022-29869">CVE-2022-29869</a>).


cve_id: DSA-5164-1 exo
date: 2022-06-18 00:00:00+00:00
more_info:
It was discovered that exo, a support library for the Xfce desktop environment, would allow executing remote .desktop files. In some scenario, an attacker could use this vulnerability to trick an user an execute arbitrary code on the platform with the privileges of that user.


cve_id: DSA-5165-1 vlc
date: 2022-06-20 00:00:00+00:00
more_info:
Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file is opened.


cve_id: DSA-5167-1 firejail
date: 2022-06-22 00:00:00+00:00
more_info:
Matthias Gerstner discovered that the --join option of Firejail, a sandbox to restrict an application environment, was susceptible to local privilege escalation to root.


cve_id: DSA-5174-1 gnupg2
date: 2022-07-03 00:00:00+00:00
more_info:
Demi Marie Obenour discovered a flaw in GnuPG, allowing for signature spoofing via arbitrary injection into the status line. An attacker who controls the secret part of any signing-capable key or subkey in the victim's keyring, can take advantage of this flaw to provide a correctly-formed signature that some software, including gpgme, will accept to have validity and signer fingerprint chosen from the attacker.


cve_id: DSA-5178-1 intel-microcode
date: 2022-07-06 00:00:00+00:00
more_info:
This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities.


cve_id: DSA-5190-1 spip
date: 2022-07-26 00:00:00+00:00
more_info:
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to execute arbitrary code or escalate privileges.


cve_id: DSA-5196-1 libpgjava
date: 2022-07-31 00:00:00+00:00
more_info:
Several security vulnerabilities have been found in libpgjava, the official PostgreSQL JDBC Driver.


