Vulnerabilities > Debian > Debian Linux

DATE CVE VULNERABILITY TITLE RISK
2021-09-20 CVE-2021-32276 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in faad2 through 2.10.0.
local
low complexity
faad2-project debian CWE-476
5.5
2021-09-20 CVE-2021-32277 Out-of-bounds Write vulnerability in multiple products
An issue was discovered in faad2 through 2.10.0.
local
low complexity
faad2-project debian CWE-787
7.8
2021-09-20 CVE-2021-32278 Out-of-bounds Write vulnerability in multiple products
An issue was discovered in faad2 through 2.10.0.
local
low complexity
faad2-project debian CWE-787
7.8
2021-09-20 CVE-2021-32280 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in fig2dev before 3.2.8..
local
low complexity
xfig-project debian CWE-476
5.5
2021-09-20 CVE-2020-21913 Use After Free vulnerability in multiple products
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
local
low complexity
unicode debian CWE-416
5.5
2021-09-20 CVE-2021-38300 arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context.
local
low complexity
linux netapp debian
7.8
2021-09-19 CVE-2021-40690 All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element.
network
low complexity
apache debian oracle
7.5
2021-09-19 CVE-2021-41073 Release of Invalid Pointer or Reference vulnerability in multiple products
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation.
local
low complexity
linux debian fedoraproject netapp CWE-763
7.8
2021-09-17 CVE-2021-3803 nth-check is vulnerable to Inefficient Regular Expression Complexity
network
low complexity
nth-check-project debian
7.5
2021-09-17 CVE-2021-3805 object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
network
low complexity
object-path-project debian
7.5