Vulnerabilities > Debian > Debian Linux

DATE CVE VULNERABILITY TITLE RISK
2022-10-17 CVE-2022-41751 OS Command Injection vulnerability in multiple products
Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option.
local
low complexity
jhead-project fedoraproject debian CWE-78
7.8
2022-10-17 CVE-2022-3550 A vulnerability classified as critical was found in X.org Server.
network
low complexity
x-org debian fedoraproject
8.8
2022-10-17 CVE-2022-3551 A vulnerability, which was classified as problematic, has been found in X.org Server.
network
low complexity
x-org debian fedoraproject
6.5
2022-10-17 CVE-2022-3545 A vulnerability has been found in Linux Kernel and classified as critical.
local
low complexity
linux netapp debian
7.8
2022-10-16 CVE-2022-3521 A vulnerability has been found in Linux Kernel and classified as problematic.
local
high complexity
linux debian
2.5
2022-10-16 CVE-2022-3524 A vulnerability was found in Linux Kernel.
local
low complexity
linux debian
5.5
2022-10-14 CVE-2022-2850 NULL Pointer Dereference vulnerability in multiple products
A flaw was found In 389-ds-base.
network
low complexity
redhat fedoraproject port389 debian CWE-476
6.5
2022-10-14 CVE-2022-41674 Out-of-bounds Write vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.19.16.
8.1
2022-10-14 CVE-2022-42720 Use After Free vulnerability in multiple products
Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.
local
low complexity
linux fedoraproject debian CWE-416
7.8
2022-10-14 CVE-2022-42721 Infinite Loop vulnerability in multiple products
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.
local
low complexity
linux fedoraproject debian CWE-835
5.5