Vulnerabilities > Debian > Low

DATE CVE VULNERABILITY TITLE RISK
2017-09-01 CVE-2017-13672 Out-of-bounds Read vulnerability in multiple products
QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.
local
low complexity
qemu debian CWE-125
2.1
2017-08-24 CVE-2015-5146 Improper Input Validation vulnerability in multiple products
ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet.
3.5
2017-08-23 CVE-2017-12809 NULL Pointer Dereference vulnerability in multiple products
QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive.
local
low complexity
qemu debian CWE-476
2.1
2017-08-08 CVE-2017-3653 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). 3.5
2017-08-08 CVE-2017-3635 Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/C).
network
oracle debian
3.5
2017-08-08 CVE-2017-10193 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).
network
high complexity
oracle debian netapp redhat
3.1
2017-08-02 CVE-2017-11334 Out-of-bounds Read vulnerability in multiple products
The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
local
low complexity
qemu debian CWE-125
2.1
2017-08-02 CVE-2017-10806 Out-of-bounds Write vulnerability in multiple products
Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.
local
low complexity
qemu debian CWE-787
2.1
2017-07-25 CVE-2017-11434 Out-of-bounds Read vulnerability in multiple products
The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.
local
low complexity
qemu debian CWE-125
2.1
2017-06-25 CVE-2017-9868 Information Exposure vulnerability in multiple products
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
local
low complexity
eclipse debian CWE-200
2.1