Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Debian_linux
(Debian)| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2019-08-29 | CVE-2019-14534 | In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack. | Debian_linux, Vlc_media_player | 5.5 | ||
| 2019-08-29 | CVE-2019-14533 | The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | Debian_linux, Vlc_media_player | 7.8 | ||
| 2019-08-29 | CVE-2019-14498 | A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file. | Debian_linux, Vlc_media_player | 7.8 | ||
| 2019-08-29 | CVE-2019-14438 | A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file. | Debian_linux, Vlc_media_player | 7.8 | ||
| 2019-08-29 | CVE-2019-14437 | The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file. | Debian_linux, Vlc_media_player | 7.8 | ||
| 2017-07-13 | CVE-2017-11103 | Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE... | Iphone_os, Mac_os_x, Debian_linux, Freebsd, Heimdal, Samba | N/A | ||
| 2019-11-05 | CVE-2016-1000002 | gdm3 3.14.2 and possibly later has an information leak before screen lock | Debian_linux, Gnome_display_manager, Leap, Enterprise_linux | N/A | ||
| 2019-11-05 | CVE-2013-6461 | Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits | Debian_linux, Nokogiri, Cloudforms_management_engine, Enterprise_mrg, Openstack, Satellite, Subscription_asset_manager | N/A | ||
| 2019-11-05 | CVE-2013-6365 | Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions | Debian_linux, Groupware, Opensuse | N/A | ||
| 2019-11-01 | CVE-2013-4168 | Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields. | Debian_linux, Fedora, Smokeping | N/A |