Debian Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Debian Linux57
Debian dpkg11
Debian apt9
Debian APT4
Debian Lintian3

Przeciwdziałanie

Official Fix120
Temporary Fix0
Workaround2
Unavailable7
Not Defined39

Wykorzystywanie

High10
Functional0
Proof-of-Concept20
Unproven10
Not Defined128

Wektor dostępu

Not Defined0
Physical0
Local87
Adjacent2
Network79

Uwierzytelnianie

Not Defined0
High1
Low14
None153

Interakcja z użytkownikiem

Not Defined0
Required7
None161

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤427
≤58
≤648
≤710
≤830
≤932
≤1012

CVSSv3 Temp

≤10
≤20
≤32
≤426
≤520
≤639
≤726
≤832
≤917
≤106

VulDB

≤10
≤20
≤32
≤426
≤59
≤648
≤710
≤831
≤930
≤1012

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤71
≤82
≤91
≤103

CNA

≤10
≤20
≤30
≤40
≤52
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k1
<5k8
<10k26
<25k110
<50k22
<100k1
≥100k0

Wykorzystaj dzisiaj

<1k134
<2k5
<5k19
<10k7
<25k3
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (82): APT (4), Apt (1), Citadel Server (1), Duck (1), Edu (1), Elvis Tiny (1), HTTP Server (1), Hivex (1), Honeyd Common (1), Horde (1), Lintian (3), Linux (58), MySQL (1), OpenLDAP (1), Phpbb3 (1), TrouSerS (1), Xscreensaver (1), adequate (1), android-tools (1), apache2 (1), apt (9), apt-cacher (2), apt-listchanges (1), apt-setup (1), aptlinex (2), axiom (1), bmtpd (1), bsdmainutils (1), cfingerd (1), cifs-utils (1), debconf (1), debian-goodies (2), debmake (1), devotee (1), devscripts (1), dpkg (11), dpkg-cross (1), dpkg-dev (1), feta (1), ftpsync (1), fuse Package (1), gfax (1), guilt (1), initramfs-tools (1), installer (1), kernel-patch-vserver (1), latd (1), libdbd-pg-perl (1), localepurge (1), logol (1), loop-aes-utils (1), ltp (1), mailscanner (1), mime-support (1), mono-debugger (1), myspell (1), netkit (1), newsgate (1), nfs-utils (1), nss-ldap (1), openjdk-7 (1), os-prober (1), postgresql-common (1), ppthtml (1), ppxp (1), projectl (1), python-dns (2), python-rdflib-tools (1), reportbug (1), reprepro (1), shadow (2), syncevolution (1), tetex-bin (1), tex-common (1), texlive-extra-utils (1), tmpreaper (1), tss (1), txt2man (1), unp (1), xbuffy (1), xsabre (2), xscreensaver-command (1)

Link to Vendor Website: https://www.debian.org/

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-01-053.83.7Debian Linux directory traversalOperating SystemNot DefinedOfficial Fix0.000450.03CVE-2023-7207
2023-04-075.15.1Ubuntu/Debian Linux aufs vfsub_dentry_open denial of serviceOperating SystemNot DefinedOfficial Fix0.000420.03CVE-2020-11935
2023-03-066.06.0Debian debian-goodies debmany privilege escalationNieznanyNot DefinedNot Defined0.000540.00CVE-2023-27635
2022-05-265.04.8Debian dpkg Archive directory traversalNieznanyNot DefinedOfficial Fix0.008580.01CVE-2022-1664
2022-02-205.55.3Debian Duck Privilege EscalationNieznanyNot DefinedOfficial Fix0.002340.00CVE-2016-1239
2022-02-125.55.3Debian Edu Debian-edu-config public_html privilege escalationNieznanyNot DefinedOfficial Fix0.001750.00CVE-2021-20001
2021-04-226.36.3Debian Xscreensaver Mesa 3D Graphics Library sonar Privilege EscalationNieznanyNot DefinedNot Defined0.000420.00CVE-2021-31523
2019-02-098.58.5Debian python-rdflib-tools CLI Tool privilege escalationProgramming Language SoftwareNot DefinedNot Defined0.004420.00CVE-2019-7653
2019-02-046.16.0Debian tmpreaper rename race conditionNieznanyNot DefinedOfficial Fix0.000420.00CVE-2019-3461
2019-01-288.17.9Debian apt 302 Redirect privilege escalationNieznanyNot DefinedOfficial Fix0.025750.03CVE-2019-3462
2018-07-018.58.4Debian devscripts grep-excuses.pl Syck privilege escalationNieznanyNot DefinedOfficial Fix0.002410.00CVE-2018-13043
2017-11-134.94.8Debian postgresql-common Symbolic Link privilege escalationDatabase SoftwareNot DefinedOfficial Fix0.000420.08CVE-2017-8806
2017-10-177.87.6Debian ftpsync Option directory traversalNieznanyNot DefinedOfficial Fix0.002820.00CVE-2017-8805
2016-01-267.87.5Debian fuse Package cuse privilege escalationNieznanyNot DefinedOfficial Fix0.000420.00CVE-2016-1233
2015-12-037.37.0Debian dpkg dpkg-deb extract.c extracthalf Remote Code ExecutionNieznanyNot DefinedOfficial Fix0.143920.02CVE-2015-0860
2015-12-037.37.0Debian Linux smokeping smokeping_cgi Remote Code ExecutionOperating SystemNot DefinedOfficial Fix0.008630.00CVE-2015-0859
2015-11-093.73.6Debian openjdk-7 .desktop privilege escalationNieznanyNot DefinedOfficial Fix0.009190.03CVE-2014-8873
2015-04-136.56.2Debian dpkg Signature Check privilege escalationNieznanyNot DefinedOfficial Fix0.003160.00CVE-2015-0840
2015-04-015.45.4Debian OpenLDAP slapd Configuration privilege escalationDirectory Service SoftwareNot DefinedNot Defined0.001760.00CVE-2014-9713
2014-12-317.36.4Debian mime-support privilege escalationNieznanyUnprovenOfficial Fix0.011150.00CVE-2014-7209
2014-12-085.95.7Debian Hivex Privileges handle.c memory corruptionNieznanyNot DefinedOfficial Fix0.000420.00CVE-2014-9273
2014-11-067.36.4Debian dpkg warningv Format StringNieznanyUnprovenUnavailable0.090410.00CVE-2014-8625
2014-10-155.14.9Debian Apt privilege escalationNieznanyNot DefinedOfficial Fix0.000420.02CVE-2014-7206
2014-10-064.34.3Debian apt-cacher job.cc cross site request forgeryNieznanyNot DefinedNot Defined0.006650.00CVE-2014-4510
2014-09-237.36.4Debian apt HTTP Transport Code memory corruptionNieznanyUnprovenOfficial Fix0.004980.00CVE-2014-6273

143 więcej wpisów nie jest pokazywanych

Do you want to use VulDB in your project?

Use the official API to access entries easily!