Debian Security Vulnerabilities (CVEs)

A buffer overflow vulnerability in MUNGE authentication daemon (munged) versions 0.5 to 0.5.17 allows local attackers to leak cryptographic key materi...

This vulnerability in Fast DDS allows remote attackers to cause a denial of service by triggering an out-of-memory condition through specially crafted...

This vulnerability in Fast DDS allows remote attackers to cause denial-of-service by sending specially crafted SPDP packets with manipulated DATA Subm...

Fast DDS versions prior to 3.4.1, 3.3.1, and 2.6.11 contain a vulnerability where malicious ParticipantGenericMessage packets can trigger excessive me...

This vulnerability in Fast DDS allows remote attackers to cause a denial-of-service (DoS) by sending specially crafted SPDP packets with modified DATA...

This vulnerability in Fast DDS allows remote attackers to cause a denial of service by triggering an out-of-memory condition. When security mode is en...

This vulnerability in tcpflow's wifipcap component allows a 1-byte out-of-bounds write when parsing specially crafted 802.11 management frames with la...

This CVE describes a remote code execution vulnerability in PHPUnit's PHPT test execution when code coverage instrumentation is enabled. Attackers wit...

A NULL pointer dereference vulnerability in python-apt's TagSection.keys() function allows local attackers to crash processes by providing malformed d...

CVE-2025-63498 is a cross-site scripting (XSS) vulnerability in alinto SOGo 5.12.3 that allows attackers to inject malicious scripts via the 'userName...

CVE-2025-64512 is a remote code execution vulnerability in pdfminer.six where malicious PDF files can trigger deserialization of arbitrary pickle file...

This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious XWD image files in GIMP. The heap-based ...

A heap-based buffer overflow vulnerability in GIMP's HDR file parser allows remote attackers to execute arbitrary code when users open malicious HDR f...

A NULL pointer dereference vulnerability in the Linux kernel's PCMCIA subsystem could allow local attackers to cause a kernel panic or potentially exe...

A Linux kernel vulnerability in the Qualcomm BAM DMA driver allows early boot crashes when device tree configurations are missing required properties....

A Linux kernel vulnerability in the i40e network driver causes incorrect IRQ cleanup during error handling, leading to kernel warnings and potential s...

A memory management vulnerability in the Linux kernel's TCP BPF subsystem where failure to allocate memory for corked data doesn't properly clean up s...

This is a double-free vulnerability in the Linux kernel's tracing subsystem where fault injection during memory allocation can cause the same tracepoi...

A divide-by-zero vulnerability in the Linux kernel's DAMON_RECLAIM subsystem can cause kernel crashes when creating new memory reclamation schemes. Th...

A DMA mapping vulnerability in the Linux kernel's STM32 FMC2 NAND controller driver causes overlapping memory mappings when handling ECC buffers, trig...

A divide-by-zero vulnerability in the Linux kernel's DAMON LRU_SORT module allows local attackers to trigger a kernel panic by setting certain paramet...

A NULL pointer dereference vulnerability in the Linux kernel's SLUB memory allocator can cause kernel crashes when debugging code attempts to access i...

This CVE describes an information leak vulnerability in the Linux kernel's mwifiex WiFi driver. Uninitialized memory in the chan_stats array could all...

A race condition vulnerability in the Linux kernel's netfilter bridge module (br_netfilter) can cause kernel warnings and potential denial-of-service ...

This CVE describes a local privilege escalation vulnerability in VMware Aria Operations and VMware Tools. A malicious local user with non-administrati...

This CVE describes a recursive semaphore deadlock vulnerability in the OCFS2 filesystem implementation in the Linux kernel. When performing a FIEMAP i...

A NULL pointer dereference vulnerability in the Linux kernel's FEC (Fast Ethernet Controller) driver could cause kernel panic and system crashes when ...

A use-after-free vulnerability in the Linux kernel's DAMON sysfs interface allows race conditions where freed memory is accessed. This can lead to ker...

A type confusion vulnerability in the Linux kernel's libceph component allows reading/writing to incorrect memory locations when using the msgr2 proto...

This CVE describes a double-free vulnerability in the Linux kernel's dmaengine idxd driver. The bug occurs during error handling in the idxd_setup_wqs...

This is a use-after-free vulnerability in the Linux kernel's Xilinx CAN driver that occurs when transmitting network packets. It allows attackers with...

A NULL pointer dereference vulnerability in the Linux kernel's TEE (Trusted Execution Environment) subsystem allows local attackers to cause a kernel ...

A use-after-free vulnerability in the Linux kernel's __mark_inode_dirty() function allows attackers to potentially crash the system or execute arbitra...

This CVE describes a memory access vulnerability in the Linux kernel's i40e network driver. When the MAC address list is empty, the driver uses list_f...

A NULL pointer dereference vulnerability in the Linux kernel's SMC (Shared Memory Communications) module allows local attackers to cause a kernel pani...

A Linux kernel memory management vulnerability causes kernel panics during boot when systems with 4-level paging and large persistent memory initializ...

A memory management vulnerability in the Linux kernel causes intermittent boot failures and crashes on systems with 4-level paging and large persisten...

This CVE describes a NULL pointer dereference vulnerability in the Linux kernel's PCMCIA subsystem. If exploited, it could cause a kernel panic or sys...

This CVE describes a memory leak vulnerability in the Linux kernel's PPP (Point-to-Point Protocol) implementation. When the pad_compress_skb() functio...

A memory corruption vulnerability in the Linux kernel's AX.25 protocol implementation allows attackers to cause kernel crashes or potentially execute ...

This CVE describes a memory corruption vulnerability in the Linux kernel's WiFi subsystem where SSID length validation is missing in the __cfg80211_co...

This vulnerability in the Linux kernel's batman-adv network coding module allows out-of-bounds memory read/write operations. Attackers could potential...

This CVE describes a use-after-free vulnerability in the Linux kernel's lpfc SCSI driver. An attacker could exploit this to cause a kernel panic (deni...

A Linux kernel XFS filesystem vulnerability where disk medium errors returning ENODATA are incorrectly interpreted as 'attribute not found' by xattr c...

This CVE-2025-39828 is a Linux kernel vulnerability in the ATM subsystem that allows arbitrary kernel memory writes via specially crafted sendmsg() ca...

This CVE describes a use-after-free vulnerability in the Linux kernel's ROSE networking protocol implementation. The vulnerability occurs due to non-a...