Browse CVEs

HIGH 7.8 CVE-2026-25506 MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vul… Debian Linux 0.5.18+ Fix from $1,9502026-02-10 CRITICAL 9.8 CVE-2015-0843 yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf. Yubiserver Mitigation only Fix from $2,3002025-06-26 MEDIUM 5.6 CVE-2013-1424 Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787. Matplotlib 1.4.2-3.1+ Fix from $1,6002025-06-26 MEDIUM 6.5 CVE-2025-25474 DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h. Debian Linux Patch available Fix from $1,6002025-02-18 MEDIUM 5.3 CVE-2025-25472 A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file. Debian Linux Patch available Fix from $1,6002025-02-18 CRITICAL 9.8 CVE-2024-52533 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient f… Debian Linux 2.82.1+ Fix from $2,3002024-11-11 HIGH 7.8 CVE-2024-46952 An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (rel… Debian Linux 10.04.0+ Fix from $1,9502024-11-10 HIGH 7.8 CVE-2024-49996 In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points ReparseDataLength is … Debian Linux 5.4.287 / 5.10.231+ Fix from $1,9502024-10-21 CRITICAL 9.8 CVE-2023-41361 An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version. Debian Linux after 9.0 Fix from $2,3002023-08-29 MEDIUM 6.5 CVE-2020-35357 A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. P… Debian Linux Patch available Fix from $1,6002023-08-22 MEDIUM 6.5 CVE-2023-3618 A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in li… Debian Linux 4.5.1+ Fix from $1,6002023-07-12 CRITICAL 9.8 CVE-2022-23480 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.8 CVE-2022-23479 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.8 CVE-2022-23468 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.8 CVE-2022-23477 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 HIGH 7.8 CVE-2022-39377 sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, all… Debian Linux 12.6.1+ Fix from $1,9502022-11-08 HIGH 7.8 CVE-2022-40284 A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploi… Debian Linux 2022.10.3+ Fix from $1,9502022-11-06 HIGH 7.8 CVE-2021-34055 jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u. Debian Linux Patch available Fix from $1,9502022-11-04 HIGH 8.8 CVE-2022-3550 A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xk… Debian Linux 21.1.6+ Fix from $1,9502022-10-17 MEDIUM 5.5 CVE-2021-4214 A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG… Debian Linux No fix yet Fix from $1,6002022-08-24 CRITICAL 9.8 CVE-2022-31031 PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, S… Debian Linux after 2.12.1 Fix from $2,3002022-06-09 HIGH 7.8 CVE-2022-30784 A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22. Debian Linux after 2021.8.22 Fix from $1,9502022-05-26 HIGH 7.8 CVE-2022-28463 ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow. Debian Linux 6.9.12-44 / 7.1.0-29+ Fix from $1,9502022-05-08 MEDIUM 5.3 CVE-2022-1328 Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line Debian Linux 2.2.3+ Fix from $1,6002022-04-14 HIGH 7.5 CVE-2022-24793 PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects app… Debian Linux after 2.12 Fix from $1,9502022-04-06 HIGH 7.5 CVE-2022-24764 PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability … Debian Linux after 2.12 Fix from $1,9502022-03-22 CRITICAL 9.8 CVE-2022-24754 PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stac… Debian Linux after 2.12 Fix from $2,3002022-03-11 HIGH 7.5 CVE-2022-21716 Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is ab… Debian Linux 22.2.0+ Fix from $1,9502022-03-03 CRITICAL 9.8 CVE-2021-43303 Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an o… Debian Linux after 2.11.1 Fix from $2,3002022-02-16 CRITICAL 9.8 CVE-2021-38172 perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.) Perm Patch available Fix from $2,3002022-02-05