TheHive-Project / TheHive-Project/Cortex
Cortex 3.0.1 docker image vulnerabilities
Open
@To-om is already working on this.
Since Oct 11, 2020.
- Dominant language
- Scala
- Stars
- 1.6k
- Forks
- 264
- PR merge metrics
- No merged PRs in 30d
Description
Please update packages
Request Type
Update
Work Environment
| Question | Answer |
|---|---|
| OS version (server) | Ubuntu |
| OS version (client) | Ubuntu |
| Cortex version / git hash | 3.0.1 |
| Package Type | Docker/Kubernetes |
thehiveproject/cortex:3.0.1
DIGEST:sha256:ed1de827eb05687b730d2420b14e8e6e941e7f6d4a15051b4ab6ab2baf00380f
Problem Description
The following need to be updated
| issue.title | issue.package | issue.version | issue.severity | issue.identifiers.CVE | issue.identifiers.CWE | issue.CVSSv3 | issue.cvssScore |
|---|---|---|---|---|---|---|---|
| Access Restriction Bypass | expat/libexpat1 | 2.2.0-2+deb9u3 | low | ["CVE-2013-0340"] | ["CWE-264"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L | 6.3 |
| Access Restriction Bypass | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2019-1010023"] | [] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Access Restriction Bypass | openldap/libldap-2.4-2 | 2.4.44+dfsg-5+deb9u3 | low | ["CVE-2017-14159"] | ["CWE-264"] | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H | 4.7 |
| Access Restriction Bypass | openssh/openssh-client | 1:7.4p1-10+deb9u7 | low | ["CVE-2008-3234"] | ["CWE-264"] | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | 6.3 |
| Access Restriction Bypass | shadow/login | 1:4.4-4.1 | low | ["CVE-2007-5686"] | ["CWE-264"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 6.2 |
| Access Restriction Bypass | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2018-6954"] | ["CWE-264"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |
| Access Restriction Bypass | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2018-16888"] | ["CWE-264"] | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H | 4.7 |
| Access Restriction Bypass | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2013-4392"] | ["CWE-264"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N | 4.4 |
| Access Restriction Bypass | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2017-18078"] | ["CWE-264"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |
| Access Restriction Bypass | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2019-3843"] | ["CWE-264"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |
| Access Restriction Bypass | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2019-3844"] | ["CWE-264"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |
| Access Restriction Bypass | util-linux | 1:2.29.2-1+deb9u1 | high | ["CVE-2016-2779"] | ["CWE-264"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |
| Allocation of Resources Without Limits or Throttling | binutils | 2.28-5 | low | ["CVE-2019-9073"] | ["CWE-770"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Allocation of Resources Without Limits or Throttling | binutils | 2.28-5 | low | ["CVE-2019-9072"] | ["CWE-770"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Allocation of Resources Without Limits or Throttling | binutils | 2.28-5 | low | ["CVE-2019-9076"] | ["CWE-770"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Allocation of Resources Without Limits or Throttling | elfutils/libelf1 | 0.168-1 | low | ["CVE-2019-7148"] | ["CWE-770"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Allocation of Resources Without Limits or Throttling | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | low | ["CVE-2017-18258"] | ["CWE-770"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Arbitrary Code Injection | python2.7 | 2.7.13-2+deb9u3 | low | ["CVE-2017-17522"] | ["CWE-74"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Arbitrary Code Injection | python2.7 | 2.7.13-2+deb9u3 | low | ["CVE-2019-18348"] | ["CWE-74"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 |
| Arbitrary Code Injection | python3.5 | 3.5.3-1+deb9u1 | low | ["CVE-2017-17522"] | ["CWE-74"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Arbitrary Code Injection | python3.5 | 3.5.3-1+deb9u1 | low | ["CVE-2019-18348"] | ["CWE-74"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 |
| Buffer Overflow | curl | 7.52.1-5+deb9u9 | high | ["CVE-2019-5482"] | ["CWE-120"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Buffer Overflow | lz4/liblz4-1 | 0.0~r131-2+b1 | low | ["CVE-2019-17543"] | ["CWE-120"] | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | 8.1 |
| Buffer Overflow | perl | 5.24.1-3+deb9u5 | medium | ["CVE-2020-12723"] | ["CWE-120"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| CRLF Injection | python2.7 | 2.7.13-2+deb9u3 | medium | ["CVE-2019-9740"] | ["CWE-93"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 |
| CRLF Injection | python2.7 | 2.7.13-2+deb9u3 | medium | ["CVE-2019-9947"] | ["CWE-93"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 |
| CRLF Injection | python3.5 | 3.5.3-1+deb9u1 | medium | ["CVE-2019-9740"] | ["CWE-93"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 |
| CRLF Injection | python3.5 | 3.5.3-1+deb9u1 | medium | ["CVE-2019-9947"] | ["CWE-93"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 |
| CVE-2004-0971 | krb5/libgssapi-krb5-2 | 1.15-1+deb9u1 | low | ["CVE-2004-0971"] | [] | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N | 4 |
| CVE-2005-2541 | tar | 1.29b-1.1 | low | ["CVE-2005-2541"] | [] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| CVE-2007-2768 | openssh/openssh-client | 1:7.4p1-10+deb9u7 | low | ["CVE-2007-2768"] | [] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N | 4.3 |
| CVE-2010-4051 | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2010-4051"] | [] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | 5.3 |
| CVE-2018-10754 | ncurses/libncurses5 | 6.0+20161126-1+deb9u2 | low | ["CVE-2018-10754"] | ["CWE-476"] | 7.5 | |
| CVE-2019-18276 | bash | 4.4-5 | low | ["CVE-2019-18276"] | ["CWE-273"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F | 8.4 |
| CVE-2019-9619 | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2019-9619"] | [] | ||
| CVE-2020-26116 | python3.5 | 3.5.3-1+deb9u1 | low | ["CVE-2020-26116"] | [] | ||
| CVE-2020-8177 | curl | 7.52.1-5+deb9u9 | low | ["CVE-2020-8177"] | [] | ||
| CVE-2020-8231 | curl | 7.52.1-5+deb9u9 | low | ["CVE-2020-8231"] | [] | ||
| Credentials Management | python2.7 | 2.7.13-2+deb9u3 | medium | ["CVE-2019-9636"] | [] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Credentials Management | python3.5 | 3.5.3-1+deb9u1 | medium | ["CVE-2019-9636"] | [] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Credentials Management | python3.5 | 3.5.3-1+deb9u1 | low | ["CVE-2019-10160"] | ["CWE-255"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Cross-site Request Forgery (CSRF) | gnupg2/dirmngr | 2.1.18-8~deb9u4 | low | ["CVE-2018-1000858"] | ["CWE-352"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Cross-site Scripting (XSS) | python2.7 | 2.7.13-2+deb9u3 | low | ["CVE-2019-16935"] | ["CWE-79"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 |
| Cross-site Scripting (XSS) | python3.5 | 3.5.3-1+deb9u1 | low | ["CVE-2019-16935"] | ["CWE-79"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 |
| Cryptographic Issues | gnutls28/libgnutls30 | 3.5.8-5+deb9u4 | low | ["CVE-2018-16868"] | ["CWE-310"] | CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N | 5.6 |
| Cryptographic Issues | libgcrypt20 | 1.7.6-2+deb9u3 | low | ["CVE-2019-12904"] | ["CWE-310"] | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | 5.9 |
| Cryptographic Issues | nettle/libhogweed4 | 3.3-1+b2 | low | ["CVE-2018-16869"] | ["CWE-310"] | CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N | 5.7 |
| Cryptographic Issues | openldap/libldap-2.4-2 | 2.4.44+dfsg-5+deb9u3 | low | ["CVE-2015-3276"] | ["CWE-310"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N | 5.3 |
| Cryptographic Issues | openssl | 1.1.0l-1~deb9u1 | low | ["CVE-2007-6755"] | ["CWE-310"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N | 5.4 |
| Cryptographic Issues | openssl | 1.1.0l-1~deb9u1 | low | ["CVE-2010-0928"] | ["CWE-310"] | CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | 5.1 |
| Cryptographic Issues | python2.7 | 2.7.13-2+deb9u3 | low | ["CVE-2013-7040"] | ["CWE-310"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L | 4.3 |
| Directory Traversal | patch | 2.7.5-1+deb9u2 | low | ["CVE-2010-4651"] | ["CWE-22"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L | 5.4 |
| Directory Traversal | python2.7 | 2.7.13-2+deb9u3 | medium | ["CVE-2019-9948"] | ["CWE-22"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | 9.1 |
| Directory Traversal | python3.5 | 3.5.3-1+deb9u1 | medium | ["CVE-2019-9948"] | ["CWE-22"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | 9.1 |
| Directory Traversal | python-pip | 9.0.1-2+deb9u1 | high | ["CVE-2019-20916"] | ["CWE-22"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | 7.5 |
| Divide By Zero | binutils | 2.28-5 | low | ["CVE-2017-15025"] | ["CWE-369"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Divide By Zero | elfutils/libelf1 | 0.168-1 | low | ["CVE-2018-18521"] | ["CWE-369"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Divide By Zero | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | medium | ["CVE-2019-16168"] | ["CWE-369"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Double Free | curl | 7.52.1-5+deb9u9 | low | ["CVE-2019-5481"] | ["CWE-415"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Double Free | elfutils/libelf1 | 0.168-1 | low | ["CVE-2018-16402"] | ["CWE-415"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Double Free | gnutls28/libgnutls30 | 3.5.8-5+deb9u4 | medium | ["CVE-2019-3829"] | ["CWE-415","CWE-416"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Double Free | krb5/libgssapi-krb5-2 | 1.15-1+deb9u1 | low | ["CVE-2017-11462"] | ["CWE-415"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Double Free | patch | 2.7.5-1+deb9u2 | low | ["CVE-2018-6952"] | ["CWE-415"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Improper Authentication | openssh/openssh-client | 1:7.4p1-10+deb9u7 | low | ["CVE-2007-2243"] | ["CWE-287"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Improper Certificate Validation | openldap/libldap-2.4-2 | 2.4.44+dfsg-5+deb9u3 | low | ["CVE-2020-15719"] | ["CWE-295"] | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N | 4.2 |
| Improper Data Handling | glibc/libc-bin | 2.24-11+deb9u4 | medium | ["CVE-2009-5155"] | ["CWE-19"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Improper Data Handling | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2015-8985"] | ["CWE-19"] | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | 5.9 |
| Improper Data Handling | glibc/libc-bin | 2.24-11+deb9u4 | medium | ["CVE-2017-12132"] | ["CWE-19"] | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N | 5.9 |
| Improper Handling of Exceptional Conditions | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | medium | ["CVE-2019-20218"] | ["CWE-755"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Improper Input Validation | apt | 1.4.9 | medium | ["CVE-2020-3810"] | ["CWE-20"] | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Improper Input Validation | bind9/bind9-host | 1:9.10.3.dfsg.P4-12.3+deb9u5 | medium | ["CVE-2018-5740"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Improper Input Validation | bind9/bind9-host | 1:9.10.3.dfsg.P4-12.3+deb9u5 | low | ["CVE-2016-6170"] | ["CWE-20"] | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | 6.5 |
| Improper Input Validation | binutils | 2.28-5 | medium | ["CVE-2018-14038"] | ["CWE-20"] | 5.5 | |
| Improper Input Validation | binutils | 2.28-5 | low | ["CVE-2017-9043"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Improper Input Validation | binutils | 2.28-5 | medium | ["CVE-2018-6759"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Improper Input Validation | binutils | 2.28-5 | medium | ["CVE-2018-7208"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Improper Input Validation | binutils | 2.28-5 | low | ["CVE-2018-8945"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Improper Input Validation | binutils | 2.28-5 | low | ["CVE-2017-15024"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Improper Input Validation | binutils | 2.28-5 | low | ["CVE-2017-14933"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Improper Input Validation | binutils | 2.28-5 | low | ["CVE-2017-14932"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Improper Input Validation | coreutils | 8.26-3 | low | ["CVE-2016-2781"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N | 6.5 |
| Improper Input Validation | git | 1:2.11.0-3+deb9u5 | low | ["CVE-2018-1000021"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Improper Input Validation | git | 1:2.11.0-3+deb9u5 | low | ["CVE-2019-1354"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Improper Input Validation | git | 1:2.11.0-3+deb9u5 | low | ["CVE-2019-1350"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Improper Input Validation | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2016-10228"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | 5.9 |
| Improper Input Validation | glibc/libc-bin | 2.24-11+deb9u4 | medium | ["CVE-2016-10739"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | 5.3 |
| Improper Input Validation | gnutls28/libgnutls30 | 3.5.8-5+deb9u4 | low | ["CVE-2011-3389"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N | 4.3 |
| Improper Input Validation | iptables | 1.6.0+snapshot20161117-6 | low | ["CVE-2012-2663"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | 7.3 |
| Improper Input Validation | krb5/libgssapi-krb5-2 | 1.15-1+deb9u1 | low | ["CVE-2018-20217"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H | 5.3 |
| Improper Input Validation | libpng1.6/libpng16-16 | 1.6.28-1+deb9u1 | high | ["CVE-2017-12652"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Improper Input Validation | mercurial | 4.0-1+deb9u1 | medium | ["CVE-2018-13346"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | 7.5 |
| Improper Input Validation | mercurial | 4.0-1+deb9u1 | medium | ["CVE-2018-13348"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | 7.5 |
| Improper Input Validation | nghttp2/libnghttp2-14 | 1.18.1-1+deb9u1 | low | ["CVE-2018-1000168"] | ["CWE-20","CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Improper Input Validation | openssh/openssh-client | 1:7.4p1-10+deb9u7 | low | ["CVE-2020-12062"] | ["CWE-20"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | 7.5 |
| Improper Input Validation | python2.7 | 2.7.13-2+deb9u3 | medium | ["CVE-2018-20852"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Improper Input Validation | python2.7 | 2.7.13-2+deb9u3 | medium | ["CVE-2019-16056"] | [] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5 |
| Improper Input Validation | python3.5 | 3.5.3-1+deb9u1 | medium | ["CVE-2018-20852"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Improper Input Validation | python3.5 | 3.5.3-1+deb9u1 | medium | ["CVE-2019-16056"] | [] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5 |
| Improper Input Validation | python-pip | 9.0.1-2+deb9u1 | low | ["CVE-2018-20225"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L | 6.3 |
| Improper Input Validation | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | low | ["CVE-2017-13685"] | ["CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Improper Input Validation | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | medium | ["CVE-2020-11655"] | ["CWE-20"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Improper Input Validation | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2017-1000082"] | ["CWE-20"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Improper Input Validation | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2020-13776"] | ["CWE-20"] | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H | 6.7 |
| Improper Privilege Management | bind9/bind9-host | 1:9.10.3.dfsg.P4-12.3+deb9u5 | high | ["CVE-2020-8623"] | ["CWE-269"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Improper Resource Shutdown or Release | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2019-6488"] | ["CWE-404"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |
| Improper Resource Shutdown or Release | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | medium | ["CVE-2019-20388"] | ["CWE-404"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Improper Verification of Cryptographic Signature | apt | 1.4.9 | low | ["CVE-2011-3374"] | ["CWE-347"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | 4.3 |
| Inadequate Encryption Strength | openssl1.0/libssl1.0.2 | 1.0.2u-1~deb9u1 | low | ["CVE-2020-1968"] | ["CWE-326"] | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | 3.7 |
| Inappropriate Encoding for Output Context | openssh/openssh-client | 1:7.4p1-10+deb9u7 | low | ["CVE-2019-6110"] | ["CWE-838"] | CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F | 6.8 |
| Incorrect Authorization | bind9/bind9-host | 1:9.10.3.dfsg.P4-12.3+deb9u5 | low | ["CVE-2018-5741"] | ["CWE-863"] | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | 6.5 |
| Incorrect Permission Assignment for Critical Resource | mercurial | 4.0-1+deb9u1 | medium | ["CVE-2018-1000132"] | ["CWE-732"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | 9.1 |
| Incorrect Permission Assignment for Critical Resource | shadow/login | 1:4.4-4.1 | low | ["CVE-2019-19882"] | ["CWE-732"] | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |
| Incorrect Type Conversion or Cast | binutils | 2.28-5 | low | ["CVE-2017-9042"] | ["CWE-704"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Information Exposure | gcc-6 | 1:6.3.0-18+deb9u1 | medium | ["CVE-2018-12886"] | ["CWE-209"] | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | 8.1 |
| Information Exposure | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2019-1010024"] | ["CWE-200"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Information Exposure | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2019-19126"] | ["CWE-200"] | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | 3.3 |
| Information Exposure | libgcrypt20 | 1.7.6-2+deb9u3 | low | ["CVE-2018-6829"] | ["CWE-200","CWE-310"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5 |
| Information Exposure | openssh/openssh-client | 1:7.4p1-10+deb9u7 | low | ["CVE-2018-15919"] | ["CWE-200"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Information Exposure | openssh/openssh-client | 1:7.4p1-10+deb9u7 | low | ["CVE-2020-14145"] | ["CWE-200"] | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | 5.9 |
| Information Exposure | openssl | 1.1.0l-1~deb9u1 | low | ["CVE-2019-1551"] | ["CWE-200"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Information Exposure | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2018-20839"] | ["CWE-200"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Insufficiently Protected Credentials | git | 1:2.11.0-3+deb9u5 | medium | ["CVE-2020-5260"] | ["CWE-522"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Insufficiently Protected Credentials | git | 1:2.11.0-3+deb9u5 | medium | ["CVE-2020-11008"] | ["CWE-522"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | medium | ["CVE-2017-14333"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | medium | ["CVE-2018-6323"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | low | ["CVE-2017-16830"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | low | ["CVE-2018-19932"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | medium | ["CVE-2018-7643"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | medium | ["CVE-2018-7568"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | low | ["CVE-2017-16828"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | medium | ["CVE-2018-7569"] | ["CWE-190","CWE-191"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | low | ["CVE-2017-16831"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | medium | ["CVE-2018-6543"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | low | ["CVE-2018-18483"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | low | ["CVE-2017-17122"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | low | ["CVE-2017-16832"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | medium | ["CVE-2017-14745"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | low | ["CVE-2019-14444"] | ["CWE-190"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Integer Overflow or Wraparound | binutils | 2.28-5 | low | ["CVE-2019-17451"] | ["CWE-190"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Integer Overflow or Wraparound | icu/libicu57 | 57.1-6+deb9u3 | medium | ["CVE-2020-10531"] | ["CWE-190"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L | 6.3 |
| Integer Overflow or Wraparound | krb5/libgssapi-krb5-2 | 1.15-1+deb9u1 | low | ["CVE-2018-5709"] | ["CWE-190"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | 7.5 |
| Integer Overflow or Wraparound | libidn/libidn11 | 1.33-1 | high | ["CVE-2017-14062"] | ["CWE-190"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Integer Overflow or Wraparound | libssh2/libssh2-1 | 1.7.0-1+deb9u1 | medium | ["CVE-2019-13115"] | ["CWE-125","CWE-190"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H | 8.1 |
| Integer Overflow or Wraparound | libssh2/libssh2-1 | 1.7.0-1+deb9u1 | low | ["CVE-2019-17498"] | ["CWE-190"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L | 5.4 |
| Integer Overflow or Wraparound | mercurial | 4.0-1+deb9u1 | high | ["CVE-2018-13347"] | ["CWE-190"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Integer Overflow or Wraparound | pcre3/libpcre3 | 2:8.39-3 | medium | ["CVE-2020-14155"] | ["CWE-190"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | 5.3 |
| Integer Overflow or Wraparound | perl | 5.24.1-3+deb9u5 | high | ["CVE-2020-10878"] | ["CWE-190"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H | 8.6 |
| Integer Overflow or Wraparound | python3.5 | 3.5.3-1+deb9u1 | low | ["CVE-2018-20406"] | ["CWE-190"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Integer Overflow or Wraparound | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | medium | ["CVE-2018-20346"] | ["CWE-190"] | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | 8.1 |
| Integer Overflow or Wraparound | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | medium | ["CVE-2018-20506"] | ["CWE-190"] | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | 8.1 |
| Integer Overflow or Wraparound | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | medium | ["CVE-2020-13434"] | ["CWE-190"] | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | 5.5 |
| Integer Underflow | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2020-6096"] | ["CWE-191"] | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | 8.1 |
| Key Management Errors | gnupg2/dirmngr | 2.1.18-8~deb9u4 | low | ["CVE-2018-9234"] | ["CWE-320"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5 |
| LDAP Injection | krb5/libgssapi-krb5-2 | 1.15-1+deb9u1 | medium | ["CVE-2018-5730"] | ["CWE-90"] | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N | 3.8 |
| Link Following | mercurial | 4.0-1+deb9u1 | medium | ["CVE-2019-3902"] | ["CWE-59"] | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N | 5.9 |
| Link Following | perl | 5.24.1-3+deb9u5 | low | ["CVE-2011-4116"] | ["CWE-59"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N | 5.3 |
| Link Following | python-defaults/libpython-stdlib | 2.7.13-2 | low | ["CVE-2008-4108"] | ["CWE-59"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 8.4 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | medium | ["CVE-2018-14567"] | ["CWE-835"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | medium | ["CVE-2020-7595"] | ["CWE-835"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | python2.7 | 2.7.13-2+deb9u3 | low | ["CVE-2019-20907"] | ["CWE-835"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | python3.5 | 3.5.3-1+deb9u1 | low | ["CVE-2019-20907"] | ["CWE-835"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Memory Leak | libpng1.6/libpng16-16 | 1.6.28-1+deb9u1 | low | ["CVE-2019-6129"] | ["CWE-401"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Missing Release of Resource after Effective Lifetime | libpng1.6/libpng16-16 | 1.6.28-1+deb9u1 | low | ["CVE-2019-17371"] | ["CWE-772"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L | 4.3 |
| Missing Release of Resource after Effective Lifetime | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | medium | ["CVE-2019-19956"] | ["CWE-772"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Missing Release of Resource after Effective Lifetime | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2019-20386"] | ["CWE-772"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | 4 |
| NULL Pointer Dereference | binutils | 2.28-5 | medium | ["CVE-2017-12457"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2017-9040"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | medium | ["CVE-2018-7570"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | medium | ["CVE-2018-10535"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | medium | ["CVE-2017-13710"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | medium | ["CVE-2018-7642"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2018-18606"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2017-17123"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | medium | ["CVE-2018-10373"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2017-14940"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2018-20651"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2018-18607"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2018-17794"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2017-15022"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2017-15023"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | medium | ["CVE-2017-14974"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | binutils | 2.28-5 | low | ["CVE-2018-12697"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| NULL Pointer Dereference | krb5/libgssapi-krb5-2 | 1.15-1+deb9u1 | medium | ["CVE-2018-5710"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | 6.5 |
| NULL Pointer Dereference | krb5/libgssapi-krb5-2 | 1.15-1+deb9u1 | medium | ["CVE-2018-5729"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L | 4.7 |
| NULL Pointer Dereference | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | low | ["CVE-2018-14404"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| NULL Pointer Dereference | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | low | ["CVE-2017-5969"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H | 4.7 |
| NULL Pointer Dereference | ncurses/libncurses5 | 6.0+20161126-1+deb9u2 | low | ["CVE-2018-19211"] | ["CWE-476"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | patch | 2.7.5-1+deb9u2 | low | ["CVE-2018-6951"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| NULL Pointer Dereference | python2.7 | 2.7.13-2+deb9u3 | medium | ["CVE-2019-5010"] | ["CWE-476"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| NULL Pointer Dereference | python3.5 | 3.5.3-1+deb9u1 | medium | ["CVE-2019-5010"] | ["CWE-476"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| NULL Pointer Dereference | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | medium | ["CVE-2018-8740"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| NULL Pointer Dereference | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | low | ["CVE-2019-9937"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| NULL Pointer Dereference | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | low | ["CVE-2020-13632"] | ["CWE-476"] | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | 5.5 |
| NULL Pointer Dereference | tar | 1.29b-1.1 | low | ["CVE-2019-9923"] | ["CWE-476"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Numeric Errors | binutils | 2.28-5 | low | ["CVE-2017-14934"] | ["CWE-189"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| OS Command Injection | mercurial | 4.0-1+deb9u1 | high | ["CVE-2017-17458"] | ["CWE-78"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| OS Command Injection | openssh/openssh-client | 1:7.4p1-10+deb9u7 | low | ["CVE-2020-15778"] | ["CWE-78"] | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | apr/libapr1 | 1.5.2-5 | low | ["CVE-2017-12613"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H | 7.1 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9742"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9751"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | medium | ["CVE-2017-12799"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9746"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9752"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9747"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9748"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9745"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-14130"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9756"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9750"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9744"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | medium | ["CVE-2017-12967"] | ["CWE-119"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9755"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9753"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9754"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | medium | ["CVE-2017-9955"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-15225"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | medium | ["CVE-2017-14529"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2018-17358"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | medium | ["CVE-2017-9954"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-17126"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-16826"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2018-17359"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-17124"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | medium | ["CVE-2017-13757"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-17080"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2018-17360"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-17121"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-15938"] | ["CWE-119"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-15996"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2018-18605"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-14129"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9749"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-15020"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2018-18309"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2018-20712"] | ["CWE-119"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Out-of-Bounds | binutils | 2.28-5 | medium | ["CVE-2017-14729"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-9743"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-15021"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-17125"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-16827"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-14939"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:F | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2017-14128"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | binutils | 2.28-5 | low | ["CVE-2019-1010180"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | curl | 7.52.1-5+deb9u9 | medium | ["CVE-2019-5436"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | elfutils/libelf1 | 0.168-1 | medium | ["CVE-2018-18310"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | elfutils/libelf1 | 0.168-1 | medium | ["CVE-2018-16062"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | elfutils/libelf1 | 0.168-1 | low | ["CVE-2018-18520"] | ["CWE-119"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Out-of-Bounds | elfutils/libelf1 | 0.168-1 | low | ["CVE-2018-16403"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2019-7309"] | [] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | glibc/libc-bin | 2.24-11+deb9u4 | high | ["CVE-2018-1000001"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F | 7.8 |
| Out-of-Bounds | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2019-1010022"] | ["CWE-119"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Out-of-Bounds | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2020-10029"] | ["CWE-119"] | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | iptables | 1.6.0+snapshot20161117-6 | low | ["CVE-2019-11360"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | krb5/libgssapi-krb5-2 | 1.15-1+deb9u1 | low | ["CVE-2017-15088"] | ["CWE-119"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Out-of-Bounds | openldap/libldap-2.4-2 | 2.4.44+dfsg-5+deb9u3 | low | ["CVE-2017-17740"] | ["CWE-119"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Out-of-Bounds | patch | 2.7.5-1+deb9u2 | low | ["CVE-2016-10713"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | pcre3/libpcre3 | 2:8.39-3 | low | ["CVE-2017-7245"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | pcre3/libpcre3 | 2:8.39-3 | low | ["CVE-2017-7246"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-Bounds | pcre3/libpcre3 | 2:8.39-3 | low | ["CVE-2017-16231"] | ["CWE-119"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-Bounds | shadow/login | 1:4.4-4.1 | high | ["CVE-2017-12424"] | ["CWE-119"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Out-of-bounds Read | apr-util/libaprutil1 | 1.5.4-3 | low | ["CVE-2017-12618"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H | 4.7 |
| Out-of-bounds Read | binutils | 2.28-5 | low | ["CVE-2019-9074"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | binutils | 2.28-5 | low | ["CVE-2019-9070"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | low | ["CVE-2017-9044"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2017-12455"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | low | ["CVE-2017-9038"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2017-12451"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2017-12452"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2017-12453"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2017-12454"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | low | ["CVE-2017-9041"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2018-10372"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2018-6872"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2017-12458"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2017-12456"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | medium | ["CVE-2017-12449"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | low | ["CVE-2017-16829"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Read | binutils | 2.28-5 | low | ["CVE-2019-12972"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | binutils | 2.28-5 | low | ["CVE-2019-1010204"] | ["CWE-125","CWE-20"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | elfutils/libelf1 | 0.168-1 | low | ["CVE-2019-7150"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | elfutils/libelf1 | 0.168-1 | low | ["CVE-2019-7149"] | ["CWE-125"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Out-of-bounds Read | elfutils/libelf1 | 0.168-1 | low | ["CVE-2019-7665"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Read | file/libmagic-mgc | 1:5.30-1+deb9u3 | medium | ["CVE-2019-8905"] | ["CWE-125"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Out-of-bounds Read | glibc/libc-bin | 2.24-11+deb9u4 | high | ["CVE-2019-9169"] | ["CWE-125"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Out-of-bounds Read | libbsd/libbsd0 | 0.8.3-1 | medium | ["CVE-2019-20367"] | ["CWE-125"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L | 6.5 |
| Out-of-bounds Read | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | medium | ["CVE-2017-8872"] | ["CWE-125"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H | 9.1 |
| Out-of-bounds Read | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | medium | ["CVE-2020-24977"] | ["CWE-125"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L | 6.5 |
| Out-of-bounds Read | mercurial | 4.0-1+deb9u1 | low | ["CVE-2018-17983"] | ["CWE-125"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H | 9.1 |
| Out-of-bounds Read | ncurses/libncurses5 | 6.0+20161126-1+deb9u2 | low | ["CVE-2019-17595"] | ["CWE-125"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L | 5.4 |
| Out-of-bounds Read | ncurses/libncurses5 | 6.0+20161126-1+deb9u2 | low | ["CVE-2019-17594"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | 5.9 |
| Out-of-bounds Read | pcre3/libpcre3 | 2:8.39-3 | low | ["CVE-2019-20838"] | ["CWE-125"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Out-of-bounds Read | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | low | ["CVE-2019-9936"] | ["CWE-125"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5 |
| Out-of-bounds Read | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | high | ["CVE-2019-8457"] | ["CWE-125"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Out-of-bounds Read | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | high | ["CVE-2020-9794"] | ["CWE-125"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H | 8.1 |
| Out-of-bounds Read | tar | 1.29b-1.1 | low | ["CVE-2018-20482"] | ["CWE-125"] | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H | 4.7 |
| Out-of-bounds Write | binutils | 2.28-5 | low | ["CVE-2019-9075"] | ["CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Write | binutils | 2.28-5 | low | ["CVE-2019-9077"] | ["CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Write | binutils | 2.28-5 | medium | ["CVE-2017-12450"] | ["CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Write | binutils | 2.28-5 | medium | ["CVE-2017-12459"] | ["CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Write | binutils | 2.28-5 | low | ["CVE-2018-20673"] | ["CWE-190","CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Write | binutils | 2.28-5 | low | ["CVE-2018-1000876"] | ["CWE-190","CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Write | binutils | 2.28-5 | medium | ["CVE-2018-10534"] | ["CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Write | binutils | 2.28-5 | low | ["CVE-2018-19931"] | ["CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Out-of-bounds Write | binutils | 2.28-5 | low | ["CVE-2018-20671"] | ["CWE-190","CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Write | binutils | 2.28-5 | low | ["CVE-2018-12699"] | ["CWE-787"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Out-of-bounds Write | binutils | 2.28-5 | low | ["CVE-2019-14250"] | ["CWE-190","CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N | 5.5 |
| Out-of-bounds Write | bzip2 | 1.0.6-8.1 | high | ["CVE-2019-12900"] | ["CWE-787"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Out-of-bounds Write | e2fsprogs | 1.43.4-2+deb9u1 | medium | ["CVE-2019-5188"] | ["CWE-787"] | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | 6.7 |
| Out-of-bounds Write | elfutils/libelf1 | 0.168-1 | low | ["CVE-2019-7664"] | ["CWE-787"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Out-of-bounds Write | file/libmagic-mgc | 1:5.30-1+deb9u3 | medium | ["CVE-2019-8907"] | ["CWE-787"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Out-of-bounds Write | glibc/libc-bin | 2.24-11+deb9u4 | high | ["CVE-2018-6485"] | ["CWE-190","CWE-787"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Out-of-bounds Write | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2018-6551"] | ["CWE-190","CWE-787"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Out-of-bounds Write | glibc/libc-bin | 2.24-11+deb9u4 | medium | ["CVE-2020-1751"] | ["CWE-787"] | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | 7 |
| Out-of-bounds Write | libpng1.6/libpng16-16 | 1.6.28-1+deb9u1 | low | ["CVE-2018-14550"] | ["CWE-787"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Out-of-bounds Write | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | low | ["CVE-2017-5130"] | ["CWE-787"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Out-of-bounds Write | perl | 5.24.1-3+deb9u5 | medium | ["CVE-2020-10543"] | ["CWE-787"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H | 8.2 |
| Out-of-bounds Write | python2.7 | 2.7.13-2+deb9u3 | low | ["CVE-2018-1000030"] | ["CWE-416","CWE-787"] | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L | 3.6 |
| Out-of-bounds Write | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | low | ["CVE-2019-5827"] | ["CWE-190","CWE-787"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 8.8 |
| Race Condition | coreutils | 8.26-3 | low | ["CVE-2017-18018"] | ["CWE-362"] | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N | 4.7 |
| Race Condition | libgcrypt20 | 1.7.6-2+deb9u3 | low | ["CVE-2019-13627"] | ["CWE-362"] | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N | 6.3 |
| Reachable Assertion | bind9/bind9-host | 1:9.10.3.dfsg.P4-12.3+deb9u5 | high | ["CVE-2020-8617"] | ["CWE-617"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Reachable Assertion | bind9/bind9-host | 1:9.10.3.dfsg.P4-12.3+deb9u5 | medium | ["CVE-2020-8622"] | ["CWE-617"] | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | 6.5 |
| Resource Exhaustion | bind9/bind9-host | 1:9.10.3.dfsg.P4-12.3+deb9u5 | high | ["CVE-2020-8616"] | ["CWE-400"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H | 8.6 |
| Resource Exhaustion | binutils | 2.28-5 | low | ["CVE-2018-18700"] | ["CWE-400"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Exhaustion | binutils | 2.28-5 | low | ["CVE-2018-17985"] | ["CWE-400"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Exhaustion | binutils | 2.28-5 | low | ["CVE-2018-18701"] | ["CWE-400"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Exhaustion | git | 1:2.11.0-3+deb9u5 | low | ["CVE-2017-15298"] | ["CWE-400"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Exhaustion | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | medium | ["CVE-2017-16932"] | ["CWE-400"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Resource Exhaustion | openldap/libldap-2.4-2 | 2.4.44+dfsg-5+deb9u3 | medium | ["CVE-2020-12243"] | ["CWE-400"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Resource Exhaustion | python2.7 | 2.7.13-2+deb9u3 | high | ["CVE-2020-8492"] | ["CWE-400"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Resource Exhaustion | python2.7 | 2.7.13-2+deb9u3 | low | ["CVE-2019-9674"] | ["CWE-400"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Resource Exhaustion | python3.5 | 3.5.3-1+deb9u1 | high | ["CVE-2020-8492"] | ["CWE-400"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Resource Exhaustion | python3.5 | 3.5.3-1+deb9u1 | low | ["CVE-2019-9674"] | ["CWE-400"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Resource Exhaustion | python3.5 | 3.5.3-1+deb9u1 | medium | ["CVE-2020-14422"] | ["CWE-400"] | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | 5.9 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2018-20657"] | ["CWE-399"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2017-9039"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2017-13716"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2018-12700"] | ["CWE-399"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2018-13033"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2018-9138"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2018-12698"] | ["CWE-399"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2018-12641"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2017-14938"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2018-9996"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2018-20002"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2018-12934"] | ["CWE-399"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Resource Management Errors | binutils | 2.28-5 | low | ["CVE-2017-14930"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2018-20796"] | ["CWE-399"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Resource Management Errors | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2010-4052"] | ["CWE-399"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:F | 5.3 |
| Resource Management Errors | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2010-4756"] | ["CWE-399"] | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L | 4.3 |
| Resource Management Errors | libpng1.6/libpng16-16 | 1.6.28-1+deb9u1 | low | ["CVE-2018-14048"] | [] | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Resource Management Errors | libtasn1-6 | 4.10-1.1+deb9u1 | low | ["CVE-2018-1000654"] | ["CWE-399"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Resource Management Errors | pcre3/libpcre3 | 2:8.39-3 | low | ["CVE-2017-11164"] | ["CWE-399"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Security Features | shadow/login | 1:4.4-4.1 | low | ["CVE-2018-7169"] | ["CWE-254"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Time-of-check Time-of-use (TOCTOU) | shadow/login | 1:4.4-4.1 | low | ["CVE-2013-4235"] | ["CWE-367"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L | 4.4 |
| Uncontrolled Recursion | binutils | 2.28-5 | low | ["CVE-2019-9071"] | ["CWE-674"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Uncontrolled Recursion | binutils | 2.28-5 | low | ["CVE-2018-18484"] | ["CWE-674"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Uncontrolled Recursion | binutils | 2.28-5 | low | ["CVE-2019-17450"] | ["CWE-674"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 6.5 |
| Uncontrolled Recursion | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2019-9192"] | ["CWE-674"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Use After Free | binutils | 2.28-5 | medium | ["CVE-2017-12448"] | ["CWE-416"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
| Use After Free | binutils | 2.28-5 | low | ["CVE-2018-20623"] | ["CWE-416"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | 5.5 |
| Use After Free | glibc/libc-bin | 2.24-11+deb9u4 | medium | ["CVE-2020-1752"] | ["CWE-416"] | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H | 7 |
| Use After Free | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | low | ["CVE-2020-11656"] | ["CWE-416"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 |
| Use After Free | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | low | ["CVE-2020-13630"] | ["CWE-416"] | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | 7 |
| Use After Free | sqlite3/libsqlite3-0 | 3.16.2-5+deb9u1 | low | ["CVE-2020-13871"] | ["CWE-416"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 |
| Use After Free | systemd/libsystemd0 | 232-25+deb9u12 | low | ["CVE-2020-1712"] | ["CWE-416"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | 5.9 |
| Use of Incorrectly-Resolved Name or Reference | git | 1:2.11.0-3+deb9u5 | low | ["CVE-2019-1351"] | ["CWE-706"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | 7.5 |
| Use of Insufficiently Random Values | glibc/libc-bin | 2.24-11+deb9u4 | low | ["CVE-2019-1010025"] | ["CWE-330"] | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 5.3 |
| Use of a Broken or Risky Cryptographic Algorithm | gnupg2/dirmngr | 2.1.18-8~deb9u4 | low | ["CVE-2019-14855"] | ["CWE-327"] | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5 |
| XML External Entity (XXE) Injection | libxml2 | 2.9.4+dfsg1-2.2+deb9u2 | medium | ["CVE-2016-9318"] | ["CWE-611"] | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 7.8 |
Possible Solutions
Update
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.