Skip to content
COOEY

FAIL › dossier

debian linux

PRODUCT

Failure events
90
Zero-days
0
RCEs
0
On KEV
0
Critical
76
Worst shame
0
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 60
DATEEVENTSEVSUMMARY
2025-09-05 CVE-2025-39682 critical CVE-2025-39682: In the Linux kernel, the following vulnerability has been resolved: tls: fix ha
2024-10-21 CVE-2024-47685 critical CVE-2024-47685: In the Linux kernel, the following vulnerability has been resolved: netfilter:
2024-10-09 CVE-2024-9680 critical CVE-2024-9680: An attacker was able to achieve code execution in the content process by exploit
2023-12-24 CVE-2023-51714 critical CVE-2023-51714: An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x be
2023-08-22 CVE-2022-48174 critical CVE-2022-48174: There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In
2022-12-05 CVE-2022-32221 critical CVE-2022-32221: When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`
2022-11-22 CVE-2022-36227 critical CVE-2022-36227: In libarchive before 3.6.2, the software does not check for an error after calli
2022-10-24 CVE-2021-46848 critical CVE-2021-46848: GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affe
2022-10-21 CVE-2022-37454 critical CVE-2022-37454: The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer ove
2022-08-05 CVE-2022-37434 critical CVE-2022-37434: zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in infl
2022-07-07 CVE-2022-32207 critical CVE-2022-32207: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes
2022-05-04 CVE-2022-29155 critical CVE-2022-29155: In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerabil
2022-02-18 CVE-2022-25315 critical CVE-2022-25315: In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNa
2022-02-16 CVE-2022-25235 critical CVE-2022-25235: xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of e
2022-02-16 CVE-2022-25236 critical CVE-2022-25236: xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert names
2022-01-24 CVE-2022-23852 critical CVE-2022-23852: Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer
2022-01-14 CVE-2022-23219 critical CVE-2022-23219: The deprecated compatibility function clnt_create in the sunrpc module of the GN
2022-01-14 CVE-2022-23218 critical CVE-2022-23218: The deprecated compatibility function svcunix_create in the sunrpc module of the
2022-01-10 CVE-2022-22824 critical CVE-2022-22824: defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an intege
2022-01-10 CVE-2022-22823 critical CVE-2022-22823: build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ov
2022-01-10 CVE-2022-22822 critical CVE-2022-22822: addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ove
2021-12-17 CVE-2021-23450 high CVE-2021-23450: All versions of package dojo are vulnerable to Prototype Pollution via the setOb
2021-12-10 CVE-2021-44228 critical CVE-2021-44228: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12
2021-09-23 CVE-2021-22945 critical CVE-2021-22945: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some
2021-09-16 CVE-2021-40438 critical CVE-2021-40438: A crafted request uri-path can cause mod_proxy to forward the request to an orig
2021-08-24 CVE-2021-3711 critical CVE-2021-3711: In order to decrypt SM2 encrypted data an application is expected to call the AP
2021-07-22 CVE-2021-35942 critical CVE-2021-35942: The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or
2021-05-25 CVE-2021-33574 critical CVE-2021-33574: The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 h
2021-03-23 CVE-2021-21347 medium CVE-2021-21347: XStream is a Java library to serialize objects to XML and back again. In XStream
2021-03-23 CVE-2021-21342 medium CVE-2021-21342: XStream is a Java library to serialize objects to XML and back again. In XStream
2021-03-23 CVE-2021-21346 medium CVE-2021-21346: XStream is a Java library to serialize objects to XML and back again. In XStream
2021-03-23 CVE-2021-21345 medium CVE-2021-21345: XStream is a Java library to serialize objects to XML and back again. In XStream
2021-03-23 CVE-2021-21344 medium CVE-2021-21344: XStream is a Java library to serialize objects to XML and back again. In XStream
2021-03-23 CVE-2021-21350 medium CVE-2021-21350: XStream is a Java library to serialize objects to XML and back again. In XStream
2021-03-23 CVE-2021-21351 medium CVE-2021-21351: XStream is a Java library to serialize objects to XML and back again. In XStream
2021-01-19 CVE-2021-3177 critical CVE-2021-3177: Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callpro
2020-12-11 CVE-2020-7788 high CVE-2020-7788: This affects the package ini before 1.3.6. If an attacker submits a malicious IN
2020-03-24 CVE-2020-6072 critical CVE-2020-6072: An exploitable code execution vulnerability exists in the label-parsing function
2020-03-02 CVE-2020-9546 critical CVE-2020-9546: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee
2020-03-02 CVE-2020-9548 critical CVE-2020-9548: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee
2020-03-02 CVE-2020-9547 critical CVE-2020-9547: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee
2020-02-24 CVE-2020-1938 critical CVE-2020-1938: When using the Apache JServ Protocol (AJP), care must be taken when trusting inc
2020-02-10 CVE-2020-8840 critical CVE-2020-8840: FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JN
2020-01-29 CVE-2019-20444 critical CVE-2019-20444: HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a
2020-01-29 CVE-2019-20445 critical CVE-2019-20445: HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to
2020-01-08 CVE-2019-20367 critical CVE-2019-20367: nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison fo
2020-01-03 CVE-2019-20330 critical CVE-2019-20330: FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache bloc
2019-12-23 CVE-2019-11049 medium CVE-2019-11049: In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom h
2019-10-12 CVE-2019-17531 critical CVE-2019-17531: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th
2019-10-07 CVE-2019-17267 critical CVE-2019-17267: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2
2019-10-01 CVE-2019-16943 critical CVE-2019-16943: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th
2019-10-01 CVE-2019-16942 critical CVE-2019-16942: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th
2019-09-16 CVE-2019-5482 critical CVE-2019-5482: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
2019-09-16 CVE-2019-5481 critical CVE-2019-5481: Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
2019-09-15 CVE-2019-16335 critical CVE-2019-16335: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2
2019-09-15 CVE-2019-14540 critical CVE-2019-14540: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2
2019-07-29 CVE-2019-14379 critical CVE-2019-14379: SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles de
2019-07-18 CVE-2019-13962 critical CVE-2019-13962: lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player t
2019-06-19 CVE-2019-12900 critical CVE-2019-12900: BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write
2019-06-07 CVE-2019-10160 critical CVE-2019-10160: A security regression of CVE-2019-9636 was discovered in python since commit d53