debian/audit vulnerabilities

Latest debian/audit CVEs

Newest publication first

1. CVE-2015-5186 Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.

   Published 2017-09-06

   Medium·CVSS 5.3 EPSS 3.1%

   Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.

2. DTSA-123-1 audit - buffer overflow

   Published 2008-04-17

   Unknown

3. CVE-2008-1628 Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument.....

   Published 2008-04-02

   Medium·CVSS 4.1 EPSS 1.0%

   Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.