PatchTheCVEdebian linux vulnerabilities and fixes
Recent CVEs affecting debian linux, with upgrade or downgrade steps. 10 tracked.
debian linux has 10 tracked vulnerabilities, 2 critical and 3 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 10. Most recent: 2025-09-05. Highest priority: CVE-2015-3306 (score 100/100).
- CVE-2023-4050 HIGH 7.5 UPGRADE MITIGATE In some cases, an untrusted input stream was copied to a stack buffer without checking its size
- CVE-2023-27536 MEDIUM 5.9 UPGRADE MITIGATE An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse p
- CVE-2023-28321 MEDIUM 5.9 UPGRADE MITIGATE An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wil
- CVE-2023-23916 MEDIUM 6.5 UPGRADE MITIGATE An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "ch
- CVE-2023-4049 MEDIUM 5.9 UPGRADE MITIGATE Race conditions in reference counting code were found through code inspection
- CVE-2023-37207 MEDIUM 6.5 UPGRADE UPGRADE A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external
- CVE-2023-6915 MEDIUM 6.2 MITIGATE DOWNGRADE A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel
- CVE-2025-39682 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
- CVE-2015-5477 HIGH 7.5 EXPLOITED UPGRADE MITIGATE ISC BIND Data Processing Errors Vulnerability
- CVE-2015-3306 CRITICAL 10.0 EXPLOITED MITIGATE MITIGATE ProFTPD Improper Access Control Vulnerability
FAQ
How do I fix debian linux vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is debian linux being exploited right now?
Yes: 3 debian linux CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.
Which debian linux CVE should I patch first?
CVE-2015-3306 currently ranks highest (100/100): ProFTPD Improper Access Control Vulnerability.