Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/mcrypt@2.6.4-3
purl pkg:deb/debian/mcrypt@2.6.4-3
Next non-vulnerable version 2.6.8-1.3
Latest non-vulnerable version 2.6.8-1.3
Risk 1.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-1ew8-1xx4-jucv
Aliases:
CVE-2012-4426
Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving (1) errors.c or (2) mcrypt.c.
2.6.8-1.3
Affected by 0 other vulnerabilities.
VCID-9hwa-a99r-z3hh
Aliases:
CVE-2012-4409
Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption.
2.6.8-1.3
Affected by 0 other vulnerabilities.
VCID-n13a-uuq6-rkgd
Aliases:
CVE-2012-4527
Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability.
2.6.8-1.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T03:10:08.121081+00:00 Debian Oval Importer Affected by VCID-n13a-uuq6-rkgd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T03:07:15.081201+00:00 Debian Oval Importer Affected by VCID-1ew8-1xx4-jucv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T00:06:05.097474+00:00 Debian Oval Importer Affected by VCID-9hwa-a99r-z3hh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0