Search for packages
| purl | pkg:deb/debian/pound@4.16-3?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4mqa-bkha-kbaj | security update |
CVE-2012-4929
|
| VCID-5dgw-xn7k-77br | Pound is vulnerable to HTTP request smuggling, which could be exploited to bypass security restrictions or poison web caches. |
CVE-2005-3751
|
| VCID-9pjk-kxgp-h7hc | Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751. |
CVE-2016-10711
|
| VCID-drv6-nz1y-ffdr | Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711. |
CVE-2018-21245
|
| VCID-e1yx-dxa6-1bba | Multiple vulnerabilities have been found in the Oracle JRE/JDK, allowing attackers to cause unspecified impact. |
CVE-2011-3389
|
| VCID-hy5s-zgt5-wfch | Pound is vulnerable to a buffer overflow that could lead to the remote execution of arbitrary code. |
CVE-2005-1391
|
| VCID-jau7-gfz8-dkfa | The renegotiation vulnerability in SSL protocol |
CVE-2009-3555
GHSA-f7w7-6pjc-wwm6 VU#120541 |
| VCID-x6gh-z1hn-qbc3 | There is a format string flaw in Pound, allowing remote execution of arbitrary code with the rights of the Pound process. |
CVE-2004-2026
|
| VCID-xap5-djda-2uem | Multiple vulnerabilities have been found in Oracle JRE/JDK, allowing both local and remote attackers to compromise various Java components. |
CVE-2014-3566
|