2019 - Page 424 of 527

FreeBSD 12 — libsndfile — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libsndfile — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libsndfile_project — Integer overflow in dataend calculation Related CVEs: CVE-2009-0186 CVE-2009-1788 CVE-2009-1791 CVE-2011-2696 CVE-2017-12562 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634  +12 more Upstream summary: [email protected] reports: Multiple signed integers overflow in function au_read_header […]

Read more
Arch Linux — lib32-libtiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — lib32-libtiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201707-18 Related CVEs: CVE-2016-10095 CVE-2015-7554 CVE-2016-9540 CVE-2016-9539 CVE-2016-9538 CVE-2016-9537 CVE-2016-9536 CVE-2016-9535  +12 more Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 4.0.7-1. Fixed in: 4.0.8-1. Group: AVG-87. Table of […]

Read more
Ubuntu 14.04 — unixodbc — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — unixodbc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 May 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6276-1 Related CVEs: CVE-2018-7409 Upstream summary: It was discovered that unixODBC incorrectly handled certain unicode to ansi copies. An attacker could possibly use this issue to cause a denial of […]

Read more
Ubuntu 16.04 — openslp-dfsg — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — openslp-dfsg — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4919-1 Related CVEs: CVE-2019-5544 CVE-2017-17833 CVE-2018-12938 Upstream summary: It was discovered that OpenSLP did not properly validate URLs. A remote attacker could use this issue to cause OpenSLP to crash […]

Read more
openSUSE Tumbleweed — libmwaw — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libmwaw — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1821-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-9433 Upstream summary: Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in […]

Read more
SLES 15 — perl-LWP-Protocol-https — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-LWP-Protocol-https — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 May 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3230 Upstream summary: The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server […]

Read more
Alpine Linux edge — libbsd — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — libbsd — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.10.0-r0 📖 ~4 min read  •  Source: Alpine secdb entry — libbsd 0.10.0-r0 Related CVEs: CVE-2019-20367 Upstream summary: Alpine main repository for vedge ships libbsd 0.10.0-r0 which addresses CVE-2019-20367. Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 12 — tshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — multiple security issues Related CVEs: CVE-2010-3445 CVE-2012-0041 CVE-2012-0066 CVE-2012-0067 CVE-2012-0068 CVE-2012-3548 CVE-2012-4048 CVE-2012-4049  +12 more Upstream summary: wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. (CVE-2018-7335) wnpa-sec-2018-06. Large […]

Read more
Debian 9 — trafficserver — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — trafficserver — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 May 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5660 CVE-2018-1318 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Debian 9 — imagemagick — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — imagemagick — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 May 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9439 CVE-2017-10995 CVE-2017-11352 CVE-2017-9500 CVE-2017-12877 CVE-2018-5248 CVE-2018-16412 CVE-2019-9956  +2 more Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

Read more
CHAT