🟢 Low ⏱ 5–15 min Last verified: 15 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0188 Upstream summary: Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-13421 Upstream summary: Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 5–30 min Last verified: 15 September 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟠 High ⏱ 15–60 min Last verified: 15 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0855 CVE-2007-3726 CVE-2012-6706 CVE-2017-12938 CVE-2017-12940 CVE-2017-12941 CVE-2017-12942 CVE-2017-20006 +5 more Upstream summary: Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted […]
How to Monitor Windows Server with Prometheus and Grafana on Windows Server 2016 Prometheus and Grafana form a powerful open-source monitoring stack widely used in both Linux and Windows environments. Prometheus is a time-series metrics database that scrapes exporters at regular intervals. Grafana is a visualization platform that queries Prometheus and renders dashboards. On Windows […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000047 Upstream summary: rbenv (all current versions) is vulnerable to Directory Traversal in the specification of Ruby version resulting in arbitrary code execution Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 15 September 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7422-1 Related CVEs: CVE-2021-44492 CVE-2021-44498 CVE-2021-44500 CVE-2021-44502 CVE-2021-44506 CVE-2021-44508 CVE-2021-44509 CVE-2021-44510 Upstream summary: It was discovered that FIS-GT.M could incorrectly dereference memory in certain instances. An attacker could possibly use […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7731-1 Related CVEs: CVE-2017-17689 CVE-2020-11880 Upstream summary: Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that KMail could be made […]
To protect your SSH server with an two-factor authentication, you can use the Google Authenticator PAM module. Read this tutorial to expand your knowledge on the subject.
🟢 Low ⏱ 5–15 min Last verified: 15 September 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5245-1 Related CVEs: CVE-2021-26291 Upstream summary: It was discovered that Apache Maven followed repositories that are defined in a dependency's Project Object Model (pom) even if the repositories weren't encrypted […]
