2021 - Page 8 of 759

FreeBSD 13 — transmission-gtk — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — transmission-gtk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libutp — remote denial of service or arbitrary code execution Related CVEs: CVE-2012-6129 Upstream summary: NVD reports: Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 […]

Read more
Debian 11 — xine-ui — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — xine-ui — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0372 CVE-2004-1951 CVE-2006-1905 CVE-2006-2230 CVE-2007-0254 Upstream summary: xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by […]

Read more
Common Problems 113535

Windows Server 2012 R2 — Asymmetric routing through multi-homed NICs triggers firewall state drops — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 28 December 2021 Affected versions: Windows Server 2012 R2 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
Debian 11 — opensysusers — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — opensysusers — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-40084 Upstream summary: opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. For example, it allows command execution via a […]

Read more
How to Install Nginx on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Install Nginx on FreeBSD 13

Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up install nginx on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux distribution. This […]

Read more
FreeBSD 13 — zh-unrar — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zh-unrar — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rar — password prompt buffer overflow vulnerability Related CVEs: CVE-2007-0855 Upstream summary: iDefense reports: Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker […]

Read more
FreeBSD 13 — ghostscript-afpl-nox — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ghostscript-afpl-nox — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — insecure temporary file creation vulnerability Related CVEs: CVE-2004-0967 Upstream summary: Ghostscript is affected by an insecure temporary file creation vulnerability. This issue is likely due to a design […]

Read more
SLES 12 — python-numpy — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-numpy — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 December 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:314-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33430 CVE-2021-41495 CVE-2017-12852 CVE-2021-41496 CVE-2019-6446 Upstream summary: A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of […]

Read more
CHAT