2022 - Page 405 of 828

Ubuntu 14.04 — libcaca — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libcaca — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 July 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7943-1 Related CVEs: CVE-2022-0856 CVE-2021-30498 CVE-2021-30499 CVE-2021-3410 CVE-2018-20544 CVE-2018-20545 CVE-2018-20546 CVE-2018-20547  +2 more Upstream summary: Han Zheng discovered that libcaca incorrectly handled certain images. An attacker could possibly use this […]

Read more
IBM AIX 7.3 — CVE-1999-0687 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-1999-0687 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 6 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0687, IBM PSIRT advisory page CVE: CVE-1999-0687 NVD summary: The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. References: sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=col   www.ciac.org/ciac/bulletins/k-001.shtml   www.securityfocus.com/bid/637 Table […]

Read more
FreeBSD 13 — py38-twisted — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py38-twisted — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-twisted — cookie and authorization headers are leaked when following cross-origin redirects Related CVEs: CVE-2019-12387 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2020-10108 CVE-2020-10109 Upstream summary: Twisted developers report: Cookie and Authorization headers are […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.238-182.422 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.238-182.422 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2021-064 Related CVEs: CVE-2021-40490 Upstream summary: No CVE associated with this advisory Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

Read more
FreeBSD 13 — fontconfig — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — fontconfig — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fontconfig — insufficiently cache file validation Related CVEs: CVE-2016-5384 Upstream summary: Debian security team reports: Tobias Stoeckmann discovered that cache files are insufficiently validated in fontconfig, a generic font configuration […]

Read more
FreeBSD 13 — tin — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — tin — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tin — buffer overflow vulnerabilities Upstream summary: Urs Janssen and Aleksey Salow report possible buffer overflows in tin versions 1.8.0 and 1.8.1. OpenPKG project elaborates there is an allocation off-by-one […]

Read more
FreeBSD 13 — spamdyke — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — spamdyke — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spamdyke — Buffer Overflow Vulnerabilities Related CVEs: CVE-2008-2784 CVE-2012-0070 CVE-2012-0802 Upstream summary: Secunia reports: Fixed a number of very serious errors in the usage of snprintf()/vsnprintf(). The return value was […]

Read more
Debian 11 — ncompress — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ncompress — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2001-1413 CVE-2006-1168 CVE-2010-0001 Upstream summary: Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP […]

Read more
CHAT