2022 - Page 433 of 828

FreeBSD 12 — ircii — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ircii — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ircII — denial of service Related CVEs: CVE-2021-29376 Upstream summary: Michael Ortmann reports: ircii has a bug in parsing CTCP UTC messages. Its unknown if this could also be used […]

Read more
FreeBSD 13 — libvncserver — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libvncserver — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libvncserver — multiple buffer overflows Related CVEs: CVE-2014-6051 CVE-2014-6052 CVE-2014-6053 CVE-2014-6054 CVE-2014-6055 CVE-2016-9941 CVE-2016-9942 Upstream summary: libvnc server reports: Two unrelated buffer overflows can be used by a malicious server […]

Read more
FreeBSD 13 — botan — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — botan — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: botan2 — Side channel during ECC key generation Related CVEs: CVE-2014-9742 CVE-2015-5726 CVE-2015-5727 CVE-2015-7827 CVE-2016-2194 CVE-2016-2195 CVE-2016-2849 CVE-2018-12435  +1 more Upstream summary: botan2 developers reports: A timing side channel during […]

Read more
FreeBSD 13 — vips — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — vips — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Fix a buffer overflow in the tiff reader Upstream summary: libvips reports: A buffer overflow was found and fixed in the libvips code Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 13 — python+ipv — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — python+ipv — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: python — buffer overrun in repr() for unicode strings Related CVEs: CVE-2005-0089 CVE-2006-4980 Upstream summary: Benjamin C. Wiley Sittler reports: I discovered a [buffer overrun in repr() for unicode strings]. […]

Read more
FreeBSD 13 — ganglia-monitor-core — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ganglia-monitor-core — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ganglia — buffer overflow vulnerability Related CVEs: CVE-2009-0241 Upstream summary: Secunia reports: Spike Spiegel has discovered a vulnerability in Ganglia which can be exploited by malicious people to compromise a […]

Read more
Alpine Linux edge — prometheus-node-exporter — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — prometheus-node-exporter — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.5.0-r0 📖 ~4 min read  •  Source: Alpine secdb entry — prometheus-node-exporter 1.5.0-r0 Related CVEs: CVE-2022-46146 Upstream summary: Alpine community repository for vedge ships prometheus-node-exporter 1.5.0-r0 which addresses CVE-2022-46146. Table of contents Symptom & Impact Environment […]

Read more
Debian 11 — coin3 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — coin3 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a […]

Read more
FreeBSD 12 — py310-flask-caching — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py310-flask-caching — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-flask-caching — remote code execution or local privilege escalation vulnerabilities Related CVEs: CVE-2021-33026 Upstream summary: subnix reports: The Flask-Caching extension through 2.0.2 for Flask relies on Pickle for serialization, which […]

Read more
Debian 11 — golang-github-opencontainers-selinux — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — golang-github-opencontainers-selinux — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-16884 Upstream summary: runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a […]

Read more
CHAT