2022 - Page 699 of 828

Ubuntu 18.04 — symfony — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — symfony — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5290-1 Related CVEs: CVE-2021-21424 CVE-2021-41270 CVE-2018-11407 Upstream summary: James Isaac and Mathias Brodala discovered that Symfony incorrectly handled switch users functionality. An attacker could possibly use this issue to enumerate […]

Read more
SLES 15 — testng — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — testng — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 February 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:1690-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4065 CVE-2020-11022 CVE-2020-11023 Upstream summary: A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the […]

Read more
SLES 15 — crmsh — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — crmsh — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 February 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0083-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-35459 CVE-2021-3020 Upstream summary: An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were […]

Read more
SLES 12 — gd — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — gd — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:173-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14553 CVE-2021-40812 CVE-2016-10166 CVE-2016-10168 CVE-2016-5116 CVE-2016-6128 CVE-2016-6132 CVE-2016-6207  +12 more Upstream summary: gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference […]

Read more
IBM AIX 7.3 — CVE-2002-0742 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2002-0742 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 28 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2002-0742, IBM PSIRT advisory page CVE: CVE-2002-0742 NVD summary: Buffer overflow in pioout on AIX 4.3.3. References: archives.neohapsis.com/archives/aix/2002-q2/0005   archives.neohapsis.com/archives/aix/2002-q2/0005 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Amazon Linux 2 — xerces-j2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — xerces-j2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2024-2649 Related CVEs: CVE-2012-0881 CVE-2022-23437 Upstream summary: Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an […]

Read more
FreeBSD 13 — mysql-connector-odbc — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mysql-connector-odbc — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2021-22946 CVE-2021-3712 CVE-2022-1941 CVE-2022-2097 CVE-2022-21245 CVE-2022-21249 CVE-2022-21253 CVE-2022-21254  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 37 new security patches, plus […]

Read more
Debian 11 — hdf5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — hdf5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-4330 CVE-2016-4331 CVE-2016-4332 CVE-2016-4333 CVE-2017-17505 CVE-2017-17506 CVE-2017-17507 CVE-2017-17508  +12 more Upstream summary: In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array […]

Read more
CHAT