2022 - Page 776 of 828

Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide (ELSA-2022-9181)

🟠 High   ⏱ 15–60 min  Last verified: 25 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-9181 Related CVEs: CVE-2022-25636 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
SLES 12 — log4j — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — log4j — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 January 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0053-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-17571 CVE-2022-23305 CVE-2022-23307 CVE-2021-4104 CVE-2022-23302 Upstream summary: Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can […]

Read more
IBM AIX 7.2 — CVE-2021-29798 — sql injection — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2021-29798 — sql injection — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 24 January 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2021-29798, IBM Support Bulletin CVE: CVE-2021-29798 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which […]

Read more
FreeBSD 13 — libtremor — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libtremor — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2008-1418 CVE-2008-1419 CVE-2008-1420 CVE-2008-1423 CVE-2008-2009 CVE-2012-0444 CVE-2018-5146 CVE-2018-5147 Upstream summary: The Mozilla Foundation reports: CVE-2018-5146: Out of bounds memory write in libvorbis An out […]

Read more
FreeBSD 13 — tinyproxy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — tinyproxy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tinyproxy — ACL lists ineffective when range is configured Related CVEs: CVE-2011-1499 Upstream summary: When including a line to allow a network of IP addresses, the access to tinyproxy 56 […]

Read more
How to Configure Redis Sentinel on CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Configure Redis Sentinel on CentOS Stream 9

Introduction This tutorial demonstrates how to Configure Redis Sentinel on CentOS Stream 9 on CentOS Stream 9. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered CentOS Stream 9 system with the default […]

Read more
FreeBSD 13 — zh-mutt-devel — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zh-mutt-devel — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt — Remote Buffer Overflow Vulnerability Upstream summary: SecurityFocus reports: Mutt is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied […]

Read more
FreeBSD 12 — teeworlds — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — teeworlds — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Teeworlds — Buffer Overflow Related CVEs: CVE-2021-43518 Upstream summary: NVD reports: Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value […]

Read more
FreeBSD 13 — zebra — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zebra — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zebra/quagga denial of service vulnerability Related CVEs: CVE-2003-0858 Upstream summary: A remote attacker could cause zebra/quagga to crash by sending a malformed telnet command to their management port. Table of […]

Read more
CHAT