🟡 Medium ⏱ 10–30 min Last verified: 29 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7055-1 Related CVEs: CVE-2024-3596 CVE-2019-17185 CVE-2022-41860 CVE-2022-41861 Upstream summary: Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl discovered that FreeRADIUS incorrectly authenticated certain responses. […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4060-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-42811 CVE-2023-22895 Upstream summary: aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 12.3.0-r0 📖 ~4 min read • Source: Alpine secdb entry — open-vm-tools 12.3.0-r0 Related CVEs: CVE-2023-20900 CVE-2023-20867 CVE-2022-31676 Upstream summary: Alpine community repository for vv3.18 ships open-vm-tools 12.3.0-r0 which addresses CVE-2023-20900. Table of contents Symptom & […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5034765 • MSRC update-guide entry Related CVEs: CVE-2024-21357 CVE-2024-21340 CVE-2024-21349 CVE-2024-21350 CVE-2024-21352 CVE-2024-21354 CVE-2024-21358 CVE-2024-21360 +12 more Affected components: Windows Server 2016 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0965-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0911 CVE-2023-40305 Upstream summary: A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a […]
🟠 High ⏱ 15–60 min Last verified: 29 March 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-8024 Related CVEs: CVE-2024-9680 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2040-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-3049 Upstream summary: A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow […]
🟠 High ⏱ 15–60 min Last verified: 29 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: webkit2-gtk3 — multiple vulnerabilities Related CVEs: CVE-2017-13783 CVE-2017-13784 CVE-2017-13785 CVE-2017-13788 CVE-2017-13791 CVE-2017-13792 CVE-2017-13794 CVE-2017-13795 +12 more Upstream summary: The WebKitGTK project reports vulnerabilities: CVE-2021-30858: Processing maliciously crafted web content may […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2011-1092 Upstream summary: pkgsrc audit-packages flagged php5-shmop<5.2.17nb1 for vulnerability class 'denial-of-service'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1092 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2023-023 Related CVEs: CVE-2023-5090 CVE-2023-5197 CVE-2023-5717 Upstream summary: x86: KVM: SVM: always update the x2avic msr interception (CVE-2023-5090) A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be […]
