May 2025 - Page 87 of 103

FreeBSD 14 — clamav — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — clamav — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: clamav — ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Related CVEs: CVE-2004-0270 CVE-2005-0133 CVE-2005-1922 CVE-2005-1923 CVE-2005-2919 CVE-2005-2920 CVE-2006-0162 CVE-2006-1614  +12 more Upstream summary: Cisco reports: A vulnerability in […]

Read more
FreeBSD 14 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — multiple security issues Related CVEs: CVE-2007-3389 CVE-2007-3390 CVE-2007-3391 CVE-2007-3392 CVE-2007-3393 CVE-2007-6112 CVE-2007-6113 CVE-2007-6114  +12 more Upstream summary: wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. (CVE-2018-7335) wnpa-sec-2018-06. Large […]

Read more
NetBSD 10.0 — ruby26 — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — ruby26 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged ruby26-* for vulnerability class 'eol'. Reference: https://www.ruby-lang.org/en/downloads/branches/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
FreeBSD 14 — ctorrent — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ctorrent — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Enhanced cTorrent — stack-based overflow Related CVEs: CVE-2009-1759 Upstream summary: Securityfocus reports: cTorrent and dTorrent are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied […]

Read more
FreeBSD 14 — dante — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — dante — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible to overwrite memory […]

Read more
FreeBSD 14 — mod_access_referer — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mod_access_referer — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_access_referer — null pointer dereference vulnerability Related CVEs: CVE-2003-1054 Upstream summary: A malformed Referer header field causes the Apache ap_parse_uri_components function to discard it with the result that a pointer […]

Read more
NetBSD 10.0 — ruby-mysql — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — ruby-mysql — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-3779 Upstream summary: pkgsrc audit-packages flagged ruby{26,27,30,31}-mysql<2.10.0 for vulnerability class 'local-file-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-3779 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
NetBSD 10.0 — postgresql96 — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — postgresql96 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-32027 Upstream summary: pkgsrc audit-packages flagged postgresql96<9.6.22 for vulnerability class 'arbitrary-file-write'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-32027 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
FreeBSD 14 — messagelib — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — messagelib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: messagelib — HTML email can open browser window automatically Related CVEs: CVE-2018-19516 Upstream summary: Albert Astals Cid reports: messagelib is the library used by KMail to display emails. messagelib by […]

Read more
FreeBSD 14 — surf — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — surf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: surf — private information disclosure Related CVEs: CVE-2012-0842 Upstream summary: surf does not protect its cookie jar against access read access from other local users Table of contents Symptom & […]

Read more
CHAT