chris

Ubuntu 14.04 — gdk-pixbuf — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gdk-pixbuf — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3532-1 Related CVEs: CVE-2017-1000422 CVE-2017-6312 CVE-2017-6313 CVE-2017-6314 CVE-2017-2862 CVE-2017-2870 CVE-2017-6311 CVE-2015-7552  +5 more Upstream summary: It was discoreved that GDK-PixBuf incorrectly handled certain gif images. An attacker could use this […]

Read more
Debian 9 — poco — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — poco — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 March 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-1000472 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 16.04 — libcrypto++ — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libcrypto++ — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4827-1 Related CVEs: CVE-2017-9434 Upstream summary: It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information. Table of contents Symptom & […]

Read more
Ubuntu 16.04 — soundtouch — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — soundtouch — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4826-1 Related CVEs: CVE-2017-9258 CVE-2017-9259 CVE-2017-9260 CVE-2018-1000223 CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Upstream summary: It was discovered that SoundTouch incorrectly handled certain WAV files. A remote attacker could possibly use this issue […]

Read more
Ubuntu 16.04 — igraph — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — igraph — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4644-1 Related CVEs: CVE-2018-20349 Upstream summary: It was discovered that igraph mishandled certain malformed XML. An attacker could use this vulnerability to cause a denial of service (crash). Table of […]

Read more
Ubuntu 16.04 — libnl3 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libnl3 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3311-1 Related CVEs: CVE-2017-0553 Upstream summary: It was discovered that libnl incorrectly handled memory when performing certain operations. A local attacker could possibly use this issue to cause libnl to […]

Read more
Debian 9 — memcached — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — memcached — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 March 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9951 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 16.04 — sharutils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — sharutils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3605-1 Related CVEs: CVE-2018-1000097 Upstream summary: It was discovered that Sharutils incorrectly handled certain files. An attacker could possibly use this to execute arbitrary code. Table of contents Symptom & […]

Read more
Ubuntu 16.04 — spice-protocol — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — spice-protocol — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3751-1 Related CVEs: CVE-2018-10873 CVE-2017-12194 Upstream summary: It was discovered that Spice incorrectly handled certain messages. An attacker could possibly use this issue to cause a denial of service. Table […]

Read more
SLES 12 — librelp0 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — librelp0 — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 10 March 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0822-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000140 Upstream summary: rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can […]

Read more
CHAT