chris

Ubuntu 14.04 — freeipa — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — freeipa — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 October 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4792-1 Related CVEs: CVE-2016-5404 CVE-2016-7030 CVE-2016-9575 Upstream summary: It was discovered that FreeIPA incorrectly handled certificates. An attacker could possibly use this issue to cause a denial of service by […]

Read more
IBM AIX 7.2 — CVE-1999-0033 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-1999-0033 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 26 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-1999-0033, IBM PSIRT advisory page CVE: CVE-1999-0033 NVD summary: Command execution in Sun systems via buffer overflow in the at program. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & Impact Environment […]

Read more
Ubuntu 16.04 — util-linux — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — util-linux — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 October 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5478-1 Related CVEs: CVE-2016-5011 Upstream summary: Christian Moch and Michael Gruhn discovered that the libblkid library of util-linux did not properly manage memory under certain circumstances. A local attacker could […]

Read more
Ubuntu 14.04 — nvidia-graphics-drivers-367 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nvidia-graphics-drivers-367 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3122-1 Related CVEs: CVE-2016-7382 CVE-2016-7389 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain […]

Read more
IBM AIX 7.2 — CVE-1999-0513 — denial of service — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-1999-0513 — denial of service — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 21 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-1999-0513, IBM PSIRT advisory page CVE: CVE-1999-0513 NVD summary: ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE […]

Read more
Ubuntu 16.04 — nspr — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — nspr — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 October 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3028-1 Related CVEs: CVE-2016-1951 Upstream summary: It was discovered that NSPR incorrectly handled memory allocation. A remote attacker could use this issue to cause NSPR to crash, resulting in a […]

Read more
CHAT