chris

Ubuntu 14.04 — fontconfig — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — fontconfig — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 September 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3063-1 Related CVEs: CVE-2016-5384 Upstream summary: Tobias Stoeckmann discovered that Fontconfig incorrectly handled cache files. A local attacker could possibly use this issue with a specially crafted cache file to […]

Read more
IBM AIX 7.2 — CVE-2002-0677 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2002-0677 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 17 September 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2002-0677, IBM PSIRT advisory page CVE: CVE-2002-0677 NVD summary: CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file […]

Read more
Ubuntu 16.04 — vnc4 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — vnc4 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 September 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4772-1 Related CVEs: CVE-2015-0255 CVE-2015-1283 Upstream summary: USN-2500-1 addressed CVE-2015-0255 for xorg-server. This update provides the corresponding fix for VNC4 on Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2015-0255) USN-2726-1 […]

Read more
IBM AIX 7.2 — CVE-2011-1384 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2011-1384 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 12 September 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2011-1384, IBM Support Bulletin CVE: CVE-2011-1384 NVD summary: The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete […]

Read more
IBM AIX 7.2 — CVE-2007-2996 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2007-2996 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 11 September 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2007-2996, IBM Support Bulletin CVE: CVE-2007-2996 NVD summary: Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges […]

Read more
SLES 12 — fontconfig — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — fontconfig — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 September 2016 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:2186-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-5384 Upstream summary: fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks […]

Read more
CHAT