BSD

FreeBSD 13 — php56-mysqli — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php56-mysqli — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]

Read more
FreeBSD 13 — py27-requests — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py27-requests — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: www/py-requests — Information disclosure vulnerability Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which […]

Read more
FreeBSD 13 — payara — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — payara — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Payara — path trasversal flaw via either loc/con parameters in Eclipse Mojarra Related CVEs: CVE-2016-1000031 CVE-2016-5528 CVE-2017-12615 CVE-2017-3239 CVE-2017-3247 CVE-2017-3249 CVE-2017-3250 CVE-2018-14371  +7 more Upstream summary: Payara Releases reports: The […]

Read more
FreeBSD 13 — sudosh — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — sudosh — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sudosh — buffer overflow Upstream summary: ISS reports: sudosh2 and sudosh3 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the replay() function. By persuading a […]

Read more
FreeBSD 13 — wireshark-qt — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — wireshark-qt — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — multiple security issues Related CVEs: CVE-2015-6241 CVE-2015-6242 CVE-2015-6243 CVE-2015-6244 CVE-2015-6245 CVE-2015-6246 CVE-2015-6247 CVE-2015-6248  +12 more Upstream summary: wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. (CVE-2018-7335) wnpa-sec-2018-06. Large […]

Read more
FreeBSD 13 — suphp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — suphp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: suPHP — Privilege escalation Related CVEs: CVE-2008-1614 Upstream summary: suPHP developer Sebastian Marsching reports: When the suPHP_PHPPath was set, mod_suphp would use the specified PHP executable to pretty-print PHP source […]

Read more
FreeBSD 13 — amaya — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — amaya — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: amaya — multiple buffer overflow vulnerabilities Related CVEs: CVE-2006-1900 CVE-2008-5282 CVE-2009-0323 Upstream summary: Secunia reports: A boundary error when processing "div" HTML tags can be exploited to cause a stack-based […]

Read more
FreeBSD 13 — isc-dhcp31-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — isc-dhcp31-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcp-server — server halt upon processing certain packets Related CVEs: CVE-2011-2748 CVE-2011-2749 Upstream summary: ISC reports: A pair of defects cause the server to halt upon processing certain packets. The […]

Read more
FreeBSD 13 — freeciv — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — freeciv — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: freeciv — Denial of Service Vulnerabilities Related CVEs: CVE-2006-0047 CVE-2006-3913 Upstream summary: Secunia reports: Luigi Auriemma has reported a vulnerability in Freeciv, which can be exploited by malicious people to […]

Read more
FreeBSD 13 — firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox — Memory safety bugs present in Firefox 150 Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0722 CVE-2004-0758  +12 more Upstream summary: https://www.mozilla.org/en-US/security/advisories/mfsa2026-40/ reports: Memory safety bugs present in […]

Read more
CHAT