BSD

FreeBSD 12 — ghostscript9-nox — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ghostscript9-nox — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

Read more
FreeBSD 12 — p5-HTML-Scrubber — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p5-HTML-Scrubber — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-HTML-Scrubber — XSS vulnerability Related CVEs: CVE-2015-5667 Upstream summary: MITRE reports: Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows […]

Read more
FreeBSD 12 — nagios-plugins — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — nagios-plugins — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nagios-plugins — Long Location Header Buffer Overflow Vulnerability Related CVEs: CVE-2007-5198 Upstream summary: A Secunia Advisory reports: The vulnerability is caused due to a boundary error within the redir() function […]

Read more
FreeBSD 12 — ruby_r — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ruby_r — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ruby — CGI DoS Related CVEs: CVE-2004-0983 Upstream summary: The Ruby CGI.rb module contains a bug which can cause the CGI module to go into an infinite loop, thereby causing […]

Read more
FreeBSD 12 — linux-flock — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-flock — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2007-4879 CVE-2007-5959 CVE-2008-0016 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0417  +12 more Upstream summary: The Mozilla Foundation reports: MFSA 2008-37 UTF-8 URL stack buffer overflow MFSA […]

Read more
FreeBSD 12 — pure-ftpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pure-ftpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pureftpd — multiple vulnerabilities Related CVEs: CVE-2011-0418 CVE-2011-1575 Upstream summary: Pure-FTPd development team reports: Support for braces expansion in directory listings has been disabled — Cf. CVE-2011-0418. Fix a STARTTLS […]

Read more
FreeBSD 12 — miniupnpc — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — miniupnpc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: miniupnpc — integer signedness error Related CVEs: CVE-2015-6031 CVE-2017-8798 Upstream summary: Tintinweb reports: An integer signedness error was found in miniupnp's miniwget allowing an unauthenticated remote entity typically located on […]

Read more
CHAT