BSD

FreeBSD 12 — spamass-milter — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — spamass-milter — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spamass-milter — remote command execution vulnerability Related CVEs: CVE-2010-1132 Upstream summary: The spamassassin milter plugin contains a vulnerability that can allow remote attackers to execute commands on affected systems. The […]

Read more
FreeBSD 12 — netqmail — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — netqmail — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qmail — 64 bit integer overflows with possible remote code execution on large SMTP requests Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 Upstream summary: Georgi Guninski writes: There are several issues with […]

Read more
FreeBSD 12 — zhTW-linux-mozillafirebird — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zhTW-linux-mozillafirebird — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
FreeBSD 12 — irssi-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — irssi-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: irssi — multiple vulnerabilities Related CVEs: CVE-2010-1155 CVE-2010-1156 Upstream summary: Two vulnerabilities have found in irssi. The first issue could allow man-in-the-middle attacks due to a missing comparison of SSL […]

Read more
FreeBSD 12 — pcal — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pcal — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pcal — buffer overflow vulnerabilities Related CVEs: CVE-2004-1289 Upstream summary: Danny Lungstrom has found two buffer overflow vulnerabilities in pcal which can lead to execution of arbitrary code by making […]

Read more
FreeBSD 12 — rdesktop — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rdesktop — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rdesktop – critical – Remote Code Execution Related CVEs: CVE-2018-20174 CVE-2018-20175 CVE-2018-20176 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181  +11 more Upstream summary: Fix memory corruption in process_bitmap_data – CVE-2018-8794 Fix remote […]

Read more
FreeBSD 12 — powerdns — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — powerdns — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: powerdns — denial of service Related CVEs: CVE-2005-2302 CVE-2012-0206 CVE-2015-1868 CVE-2015-5230 CVE-2015-5311 CVE-2015-5470 CVE-2016-2120 CVE-2016-6170  +12 more Upstream summary: PowerDNS Team reports: PowerDNS Security Advisory 2022-01: incomplete validation of incoming […]

Read more
FreeBSD 12 — bind98-base — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — bind98-base — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2012-5166 CVE-2012-5688 CVE-2013-2266 CVE-2013-3919 CVE-2013-4854 CVE-2014-0591 CVE-2014-8500 CVE-2014-8680 Upstream summary: ISC reports: We have today posted updated versions of 9.9.6 and 9.10.1 […]

Read more
FreeBSD 12 — py33-graphite-web — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py33-graphite-web — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-graphite-web — Multiple vulnerabilities Related CVEs: CVE-2013-5093 Upstream summary: Graphite developers report: This release contains several security fixes for cross-site scripting (XSS) as well as a fix for a remote-execution […]

Read more
FreeBSD 12 — xtrlock — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xtrlock — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xtrlock — xtrlock does not block multitouch events Related CVEs: CVE-2005-0079 CVE-2016-10894 Upstream summary: Debian reports: xtrlock did not block multitouch events so an attacker could still input and thus […]

Read more
CHAT