BSD

FreeBSD 12 — subversion — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — subversion — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Subversion — Multiple vulnerabilities in server code Related CVEs: CVE-2004-0397 CVE-2004-0749 CVE-2009-2411 CVE-2010-4539 CVE-2010-4644 CVE-2011-0715 CVE-2011-1752 CVE-2011-1783  +12 more Upstream summary: Subversion project reports: Subversion servers reveal 'copyfrom' paths that […]

Read more
FreeBSD 12 — php4-dba — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php4-dba — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — ini database truncation inside dba_replace() function Related CVEs: CVE-2008-7068 Upstream summary: securityfocus research reports: A bug that leads to the emptying of the INI file contents if the […]

Read more
FreeBSD 12 — finch — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — finch — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pidgin — MSN overflow parsing SLP messages Related CVEs: CVE-2009-1373 CVE-2009-1374 CVE-2009-1375 CVE-2009-1376 CVE-2009-2694 Upstream summary: Secunia reports: A vulnerability has been reported in Pidgin, which can be exploited by […]

Read more
FreeBSD 12 — peercast — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — peercast — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: peercast — arbitrary code execution Related CVEs: CVE-2007-6454 CVE-2008-2040 Upstream summary: Nico Golde discovered that PeerCast, a P2P audio and video streaming server, is vulnerable to a buffer overflow in […]

Read more
FreeBSD 12 — php56-snmp — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php56-snmp — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292  +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
FreeBSD 12 — nap — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — nap — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nap allows arbitrary file access Upstream summary: According to the author: Fixed security loophole which allowed remote clients to access arbitrary files on our system. Table of contents Symptom & […]

Read more
FreeBSD 12 — newspost — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — newspost — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: newspost — server response buffer overflow vulnerability Related CVEs: CVE-2005-0101 Upstream summary: The newspost program uses a function named socket_getline to read server responses from the network socket. Unfortunately this […]

Read more
FreeBSD 12 — gstreamer-ffmpeg — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gstreamer-ffmpeg — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2011-3892 CVE-2011-3893 CVE-2011-3895 CVE-2011-3929 CVE-2011-3936 CVE-2011-3937 CVE-2011-3940 CVE-2011-3945  +12 more Upstream summary: NVD reports: The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does […]

Read more
FreeBSD 12 — py27-supervisor — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py27-supervisor — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Supervisord — An authenticated client can run arbitrary shell commands via malicious XML-RPC requests Related CVEs: CVE-2017-11610 Upstream summary: mnaberez reports: supervisord can be configured to run an HTTP server […]

Read more
FreeBSD 12 — milter-bogom — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — milter-bogom — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: milter-bogom — headerless message crash Upstream summary: Juan J. Marítnez reports: The milter crashes while processing a headerless message Impact: bogom crashes and sendmail moves it to error state Table […]

Read more
CHAT