BSD

FreeBSD 12 — ruby+nopthreads — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ruby+nopthreads — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Multiple implementations — DoS via hash algorithm collision Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 Upstream summary: oCERT reports: A variety of programming languages suffer from a denial-of-service (DoS) condition against […]

Read more
FreeBSD 12 — py27-amf — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py27-amf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-amf — input sanitization errors Related CVEs: CVE-2015-8549 Upstream summary: oCERT reports: A specially crafted AMF payload, containing malicious references to XML external entities, can be used to trigger Denial […]

Read more
FreeBSD 12 — zh-openoffice-CN — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zh-openoffice-CN — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
FreeBSD 12 — i2p — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — i2p — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: i2p — Multiple Vulnerabilities Upstream summary: The i2p project reports: XSS and remote execution vulnerabilities reported by Exodus Intelligence. Exodus Intelligence reports: The vulnerability we have found is able to […]

Read more
FreeBSD 12 — it-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — it-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
FreeBSD 12 — opendchub — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — opendchub — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Open DC Hub — remote buffer overflow vulnerability Upstream summary: Donato Ferrante reported an exploitable buffer overflow in this software package. Any user that can login with 'admin' privileges can […]

Read more
FreeBSD 12 — silc-irssi-client — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — silc-irssi-client — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: silc-client — Format string vulnerability Related CVEs: CVE-2009-3051 Upstream summary: SILC changelog reports: An unspecified format string vulnerability exists in silc-client. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 12 — libXvMC — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXvMC — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]

Read more
FreeBSD 12 — gimp-app — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gimp-app — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: The GIMP — Use after Free vulnerability Related CVEs: CVE-2016-4994 Upstream summary: The GIMP team reports: A Use-after-free vulnerability was found in the xcf_load_image function. Table of contents Symptom & […]

Read more
FreeBSD 12 — xpcd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xpcd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpcd — buffer overflow Related CVEs: CVE-2005-0074 Upstream summary: Debian Project reports: Erik Sjolund discovered a buffer overflow in pcdsvgaview, an SVGA PhotoCD viewer. xpcd-svga is part of xpcd and […]

Read more
CHAT