🟡 Medium ⏱ 10–30 min Last verified: 24 December 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7368-1 Related CVEs: CVE-2017-18640 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 Upstream summary: It was discovered that SnakeYAML incorrectly handled recursive entity references. An attacker could possibly use this issue to cause SnakeYAML […]
🟢 Low ⏱ 5–15 min Last verified: 24 December 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5323-1 Related CVEs: CVE-2022-26495 CVE-2022-26496 Upstream summary: It was discovered that NBD incorrectly handled name length fields. A remote attacker could use this issue to cause NBD to crash, resulting […]
🟢 Low ⏱ 5–15 min Last verified: 24 December 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6008-1 Related CVEs: CVE-2022-32278 Upstream summary: It was discovered that Exo did not properly sanitized desktop files. A remote attacker could possibly use this issue to to cause a crash […]
🟠 High ⏱ 15–60 min Last verified: 24 December 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9426 Related CVEs: CVE-2022-21499 CVE-2022-1786 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
Ein „LAMP“-Stack ist eine aus Open-Source-Software bestehende Gruppe, die normalerweise zusammenhängend installiert wird, damit ein Server dynamische Websites und in PHP geschriebene Web-Apps hosten kann. Dieser Begriff ist ein Akronym, das für das Linux-Betriebssystem mit…
SSH, o shell seguro, es la forma más común de administrar servidores Linux de forma remota. A pesar de que el demonio permite la autenticación con contraseña, exponer una cuenta protegida por contraseña a la red puede exponer a su servidor a ataques de fuerza bruta. En esta guía, demostramos cómo puede configurar su servidor con claves SSH, el cual es el método de autenticación recomendado. Es mucho más difícil que los atacantes las eviten, lo que le proporciona un mecanismo de inicio de sesión
🔴 Critical ⏱ 5–30 min Last verified: 23 December 2022 Affected versions: Ubuntu 14.04 LTS Ubuntu 14.04 Ubuntu 14.04.6 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]
🟡 Medium ⏱ 5–30 min Last verified: 23 December 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟠 High ⏱ 5–30 min Last verified: 23 December 2022 Affected versions: Ubuntu 22.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟡 Medium ⏱ 10–30 min Last verified: 23 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1340 CVE-2005-0108 CVE-2015-9542 Upstream summary: Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, which allows local users to obtain sensitive information. Table […]
