Common Problems

Debian 11 — fastdds — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fastdds — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-38425 CVE-2023-24010 CVE-2023-39534 CVE-2023-39945 CVE-2023-39946 CVE-2023-39947 CVE-2023-39948 CVE-2023-39949  +12 more Upstream summary: eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends […]

Read more
Debian 11 — terminology — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — terminology — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8971 CVE-2018-20167 Upstream summary: Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, […]

Read more
Debian 11 — ibus-anthy — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ibus-anthy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the […]

Read more
Debian 11 — libxcb — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libxcb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-2064 Upstream summary: Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to […]

Read more
Ubuntu 18.04 — node-browserify-sign — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — node-browserify-sign — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6800-1 Related CVEs: CVE-2023-46234 Upstream summary: It was discovered that browserify-sign incorrectly handled an upper bound check in signature verification. If a user or an automated system were tricked into […]

Read more
Common Problems 111778

Windows Server 2022 — NPS extension MFA requests failing for RADIUS VPN logins — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 17 January 2023 Affected versions: Windows Server 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Ubuntu 18.04 — accountsservice — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — accountsservice — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 January 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6190-2 Related CVEs: CVE-2023-3297 CVE-2018-14036 CVE-2020-16126 CVE-2020-16127 Upstream summary: USN-6190-1 fixed a vulnerability in AccountsService. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu […]

Read more
Oracle Linux 8 — avahi — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — avahi — vulnerability — patch and remediation guide (ELSA-2023-7836)

🟡 Medium   ⏱ 10–30 min  Last verified: 17 January 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-7836 Related CVEs: CVE-2023-38469 CVE-2023-38472 CVE-2023-38470 CVE-2021-3468 CVE-2023-38471 CVE-2023-38473 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Oracle Linux 8 — httpd:2.4 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — httpd:2.4 — vulnerability — patch and remediation guide (ELSA-2022-7647)

🟡 Medium   ⏱ 10–30 min  Last verified: 17 January 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-7647 Related CVEs: CVE-2022-22721 CVE-2022-28615 CVE-2022-30522 CVE-2022-30556 CVE-2022-23943 CVE-2022-28614 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
IBM AIX 7.3 — CVE-2002-0679 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2002-0679 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 17 January 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2002-0679, IBM Support Bulletin CVE: CVE-2002-0679 NVD summary: Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the […]

Read more
CHAT