Common Problems

Debian 11 — libmodule-metadata-perl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libmodule-metadata-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1437 Upstream summary: Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value. Table of […]

Read more
Ubuntu 14.04 — snakeyaml — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — snakeyaml — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 December 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7368-1 Related CVEs: CVE-2017-18640 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 Upstream summary: It was discovered that SnakeYAML incorrectly handled recursive entity references. An attacker could possibly use this issue to cause SnakeYAML […]

Read more
Ubuntu 20.04 — nbd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — nbd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 December 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5323-1 Related CVEs: CVE-2022-26495 CVE-2022-26496 Upstream summary: It was discovered that NBD incorrectly handled name length fields. A remote attacker could use this issue to cause NBD to crash, resulting […]

Read more
Ubuntu 18.04 — exo — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — exo — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 December 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6008-1 Related CVEs: CVE-2022-32278 Upstream summary: It was discovered that Exo did not properly sanitized desktop files. A remote attacker could possibly use this issue to to cause a crash […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide (ELSA-2022-9426)

🟠 High   ⏱ 15–60 min  Last verified: 24 December 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-9426 Related CVEs: CVE-2022-21499 CVE-2022-1786 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
IBM AIX 7.3 — CVE-2019-4193 — information disclosure — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2019-4193 — information disclosure — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 24 December 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2019-4193, IBM Support Bulletin CVE: CVE-2019-4193 NVD summary: IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have […]

Read more
Common Problems 119059

Ubuntu 14.04 LTS – kernel panic after package upgrade

🔴 Critical   ⏱ 5–30 min  Last verified: 23 December 2022 Affected versions: Ubuntu 14.04 LTS Ubuntu 14.04 Ubuntu 14.04.6 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]

Read more
FreeBSD 13 — nextcloud-calendar — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — nextcloud-calendar — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 December 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Nextcloud Calendar — SMTP Command Injection Related CVEs: CVE-2022-24838 Upstream summary: reports: SMTP Command Injection in Appointment Emails via Newlines: as newlines and special characters are not sanitized in the […]

Read more
Common Problems 119008

Ubuntu 14.04 LTS /var Full from Log Growth Breaks Services

🟡 Medium   ⏱ 5–30 min  Last verified: 23 December 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
FreeBSD 13 — py311-Scrapy — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py311-Scrapy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 December 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-Scrapy — DoS vulnerability Related CVEs: CVE-2017-14158 CVE-2022-0577 Upstream summary: kmike and nramirezuy report: Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files […]

Read more
CHAT