Common Problems

IBM AIX 7.3 — CVE-2021-29833 — xss — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2021-29833 — xss — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 19 November 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2021-29833, IBM Support Bulletin CVE: CVE-2021-29833 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript […]

Read more
Common Problems 119074

Ubuntu 14.04 LTS CIFS Mount Fails at Boot

🟡 Medium   ⏱ 5–30 min  Last verified: 19 November 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
IBM AIX 7.2 — CVE-2022-35720 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2022-35720 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 10–30 min  Last verified: 19 November 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2022-35720, IBM Support Bulletin CVE: CVE-2022-35720 NVD summary: IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation that could allow a […]

Read more
IBM AIX 7.3 — CVE-2001-1330 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2001-1330 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 19 November 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2001-1330, IBM PSIRT advisory page CVE: CVE-2001-1330 NVD summary: Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. References: archives.neohapsis.com/archives/bugtraq/2001-06/ […]

Read more
FreeBSD 12 — py37-tensorflow — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py37-tensorflow — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-tensorflow — denial of service vulnerability Related CVEs: CVE-2022-35935 CVE-2022-35941 CVE-2022-35991 Upstream summary: Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report: Another instance of CVE-2022-35935, where `SobolSample` is […]

Read more
Debian 11 — pdftk — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pdftk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-37819 Upstream summary: PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
Common Problems 116949

Ubuntu 22.04 LTS – SSH service is active but remote login is refused

🟠 High   ⏱ 5–30 min  Last verified: 19 November 2022 Affected versions: Ubuntu 22.04 LTS Ubuntu 22.04 Ubuntu 22.04.4 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]

Read more
Debian 11 — awffull — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — awffull — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-0510 CVE-2007-3299 Upstream summary: Multiple buffer overflows in (1) graphs.c, (2) output.c, and (3) preserve.c in AWFFull 3.7.1 and earlier have unknown impact and attack vectors. NOTE: some […]

Read more
Debian 11 — ruby-will-paginate — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-will-paginate — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-6459 Upstream summary: Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving […]

Read more
Debian 11 — yasm — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — yasm — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-33454 CVE-2021-33455 CVE-2021-33456 CVE-2021-33457 CVE-2021-33458 CVE-2021-33459 CVE-2021-33460 CVE-2021-33461  +12 more Upstream summary: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() […]

Read more
CHAT