Common Problems

FreeBSD 13 — gcab — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — gcab — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gcab — stack overflow Related CVEs: CVE-2018-5345 Upstream summary: Upstream reports: A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash […]

Read more
FreeBSD 13 — bitmessage — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — bitmessage — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bitmessage — remote code execution vulnerability Upstream summary: Bitmessage developers report: A remote code execution vulnerability has been spotted in use against some users running PyBitmessage v0.6.2. The cause was […]

Read more
Common Problems 113511

Windows Server 2012 R2 — SNMP service stops responding to queries — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 23 September 2022 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
FreeBSD 13 — php4-mbstring — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php4-mbstring — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-mbstring — php mbstring buffer overflow vulnerability Related CVEs: CVE-2008-5557 Upstream summary: SecurityFocus reports: PHP is prone to a buffer-overflow vulnerability because it fails to perform boundary checks before copying […]

Read more
Debian 11 — deluge — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — deluge — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-7178 CVE-2017-9031 CVE-2021-3427 Upstream summary: CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an […]

Read more
Debian 11 — pspp — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pspp — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-10791 CVE-2017-10792 CVE-2017-12958 CVE-2017-12959 CVE-2017-12960 CVE-2017-12961 CVE-2018-20230 CVE-2019-9211  +10 more Upstream summary: There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP […]

Read more
Debian 11 — sniffit — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — sniffit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-5439 Upstream summary: Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non-eXecutable bit NX, stack smashing protector […]

Read more
Ubuntu 18.04 — php-dompdf — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — php-dompdf — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 September 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6277-1 Related CVEs: CVE-2014-5011 CVE-2014-5012 CVE-2014-5013 CVE-2021-3838 CVE-2022-2400 Upstream summary: It was discovered that Dompdf was not properly validating untrusted input when processing HTML content under certain circumstances. An attacker […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide (ELSA-2022-9690)

🟠 High   ⏱ 15–60 min  Last verified: 23 September 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-9690 Related CVEs: CVE-2022-2588 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT