Common Problems

FreeBSD 13 — bind96-base — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — bind96-base — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2012-5166 CVE-2013-3919 CVE-2014-0591 CVE-2014-8500 CVE-2014-8680 Upstream summary: ISC reports: We have today posted updated versions of 9.9.6 and 9.10.1 to address a […]

Read more
FreeBSD 13 — racoon — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — racoon — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: racoon — remote denial-of-service Related CVEs: CVE-2004-0155 CVE-2004-0164 CVE-2004-0183 CVE-2004-0184 CVE-2004-0392 CVE-2004-0403 CVE-2005-0398 Upstream summary: Sebastian Krahmer discovered that the racoon ISAKMP daemon could be crashed with a maliciously crafted […]

Read more
FreeBSD 13 — roundcube-thunderbird_labels — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — roundcube-thunderbird_labels — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: roundcube-thunderbird_labels — RCE with custom label titles Upstream summary: The Roundcube project reports: Description: Remote code execution vulnerability in roundcube-thunderbird_labels when tb_label_modify_labels is enabled. Workaround: If you cannot upgrade to […]

Read more
FreeBSD 13 — ircd-ratbox — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ircd-ratbox — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ircd-ratbox and charybdis — remote DoS vulnerability Related CVEs: CVE-2009-4016 CVE-2010-0300 Upstream summary: atheme.org reports: All versions of Charybdis are vulnerable to a remotely-triggered crash bug caused by code originating […]

Read more
Debian 11 — vtk6 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — vtk6 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-42521 Upstream summary: There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 […]

Read more
Debian 11 — tnef — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — tnef — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 CVE-2017-8911 CVE-2019-18849 Upstream summary: An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to […]

Read more
Debian 11 — squashfs-tools — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — squashfs-tools — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-4024 CVE-2012-4025 CVE-2015-4645 CVE-2015-4646 CVE-2021-40153 CVE-2021-41072 Upstream summary: Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to […]

Read more
Debian 11 — php-dompdf — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — php-dompdf — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-4879 CVE-2014-2383 CVE-2014-5011 CVE-2014-5012 CVE-2014-5013 CVE-2021-3838 CVE-2022-2400 Upstream summary: PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code […]

Read more
CHAT