Common Problems

FreeBSD 13 — openwebmail — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openwebmail — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: "Content-Type" XSS vulnerability affecting other webmail systems Related CVEs: CVE-2004-0519 Upstream summary: Roman Medina-Heigl Hernandez did a survey which other webmail systems where vulnerable to a bug he discovered in […]

Read more
Debian 11 — recon-ng — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — recon-ng — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-20752 Upstream summary: An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifically, when a Twitter user possesses […]

Read more
Debian 11 — swi-prolog — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — swi-prolog — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-6089 CVE-2012-6090 CVE-2017-17524 Upstream summary: Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause […]

Read more
openSUSE Tumbleweed — qtox — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — qtox — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1640-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-44847 Upstream summary: A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper […]

Read more
Ubuntu 20.04 — xz-utils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — xz-utils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5378-2 Related CVEs: CVE-2022-1271 Upstream summary: Cleemy Desu Wayo discovered that XZ Utils incorrectly handled certain filenames. If a user or automated system were tricked into performing xzgrep operations with […]

Read more
Ubuntu 16.04 — libksba — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libksba — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5787-2 Related CVEs: CVE-2022-47629 CVE-2022-3515 CVE-2016-4353 CVE-2016-4354 CVE-2016-4355 CVE-2016-4356 CVE-2016-4574 CVE-2016-4579 Upstream summary: USN-5787-1 fixed vulnerabilities in Libksba. This update provides the corresponding updates for Ubuntu 16.04 ESM and Ubuntu […]

Read more
Oracle Linux 8 — expat — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — expat — vulnerability — patch and remediation guide (ELSA-2022-0951)

🟠 High   ⏱ 15–60 min  Last verified: 20 February 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-0951 Related CVEs: CVE-2022-25235 CVE-2022-22825 CVE-2022-22823 CVE-2022-23852 CVE-2021-45960 CVE-2021-46143 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Amazon Linux 2 — nss-util — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — nss-util — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2021-1722 Related CVEs: CVE-2021-43527 CVE-2019-11729 CVE-2019-11745 CVE-2019-11719 CVE-2019-11727 CVE-2019-11756 CVE-2019-17006 CVE-2019-17023  +5 more Upstream summary: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow […]

Read more
Debian 11 — docker.io — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — docker.io — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-0047 CVE-2014-0048 CVE-2014-5277 CVE-2014-5278 CVE-2014-5282 CVE-2014-6407 CVE-2014-6408 CVE-2014-8178  +12 more Upstream summary: Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. […]

Read more
IBM AIX 7.3 — CVE-2021-20560 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2021-20560 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 19 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2021-20560, IBM Support Bulletin CVE: CVE-2021-20560 NVD summary: IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading […]

Read more
CHAT