Common Problems

Common Problems 125193

Oracle Linux 8 – Common Problem 023 – Diagnosis and Fix

🟢 Low   ⏱ 5–30 min  Last verified: 29 January 2022 Affected versions: Oracle Linux 8 📖 ~3 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
IBM AIX 7.3 — CVE-2021-38954 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2021-38954 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 29 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2021-38954, IBM Support Bulletin CVE: CVE-2021-38954 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks […]

Read more
FreeBSD 13 — squashfs-tools — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — squashfs-tools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: squashfs-tools — Integer overflow Related CVEs: CVE-2015-4645 Upstream summary: Phillip Lougher reports: Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a […]

Read more
FreeBSD 13 — mt-daapd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mt-daapd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mt-daapd — integer overflow Related CVEs: CVE-2007-5824 CVE-2008-1771 Upstream summary: FrSIRT reports: A vulnerability has been identified in mt-daapd which could be exploited by remote attackers to cause a denial […]

Read more
FreeBSD 13 — unarj — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — unarj — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unarj — long filename buffer overflow Related CVEs: CVE-2004-0947 CVE-2004-1027 Upstream summary: Ludwig Nussel has discovered a buffer overflow vulnerability in unarj's handling of long filenames which could potentially lead […]

Read more
Common Problems 115012

RHEL 8 systemd Service Enters Restart Loop After Configuration Change

🟠 High   ⏱ 5–30 min  Last verified: 29 January 2022 Affected versions: 8.6 8.7 8.8 8.9 8.10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening […]

Read more
FreeBSD 12 — py39-joblib — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py39-joblib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-joblib — arbitrary code execution Related CVEs: CVE-2022-21797 Upstream summary: jimlinntu reports: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag […]

Read more
Debian 11 — icoutils — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — icoutils — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5208 CVE-2017-5331 CVE-2017-5332 CVE-2017-5333 CVE-2017-6009 CVE-2017-6010 CVE-2017-6011 Upstream summary: Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service […]

Read more
FreeBSD 12 — opendmarc — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — opendmarc — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenDMARC – Remote denial of service Related CVEs: CVE-2019-16378 CVE-2019-20790 CVE-2020-12272 CVE-2020-12460 CVE-2021-34555 Upstream summary: OpenDMARC 1.4.1 and 1.4.1.1 will dereference a NULL pointer when encountering a multi-value From: header […]

Read more
CHAT