Common Problems

Debian 11 — zabbix — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — zabbix — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-6692 CVE-2006-6693 CVE-2007-0640 CVE-2007-6210 CVE-2008-1353 CVE-2009-4498 CVE-2009-4499 CVE-2009-4500  +12 more Upstream summary: Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service […]

Read more
FreeBSD 13 — py27-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py27-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Django — potential SQL injection vulnerability Related CVEs: CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-0305 CVE-2013-0306 CVE-2013-1443 CVE-2013-1664 CVE-2013-1665  +12 more Upstream summary: MITRE CVE reports: Django 1.11 before 1.11.29, 2.2 before 2.2.11, […]

Read more
FreeBSD 13 — quagga-re — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — quagga-re — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: quagga — BGP OPEN denial of service vulnerability Related CVEs: CVE-2012-0249 CVE-2012-0250 CVE-2012-0255 CVE-2012-1820 Upstream summary: CERT reports: If a pre-configured BGP peer sends a specially-crafted OPEN message with a […]

Read more
FreeBSD 13 — cde — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — cde — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: x11/cde — Local privilege escalation via CDE dtsession Related CVEs: CVE-2020-2696 Upstream summary: Marco Ivaldi (marco.ivaldi () mediaservice net) reports: A buffer overflow in the CheckMonitor() function in the Common […]

Read more
Oracle Linux 8 — sqlite — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — sqlite — security and stability fixes — required update (ELSA-2020-1810)

🟡 Medium   ⏱ 10–30 min  Last verified: 4 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-1810 Related CVEs: CVE-2019-19924 CVE-2019-19925 CVE-2019-8457 CVE-2019-13753 CVE-2019-13752 CVE-2019-19959 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
FreeBSD 12 — libcaca — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libcaca — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 December 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libcaca — Multiple vulnerabilities Related CVEs: CVE-2018-20545 CVE-2018-20546 CVE-2018-20547 CVE-2018-20548 CVE-2018-20549 CVE-2021-30498 CVE-2021-30499 CVE-2021-3410 Upstream summary: Sam Hocevar reports: Multiple memory leaks and invalid memory accesses: CVE-2018-20545: Illegal WRITE memory […]

Read more
Common Problems 117424

Ubuntu 20.04 LTS Netplan Apply Drops SSH Connectivity

🟡 Medium   ⏱ 5–30 min  Last verified: 4 December 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
FreeBSD 13 — pcal — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — pcal — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pcal — buffer overflow vulnerabilities Related CVEs: CVE-2004-1289 Upstream summary: Danny Lungstrom has found two buffer overflow vulnerabilities in pcal which can lead to execution of arbitrary code by making […]

Read more
FreeBSD 13 — zeek — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zeek — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zeek — potential DoS vulnerability Upstream summary: Wojtulewicz of Corelight reports: A specially-crafted series of MIME headers sent via SMTP or HTTP could cause Zeek to use large amounts of […]

Read more
Debian 11 — tmate-ssh-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — tmate-ssh-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-44512 CVE-2021-44513 Upstream summary: World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to compromise the integrity of session handling, or obtain the read-write […]

Read more
CHAT