Common Problems

Oracle Linux 8 — stunnel — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — stunnel — vulnerability — patch and remediation guide (ELSA-2021-0618)

🟠 High   ⏱ 15–60 min  Last verified: 26 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-0618 Related CVEs: CVE-2021-20230 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 13 — libressl — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libressl — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: LibreSSL — overwrite and -read vulnerability Related CVEs: CVE-2014-8176 CVE-2015-0204 CVE-2015-0206 CVE-2015-0209 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289  +12 more Upstream summary: The LibreSSL project reports: An incorrect length check can result […]

Read more
Oracle Linux 8 — cloud-init security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — cloud-init security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-4650)

🟡 Medium   ⏱ 10–30 min  Last verified: 25 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4650 Related CVEs: CVE-2020-8631 CVE-2020-8632 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
FreeBSD 13 — zip — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zip — long path buffer overflow Related CVEs: CVE-2004-1010 Upstream summary: A HexView security advisory reports: When zip performs recursive folder compression, it does not check for the length of […]

Read more
Common Problems 113516

Windows Server 2012 R2 – SMB Direct RDMA driver mismatch causes connection fallback – Fix and Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 25 July 2021 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
FreeBSD 13 — nl-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — nl-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
Debian 10 — policykit-1 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — policykit-1 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 July 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-4034 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 125144

Oracle Linux 8 – Common Problem 018 – Diagnosis and Fix

🟡 Medium   ⏱ 5–30 min  Last verified: 24 July 2021 Affected versions: Oracle Linux 8 📖 ~3 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Common Problems 121564

Debian 9 – SSH login denied after hardening changes

🟠 High   ⏱ 5–30 min  Last verified: 24 July 2021 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
IBM AIX 7.2 — CVE-2021-29815 — xss — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2021-29815 — xss — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 24 July 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2021-29815, IBM Support Bulletin CVE: CVE-2021-29815 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript […]

Read more
CHAT