Common Problems

Ubuntu 18.04 — slirp — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — slirp — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 September 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4632-1 Related CVEs: CVE-2020-7039 CVE-2020-8608 Upstream summary: It was discovered that the SLiRP networking implementation of the QEMU emulator did not properly manage memory under certain circumstances. An attacker could […]

Read more
Oracle Linux 8 — git — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — git — vulnerability — patch and remediation guide (ELSA-2020-1980)

🟠 High   ⏱ 15–60 min  Last verified: 3 September 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-1980 Related CVEs: CVE-2020-11008 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 12 — spamassassin — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — spamassassin — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spamassassin — Malicious rule configuration (.cf) files can be configured to run system commands Related CVEs: CVE-2016-1238 CVE-2017-15705 CVE-2018-11780 CVE-2018-11781 CVE-2018-11805 CVE-2019-12420 CVE-2020-1930 CVE-2020-1931  +1 more Upstream summary: The Apache […]

Read more
Common Problems 121001

Debian 10 – initramfs BusyBox Drop on Boot – Root Filesystem Recovery

🔴 Critical   ⏱ 5–30 min  Last verified: 2 September 2020 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Common Problems 117511

Ubuntu 20.04 LTS – persistent high iowait caused by background apt jobs – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 2 September 2020 Affected versions: Ubuntu 20.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
FreeBSD 12 — py311-Flask-Cors — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py311-Flask-Cors — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]

Read more
Ubuntu 18.04 — spice-vdagent — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — spice-vdagent — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4617-1 Related CVEs: CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 Upstream summary: Matthias Gerstner discovered that SPICE vdagent incorrectly handled the active_xfers hash table. A local attacker could possibly use this issue to […]

Read more
Ubuntu 20.04 — libmediainfo — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libmediainfo — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2020 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5237-1 Related CVEs: CVE-2020-15395 CVE-2020-26797 Upstream summary: It was discovered that MediaInfoLib incorrectly handled certain specially crafted files. An attacker could possibly use this issue to cause a denial of […]

Read more
Ubuntu 16.04 — libcroco — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libcroco — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5389-1 Related CVEs: CVE-2017-7960 CVE-2017-8834 CVE-2017-8871 CVE-2020-12825 Upstream summary: It was discovered that Libcroco was incorrectly accessing data structures when reading bytes from memory, which could cause a heap buffer […]

Read more
Oracle Linux 8 — compat-exiv2-026 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — compat-exiv2-026 — vulnerability — patch and remediation guide (ELSA-2022-1797)

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-1797 Related CVEs: CVE-2020-18898 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT