🟡 Medium ⏱ 5–30 min Last verified: 1 February 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟢 Low ⏱ 5–15 min Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: uwsgi — a stack-based buffer overflow Related CVEs: CVE-2018-6758 Upstream summary: Uwsgi developers report: It was discovered that the uwsgi_expand_path function in utils.c in Unbit uWSGI, an application container server, […]
🟢 Low ⏱ 5–15 min Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xinetd — ignores user and group directives for TCPMUX services Related CVEs: CVE-2012-0862 CVE-2013-4342 Upstream summary: xinetd would execute configured TCPMUX services without dropping privilege to match the service configuration […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:1094-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13645 Upstream summary: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to […]
🟢 Low ⏱ 5–15 min Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2007-0774 CVE-2007-1860 Upstream summary: Kazu Nambo reports: URL decoding the Apache webserver prior to decoding in the Tomcat server could pypass access control rules […]
🟡 Medium ⏱ 10–30 min Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202008-21 Related CVEs: CVE-2020-24972 Upstream summary: Kleopatra did not safely escape command line parameters provided by URLs, which it configures itself to handle. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mutt-devel — failure to check SMTP TLS server certificate Related CVEs: CVE-2011-1429 Upstream summary: Dave B reports on Full Disclosure: It seems that mutt fails to check the validity of […]
🟢 Low ⏱ 5–15 min Last verified: 1 February 2020 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8597 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201709-14 Related CVEs: CVE-2017-0379 Upstream summary: Type: private key recovery. Status: Fixed. Affected: 1.8.0-1. Fixed in: 1.8.1-1. Group: AVG-403. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
