🟠 High ⏱ 15–60 min Last verified: 2 December 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3942-1 Related CVEs: CVE-2019-2422 CVE-2018-3136 CVE-2018-3139 CVE-2018-3149 CVE-2018-3169 CVE-2018-3180 CVE-2018-2952 CVE-2018-2790 +12 more Upstream summary: It was discovered that a memory disclosure issue existed in the OpenJDK Library subsystem. An […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201711-18 Related CVEs: CVE-2017-15099 CVE-2017-15098 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 9.6.5-1. Fixed in: 9.6.6-1. Group: AVG-486. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 5–30 min Last verified: 1 December 2019 Affected versions: Windows Server 2019 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟢 Low ⏱ 5–15 min Last verified: 1 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mupdf — multiple vulnerabilities Related CVEs: CVE-2016-6265 CVE-2016-6525 Upstream summary: Tobias Kortkamp reports: Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:2628-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13178 Upstream summary: modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and […]
🟠 High ⏱ 15–60 min Last verified: 1 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h2o — HTTP/2 Rapid Reset attack vulnerability Related CVEs: CVE-2015-5638 CVE-2016-1133 CVE-2016-4864 CVE-2017-10868 CVE-2017-10869 CVE-2018-0608 CVE-2019-9512 CVE-2019-9514 +3 more Upstream summary: Kazuo Okuhu reports: H2O is vulnerable to the HTTP/2 […]
🟢 Low ⏱ 5–15 min Last verified: 1 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mksh — TTY attachment privilege escalation Related CVEs: CVE-2008-1845 Upstream summary: Secunia reports: The vulnerability is caused due to an error when attaching to a TTY via the -T command […]
🟠 High ⏱ 5–30 min Last verified: 30 November 2019 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 5–30 min Last verified: 30 November 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-12437 Upstream summary: LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To […]
