Common Problems

FreeBSD 12 — isakmpd — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — isakmpd — multiple vulnerabilities (5 CVEs) — patch and remediation guide

  • August 21, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 21 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isakmpd payload handling denial-of-service vulnerabilities Related CVEs: CVE-2004-0218 CVE-2004-0219 CVE-2004-0220 CVE-2004-0221 CVE-2004-0222 Upstream summary: Numerous errors in isakmpd's input packet validation lead to denial-of-service vulnerabilities. From the Rapid7 advisory: The […]

Read more
Ubuntu 14.04 — libbsd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libbsd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • August 21, 2019
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 21 August 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4243-1 Related CVEs: CVE-2016-2090 CVE-2019-20367 Upstream summary: It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only […]

Read more
SLES 15 — yast2 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — yast2 — vulnerability — patch and remediation guide

  • August 21, 2019
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 21 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-3177 Upstream summary: The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network […]

Read more
openSUSE Tumbleweed — ntp — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — ntp — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • August 21, 2019
  • Linux
  • Comment off

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2016:1329-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7705 CVE-2015-7853 CVE-2015-7871 CVE-2014-9293 CVE-2014-9294 CVE-2014-9295 CVE-2014-9296 CVE-2014-9297  +12 more Upstream summary: The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 […]

Read more
Common Problems 112959

Windows Server 2016 – Storage Replica test failover fails with access denied – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 20 August 2019 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
openSUSE Tumbleweed — perl-HTTP-Body — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — perl-HTTP-Body — vulnerability — patch and remediation guide

  • August 20, 2019
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2014:0433-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4407 Upstream summary: HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07 through 1.22, before 1.23) uses the part of the uploaded file's name after the […]

Read more
FreeBSD 12 — spamass-milter — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — spamass-milter — vulnerability — patch and remediation guide

  • August 20, 2019
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 20 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spamass-milter — remote command execution vulnerability Related CVEs: CVE-2010-1132 Upstream summary: The spamassassin milter plugin contains a vulnerability that can allow remote attackers to execute commands on affected systems. The […]

Read more
FreeBSD 12 — netqmail — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — netqmail — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • August 20, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 20 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qmail — 64 bit integer overflows with possible remote code execution on large SMTP requests Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 Upstream summary: Georgi Guninski writes: There are several issues with […]

Read more
openSUSE Tumbleweed — cron — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — cron — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • August 20, 2019
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2006:027 (see also SUSE bugzilla) Related CVEs: CVE-2006-2607 CVE-2010-0424 CVE-2019-9704 Upstream summary: do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local […]

Read more
Ubuntu 18.04 — gnome-desktop3 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — gnome-desktop3 — vulnerability — patch and remediation guide

  • August 20, 2019
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 20 August 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3994-1 Related CVEs: CVE-2019-11460 Upstream summary: It was discovered that gnome-desktop incorrectly confined thumbnailers. If a user were tricked into downloading a malicious image file, a remote attacker could possibly […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT