🟡 Medium ⏱ 5–30 min Last verified: 24 June 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟢 Low ⏱ 5–15 min Last verified: 24 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]
🟢 Low ⏱ 5–15 min Last verified: 24 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-dragonfly — arbitrary code execution Related CVEs: CVE-2013-1756 Upstream summary: Mark Evans reports: Unfortnately there is a security vulnerability in Dragonfly when used with Rails which would potentially allow an […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.8_alpha-r0 📖 ~4 min read • Source: Alpine secdb entry — libmspack 0.8_alpha-r0 Related CVEs: CVE-2018-18584 CVE-2018-18585 CVE-2018-18586 CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682 CVE-2017-6419 +2 more Upstream summary: Alpine community repository for vedge ships libmspack 0.8_alpha-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 24 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2017-5225 CVE-2017-7592 CVE-2017-7593 CVE-2017-7594 CVE-2017-7595 CVE-2017-7596 CVE-2017-7597 CVE-2017-7598 +4 more Upstream summary: NVD reports: Please reference CVE/URL list for details Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 24 June 2019 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2018:4074-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15869 Upstream summary: An Amazon Web Services (AWS) developer who does not specify the –owners flag when describing images via AWS CLI, and therefore not […]
🟠 High ⏱ 15–60 min Last verified: 24 June 2019 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:2850-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16741 CVE-2008-4936 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 CVE-2018-16745 CVE-2019-1010190 Upstream summary: An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2008:012 (see also SUSE bugzilla) Related CVEs: CVE-2008-1423 CVE-2007-3106 CVE-2008-1419 CVE-2008-1420 CVE-2009-3379 CVE-2017-14160 CVE-2017-14632 CVE-2018-10392 +2 more Upstream summary: Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 […]
🟢 Low ⏱ 5–15 min Last verified: 23 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_fcgid — possible heap buffer overwrite Related CVEs: CVE-2013-4365 Upstream summary: Apache Project reports: Fix possible heap buffer overwrite. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 5–30 min Last verified: 23 June 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
