🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2020-1460 Related CVEs: CVE-2018-11439 Upstream summary: The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file. (CVE-2018-11439) […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2019-1210 Related CVEs: CVE-2019-12779 Upstream summary: A flaw was found in libqb. Insecure handling of temporary files could be exploited by a local attacker to overwrite privileged system files. Upstream […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ledger — multiple vulnerabilities Related CVEs: CVE-2017-2807 CVE-2017-2808 Upstream summary: Talos reports: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202003-44 Related CVEs: CVE-2014-9862 Upstream summary: It was discovered that the implementation of bspatch did not check for a negative value on numbers of bytes read from the diff and extra streams. […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: slixmpp — improper access control Related CVEs: CVE-2019-1000021 Upstream summary: NVD reports: slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 5.5.2-r0 📖 ~4 min read • Source: Alpine secdb entry — collectd 5.5.2-r0 Related CVEs: CVE-2016-6254 Upstream summary: Alpine community repository for vedge ships collectd 5.5.2-r0 which addresses CVE-2016-6254. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: neon date parsing vulnerability Related CVEs: CVE-2004-0179 CVE-2004-0398 Upstream summary: Stefan Esser reports: A vulnerability within a libneon date parsing function could cause a heap overflow which could lead to […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kaffeine — buffer overflow vulnerability Related CVEs: CVE-2006-0051 Upstream summary: The KDE team reports: Kaffeine can produce a buffer overflow in http_peek() while creating HTTP request headers for fetching remote […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202006-18 Related CVEs: CVE-2019-12439 Upstream summary: Bubblewrap misuses temporary directories in /tmp as a mount point. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6518-1 Related CVEs: CVE-2018-8050 Upstream summary: Luis Rocha discovered that AFFLIB incorrectly handled certain input files. If a user or automated system were tricked into processing a specially crafted AFF […]
