Common Problems

Ubuntu 16.04 — libiberty — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libiberty — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • April 24, 2019
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4326-1 Related CVEs: CVE-2018-12641 CVE-2018-12697 CVE-2018-12698 CVE-2018-12934 CVE-2018-17794 CVE-2018-17985 CVE-2018-18483 CVE-2018-18484  +12 more Upstream summary: It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated […]

Read more
Alpine Linux edge — hdf5 — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — hdf5 — multiple vulnerabilities (9 CVEs) — patch and remediation guide

  • April 24, 2019
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.12.2-r0 📖 ~4 min read  •  Source: Alpine secdb entry — hdf5 1.12.2-r0 Related CVEs: CVE-2018-17432 CVE-2018-11206 CVE-2018-13869 CVE-2018-13870 CVE-2018-14033 CVE-2018-14460 CVE-2018-17435 CVE-2019-9151  +1 more Upstream summary: Alpine community repository for vedge ships hdf5 1.12.2-r0 which […]

Read more
SLES 15 — libykcs11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libykcs11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • April 24, 2019
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1123-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14779 CVE-2018-14780 Upstream summary: A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the […]

Read more
FreeBSD 12 — cvs — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — cvs — vulnerability — patch and remediation guide

  • April 23, 2019
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cvs — Remote code execution via ssh command injection Related CVEs: CVE-2017-12836 Upstream summary: Hank Leininger reports: Bugs in Git, Subversion, and Mercurial were just announced and patched which allowed […]

Read more
FreeBSD 12 — ghostscript9-agpl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ghostscript9-agpl — vulnerability — patch and remediation guide

  • April 23, 2019
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

Read more
FreeBSD 12 — gpdf — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gpdf — multiple vulnerabilities (9 CVEs) — patch and remediation guide

  • April 23, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 23 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpdf — multiple remote Stream.CC vulnerabilities Related CVEs: CVE-2004-0888 CVE-2004-0889 CVE-2004-1125 CVE-2005-0064 CVE-2005-2097 CVE-2007-3387 CVE-2007-4352 CVE-2007-5392  +1 more Upstream summary: Secunia Research reports: Secunia Research has discovered some vulnerabilities in […]

Read more
FreeBSD 12 — php55-xmlrpc — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php55-xmlrpc — multiple vulnerabilities (12 CVEs) — patch and remediation guide

  • April 23, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 23 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292  +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
FreeBSD 12 — libXfont — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXfont — multiple vulnerabilities (17 CVEs) — patch and remediation guide

  • April 23, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 23 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libXfont — permission bypass when opening files through symlinks Related CVEs: CVE-2007-5760 CVE-2007-5958 CVE-2007-6427 CVE-2007-6428 CVE-2007-6429 CVE-2008-0006 CVE-2011-2895 CVE-2013-6462  +9 more Upstream summary: the freedesktop.org project reports: A non-privileged X […]

Read more
FreeBSD 12 — activemq — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — activemq — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • April 23, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 23 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: activemq — Unsafe deserialization Related CVEs: CVE-2015-5254 CVE-2016-0734 CVE-2016-0782 Upstream summary: Alvaro Muatoz, Matthias Kaiser and Christian Schneider reports: JMS Object messages depends on Java Serialization for marshaling/unmashaling of the […]

Read more
FreeBSD 12 — ganglia-webfrontend — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ganglia-webfrontend — vulnerability — patch and remediation guide

  • April 23, 2019
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ganglia-webfrontend — auth bypass Related CVEs: CVE-2015-6816 Upstream summary: Ivan Novikov reports: It's easy to bypass auth by using boolean serialization… Table of contents Symptom & Impact Environment & Reproduction […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT