openSUSE Tumbleweed — mgetty — multiple vulnerabilities (5 CVEs) — patch and remediation guide

January 8, 2019
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2018:2942-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16741 CVE-2008-4936 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 Upstream summary: An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell […]

FreeBSD 12 — jp-openoffice — vulnerability — patch and remediation guide

January 8, 2019
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 8 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading a […]

Ubuntu 16.04 — mbedtls — multiple vulnerabilities (5 CVEs) — patch and remediation guide

January 8, 2019
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 8 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4267-1 Related CVEs: CVE-2017-18187 CVE-2018-0487 CVE-2018-0488 CVE-2018-0497 CVE-2018-0498 Upstream summary: It was discovered that mbedtls has a bounds-check bypass through an integer overflow that can be used by an attacked […]

Arch Linux — znc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

January 8, 2019
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201807-11 Related CVEs: CVE-2018-14056 CVE-2018-14055 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 1.7.0-2. Fixed in: 1.7.1-1. Group: AVG-737. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

SLES 15 — libmad0 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

January 8, 2019
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 8 January 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3782-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-8373 CVE-2017-8372 CVE-2017-8374 Upstream summary: The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based […]

openSUSE Tumbleweed — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

January 8, 2019
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2026:7679 (see also SUSE bugzilla) Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and […]

FreeBSD 12 — ossec-hids-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide

January 7, 2019
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 7 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/ossec-hids-* — root escalation via syscheck feature Related CVEs: CVE-2014-5284 CVE-2015-3222 Upstream summary: OSSEC reports: The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in […]

openSUSE Tumbleweed — python36-paramiko — multiple vulnerabilities (2 CVEs) — patch and remediation guide

January 7, 2019
Linux
Comment off

🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:0129-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000805 CVE-2018-7750 Upstream summary: Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result […]

FreeBSD 12 — libtorrent — security advisory — patch and remediation guide

January 7, 2019
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 7 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libtorrent — remote DoS Upstream summary: X-cela reports: Calls into build_benocde that use %zu could crash on 64 bit machines due to the size change of size_t. Someone can force […]

FreeBSD 12 — mod_jk-ap — multiple vulnerabilities (2 CVEs) — patch and remediation guide

January 7, 2019
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 7 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2007-0774 CVE-2007-1860 Upstream summary: Kazu Nambo reports: URL decoding the Apache webserver prior to decoding in the Tomcat server could pypass access control rules […]

Common Problems

openSUSE Tumbleweed — mgetty — multiple vulnerabilities (5 CVEs) — patch and remediation guide

FreeBSD 12 — jp-openoffice — vulnerability — patch and remediation guide

Ubuntu 16.04 — mbedtls — multiple vulnerabilities (5 CVEs) — patch and remediation guide

Arch Linux — znc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

SLES 15 — libmad0 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

openSUSE Tumbleweed — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

FreeBSD 12 — ossec-hids-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide

openSUSE Tumbleweed — python36-paramiko — multiple vulnerabilities (2 CVEs) — patch and remediation guide

FreeBSD 12 — libtorrent — security advisory — patch and remediation guide

FreeBSD 12 — mod_jk-ap — multiple vulnerabilities (2 CVEs) — patch and remediation guide

Tags