🟡 Medium ⏱ 10–30 min Last verified: 29 August 2018 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:2553-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-5759 Upstream summary: The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as […]
🟡 Medium ⏱ 10–30 min Last verified: 29 August 2018 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2008:012 (see also SUSE bugzilla) Related CVEs: CVE-2008-1420 CVE-2009-3379 CVE-2012-0444 CVE-2017-14160 CVE-2017-14632 CVE-2017-14633 CVE-2018-10392 CVE-2018-10393 +1 more Upstream summary: Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 […]
🟢 Low ⏱ 5–15 min Last verified: 29 August 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17432 CVE-2018-16947 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟢 Low ⏱ 5–15 min Last verified: 28 August 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-2834 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 30–90 min Last verified: 28 August 2018 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2018-1845, IBM Support Bulletin CVE: CVE-2018-1845 NVD summary: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote […]
🟢 Low ⏱ 5–15 min Last verified: 26 August 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3760-1 Related CVEs: CVE-2018-16140 Upstream summary: It was discovered that transfig incorrectly handled certain FIG files. An attacker could possibly use this to execute arbitrary code. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 26 August 2018 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2012:1077-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-2944 Upstream summary: Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute […]
🟡 Medium ⏱ 10–30 min Last verified: 26 August 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-0376 CVE-2017-0380 CVE-2017-8819 CVE-2018-0490 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2082 Related CVEs: CVE-2015-8390 CVE-2015-8394 Upstream summary: PCRE before 8.38 mishandles the [: and substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory […]
🟠 High ⏱ 15–60 min Last verified: 24 August 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4326-1 Related CVEs: CVE-2018-12641 CVE-2018-12697 CVE-2018-12698 CVE-2018-12934 CVE-2018-17794 CVE-2018-17985 CVE-2018-18483 CVE-2018-18484 +6 more Upstream summary: It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated […]
