Ubuntu 14.04 — libmspack — multiple vulnerabilities (12 CVEs) — patch and remediation guide

May 24, 2018
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 24 May 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7788-1 Related CVEs: CVE-2018-14682 CVE-2017-11423 CVE-2015-4468 CVE-2018-14680 CVE-2015-4467 CVE-2018-14679 CVE-2015-4472 CVE-2015-4469 +4 more Upstream summary: Jakub Wilk discovered that libmspack did not correctly handle certain integer operations and bounds checking. […]

Debian 9 — patch — vulnerability — patch and remediation guide

May 23, 2018
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 23 May 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20969 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Debian 9 — corosync — vulnerability — patch and remediation guide

May 22, 2018
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 22 May 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1084 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Debian 9 — shadowsocks-libev — vulnerability — patch and remediation guide

May 22, 2018
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 22 May 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15924 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Ubuntu 16.04 — asterisk — multiple vulnerabilities (2 CVEs) — patch and remediation guide

May 21, 2018
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 21 May 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4814-1 Related CVEs: CVE-2017-16671 CVE-2017-7617 Upstream summary: Richard Mudgett discovered that Asterisk did not properly check the length of input string when setting the user field for PartyB on a […]

SLES 12 — libfbembed2_5 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

May 20, 2018
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 20 May 2018 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2013:0496-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-2492 CVE-2017-6369 Upstream summary: Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers […]

Debian 9 — gdk-pixbuf — multiple vulnerabilities (2 CVEs) — patch and remediation guide

May 19, 2018
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 19 May 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000422 CVE-2017-2862 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Ubuntu 18.04 — afflib — vulnerability — patch and remediation guide

May 18, 2018
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 18 May 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6518-1 Related CVEs: CVE-2018-8050 Upstream summary: Luis Rocha discovered that AFFLIB incorrectly handled certain input files. If a user or automated system were tricked into processing a specially crafted AFF […]

SLES 12 — python-dulwich — vulnerability — patch and remediation guide

May 18, 2018
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 18 May 2018 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:2047-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-16228 Upstream summary: Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an […]

Debian 9 — beep — vulnerability — patch and remediation guide

May 17, 2018
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 17 May 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-0492 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Common Problems

Ubuntu 14.04 — libmspack — multiple vulnerabilities (12 CVEs) — patch and remediation guide

Debian 9 — patch — vulnerability — patch and remediation guide

Debian 9 — corosync — vulnerability — patch and remediation guide

Debian 9 — shadowsocks-libev — vulnerability — patch and remediation guide

Ubuntu 16.04 — asterisk — multiple vulnerabilities (2 CVEs) — patch and remediation guide

SLES 12 — libfbembed2_5 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

Debian 9 — gdk-pixbuf — multiple vulnerabilities (2 CVEs) — patch and remediation guide

Ubuntu 18.04 — afflib — vulnerability — patch and remediation guide

SLES 12 — python-dulwich — vulnerability — patch and remediation guide

Debian 9 — beep — vulnerability — patch and remediation guide

Tags