Common Problems

Ubuntu 16.04 — uw-imap — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — uw-imap — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4160-1 Related CVEs: CVE-2018-19518 Upstream summary: It was discovered that UW IMAP incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands. Table of […]

Read more
Ubuntu 16.04 — golang-github-seccomp-libseccomp-golang — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — golang-github-seccomp-libseccomp-golang — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4574-1 Related CVEs: CVE-2017-18367 Upstream summary: It was discovered that libseccomp-golang did not properly generate BPFs. If a process were running under a restrictive seccomp filter that specified multiple syscall […]

Read more
Ubuntu 16.04 — mpg123 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mpg123 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4806-1 Related CVEs: CVE-2017-12839 CVE-2017-12797 CVE-2017-9545 CVE-2017-11126 Upstream summary: It was discovered that mpg123 failed to handle certain malformed mp3 files. An attacker could use this vulnerability to potentially leak […]

Read more
Debian 9 — transmission — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — transmission — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 March 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-5702 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 9 — ansible — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — ansible — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-10855 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 9 — supervisor — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — supervisor — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-11610 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 14.04 — nvidia-graphics-drivers-384 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nvidia-graphics-drivers-384 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3662-1 Related CVEs: CVE-2018-6249 CVE-2018-6253 CVE-2017-5753 CVE-2017-6257 CVE-2017-6259 CVE-2017-6266 CVE-2017-6267 CVE-2017-6272 Upstream summary: It was discovered that the NVIDIA graphics drivers contained flaws in the kernel mode layer. A local […]

Read more
Debian 9 — libxcursor — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — libxcursor — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-16612 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 16.04 — libemail-address-list-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libemail-address-list-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4517-1 Related CVEs: CVE-2018-18898 Upstream summary: It was discovered that Email-Address-List does not properly parse email addresses during email-ingestion. A remote attacker could use this issue to cause an algorithmic […]

Read more
Ubuntu 16.04 — rpcbind — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — rpcbind — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4986-4 Related CVEs: https://launchpad.net/bugs/1931507 CVE-2017-8779 Upstream summary: USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the problem […]

Read more
CHAT