Ubuntu 14.04 — linux-lts-wily — multiple vulnerabilities (20 CVEs) — patch and remediation guide

January 22, 2017
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 22 January 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3035-3 Related CVEs: CVE-2016-3070 CVE-2016-4482 CVE-2016-4569 CVE-2016-4578 CVE-2016-4580 CVE-2016-4913 CVE-2016-4951 CVE-2016-4997 +12 more Upstream summary: USN-3035-1 fixed vulnerabilities in the Linux kernel for Ubuntu 15.10. This update provides the corresponding […]

SLES 12 — xdg-utils — multiple vulnerabilities (2 CVEs) — patch and remediation guide

January 22, 2017
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 22 January 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:0271-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-9622 CVE-2017-18266 Upstream summary: Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code […]

Ubuntu 14.04 — libidn2-0 — vulnerability — patch and remediation guide

January 21, 2017
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 21 January 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3421-2 Related CVEs: CVE-2017-14062 Upstream summary: USN-3421-1 fixed a vulnerability in Libidn2. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Table of contents Symptom […]

IBM AIX 7.2 — CVE-2012-1796 — vulnerability — patch and remediation guide

January 19, 2017
Tutorials
Comment off

🟠 High ⏱ 30–90 min Last verified: 19 January 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2012-1796, IBM Support Bulletin CVE: CVE-2012-1796 NVD summary: Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges […]

IBM AIX 7.2 — CVE-2005-2236 — vulnerability — patch and remediation guide

January 18, 2017
Tutorials
Comment off

🟠 High ⏱ 30–90 min Last verified: 18 January 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2005-2236, IBM PSIRT advisory page CVE: CVE-2005-2236 NVD summary: Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code […]

Ubuntu 16.04 — libsamplerate — vulnerability — patch and remediation guide

January 17, 2017
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 17 January 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5749-1 Related CVEs: CVE-2017-7697 Upstream summary: Erik de Castro Lopo and Agostino Sarubbo discovered that libsamplerate did not properly perform bounds checking. If a user were tricked into processing a […]

IBM AIX 7.2 — CVE-2009-1522 — vulnerability — patch and remediation guide

January 17, 2017
Tutorials
Comment off

🟠 High ⏱ 30–90 min Last verified: 17 January 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2009-1522, IBM Support Bulletin CVE: CVE-2009-1522 NVD summary: The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspecified […]

Ubuntu 16.04 — openssl-ibmca — vulnerability — patch and remediation guide

January 16, 2017
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 16 January 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6046-1 Related CVEs: https://launchpad.net/bugs/2015454 Upstream summary: It was discovered that OpenSSL-ibmca incorrectly handled certain RSA decryption. An attacker could possibly use this issue to expose sensitive information. Table of contents […]

IBM AIX 7.2 — CVE-2005-0263 — buffer overflow — patch and remediation guide

January 15, 2017
Tutorials
Comment off

🟠 High ⏱ 30–90 min Last verified: 15 January 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2005-0263, IBM Support Bulletin CVE: CVE-2005-0263 NVD summary: Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument. References: secunia.com/advisories/14237 […]

IBM AIX 7.2 — CVE-2007-2995 — vulnerability — patch and remediation guide

January 14, 2017
Tutorials
Comment off

🟡 Medium ⏱ 15–45 min Last verified: 14 January 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-2995, IBM Support Bulletin CVE: CVE-2007-2995 NVD summary: Unspecified vulnerability in sysmgt.websm.rte in IBM AIX 5.2.0 and 5.3.0 has unknown impact and attack vectors. References: osvdb.org/36741 secunia.com/advisories/25458 www-1.ibm.com/support/docview.wss?uid=isg1IY9552 Table of […]

Fix Prevention

Ubuntu 14.04 — linux-lts-wily — multiple vulnerabilities (20 CVEs) — patch and remediation guide

SLES 12 — xdg-utils — multiple vulnerabilities (2 CVEs) — patch and remediation guide

Ubuntu 14.04 — libidn2-0 — vulnerability — patch and remediation guide

IBM AIX 7.2 — CVE-2012-1796 — vulnerability — patch and remediation guide

IBM AIX 7.2 — CVE-2005-2236 — vulnerability — patch and remediation guide

Ubuntu 16.04 — libsamplerate — vulnerability — patch and remediation guide

IBM AIX 7.2 — CVE-2009-1522 — vulnerability — patch and remediation guide

Ubuntu 16.04 — openssl-ibmca — vulnerability — patch and remediation guide

IBM AIX 7.2 — CVE-2005-0263 — buffer overflow — patch and remediation guide

IBM AIX 7.2 — CVE-2007-2995 — vulnerability — patch and remediation guide

Tags