FreeBSD 12

FreeBSD 12 — torcs — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — torcs — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: plib — remote code execution via buffer overflow Related CVEs: CVE-2010-3384 CVE-2011-4620 Upstream summary: Secunia reports: A vulnerability has been discovered in PLIB, which can be exploited by malicious people […]

Read more
FreeBSD 12 — ja-xlockmore — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-xlockmore — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xlockmore — local exploit Related CVEs: CVE-2012-4524 Upstream summary: Ignatios Souvatzis of NetBSD reports: Due to an error in the dclock screensaver in xlockmore, users who explicitly use this screensaver […]

Read more
FreeBSD 12 — yamt — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — yamt — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: yamt — buffer overflow and directory traversal issues Related CVEs: CVE-2004-1302 CVE-2005-1846 CVE-2005-1847 Upstream summary: Stanislav Brabec discovered errors in yamt's path name handling that lead to buffer overflows and […]

Read more
FreeBSD 12 — apache13-modperl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache13-modperl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — heap overflow in mod_proxy Related CVEs: CVE-2004-0492 Upstream summary: A buffer overflow exists in mod_proxy which may allow an attacker to launch local DoS attacks and possibly execute […]

Read more
FreeBSD 12 — zabbix3-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zabbix3-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Zabbix — Remote code execution Related CVEs: CVE-2017-2824 CVE-2020-11800 Upstream summary: Zabbix reports: Fixed security vulnerability cve-2020-11800 (remote code execution). (ZBX-17600) Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 12 — a2ps-a — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — a2ps-a — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: a2ps — insecure temporary file creation Related CVEs: CVE-2004-1170 CVE-2004-1377 Upstream summary: A Secunia Security Advisory reports that Javier Fernández-Sanguino Peña has found temporary file creation vulnerabilities in the fixps […]

Read more
FreeBSD 12 — elinks — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — elinks — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: elinks — buffer overflow vulnerability Related CVEs: CVE-2008-7224 Upstream summary: SecurityFocus reports: ELinks is prone to an off-by-one buffer-overflow vulnerability because the application fails to accurately reference the last element […]

Read more
FreeBSD 12 — quagga — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — quagga — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: quagga — several security issues Related CVEs: CVE-2003-0858 CVE-2009-1572 CVE-2010-1674 CVE-2010-1675 CVE-2011-3323 CVE-2011-3324 CVE-2011-3325 CVE-2011-3326  +10 more Upstream summary: Quagga reports: The Quagga BGP daemon, bgpd, does not properly bounds […]

Read more
How to Set Up iocage Jail Storage on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Set Up iocage Jail Storage on FreeBSD 12

Introduction How to Set Up iocage Jail Storage on FreeBSD 12 is a core administration task for any FreeBSD 12 server operator. FreeBSD 12 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for […]

Read more
FreeBSD 12 — gcab — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gcab — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gcab — stack overflow Related CVEs: CVE-2018-5345 Upstream summary: Upstream reports: A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash […]

Read more
CHAT