FreeBSD 12

FreeBSD 12 — mod_php — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mod_php — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483  +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]

Read more
FreeBSD 12 — apache+mod_ssl+mod_deflate — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache+mod_ssl+mod_deflate — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

Read more
FreeBSD 12 — ruby+pthreads+oniguruma — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ruby+pthreads+oniguruma — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ruby — UTF-7 encoding XSS vulnerability in WEBrick Related CVEs: CVE-2006-5467 CVE-2006-6303 CVE-2008-1447 CVE-2008-2726 CVE-2008-3655 CVE-2008-3656 CVE-2008-3905 CVE-2009-1904  +1 more Upstream summary: The official ruby site reports: WEBrick have had […]

Read more
FreeBSD 12 — postfix-policyd-weight — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — postfix-policyd-weight — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: postfix-policyd-weight — working directory symlink vulnerability Upstream summary: postfix-policyd-weight does not check for symlink for its working directory. If the working directory is not already setup by the super root, […]

Read more
FreeBSD 12 — punbb — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — punbb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: punbb — NULL byte injection vulnerability Related CVEs: CVE-2006-4759 Upstream summary: CVE Mitre reports: PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote […]

Read more
FreeBSD 12 — urban — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — urban — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urban — stack overflow vulnerabilities Related CVEs: CVE-2005-2864 Upstream summary: Several filename-related stack overflow bugs allow a local attacker to elevate its privileges to the games group, since urban is […]

Read more
FreeBSD 12 — libXres — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXres — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg — protocol handling issues in X Window System client libraries Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: freedesktop.org reports: Ilja van Sprundel, […]

Read more
FreeBSD 12 — linux-mozilla — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-mozilla — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — code execution via Quicktime media-link files Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0722 CVE-2004-0757  +12 more Upstream summary: The Mozilla Foundation reports a vulnerability within the […]

Read more
FreeBSD 12 — rubygem-ruby-saml — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rubygem-ruby-saml — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ruby-saml — XML signature wrapping attack Related CVEs: CVE-2016-5697 Upstream summary: RubySec reports: ruby-saml prior to version 1.3.0 is vulnerable to an XML signature wrapping attack in the specific scenario […]

Read more
CHAT