FreeBSD 12

FreeBSD 12 — linux-c7-curl — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-c7-curl — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: curl — password overflow vulnerability Related CVEs: CVE-2017-8816 CVE-2017-8817 CVE-2017-8818 CVE-2018-14618 Upstream summary: curl security problems: CVE-2018-14618: NTLM password overflow via integer overflow The internal function Curl_ntlm_core_mk_nt_hash multiplies the length […]

Read more
FreeBSD 12 — w3m-img — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — w3m-img — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: w3m – multiple vulnerabilities Related CVEs: CVE-2006-6772 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 CVE-2016-9425 CVE-2016-9426 CVE-2016-9428 CVE-2016-9429  +12 more Upstream summary: Tatsuya Kinoshita reports: CVE-2018-6196 * table.c: Prevent negative indent value in feed_table_block_tag(). […]

Read more
FreeBSD 12 — php56-odbc — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php56-odbc — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292  +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
FreeBSD 12 — x86_64-pc-mingw32-binutils — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — x86_64-pc-mingw32-binutils — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GNU binutils — multiple vulnerabilities Related CVEs: CVE-2014-8501 CVE-2014-8502 CVE-2014-8503 Upstream summary: US-CERT/NIST reports: The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause […]

Read more
FreeBSD 12 — picasm — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — picasm — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: picasm — buffer overflow vulnerability Related CVEs: CVE-2005-1679 Upstream summary: Shaun Colley reports: When generating error and warning messages, picasm copies strings into fixed length buffers without bounds checking. If […]

Read more
FreeBSD 12 — iw-pine — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — iw-pine — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pine remotely exploitable buffer overflow in newmail.c Related CVEs: CVE-2002-1320 CVE-2003-0720 CVE-2003-0721 Upstream summary: Kris Kennaway reports a remotely exploitable buffer overflow in newmail.c. Mike Silbersack submitted the fix. Table […]

Read more
FreeBSD 12 — libXv — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXv — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]

Read more
FreeBSD 12 — bacula — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — bacula — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bacula — Console ACL Bypass Related CVEs: CVE-2012-4430 Upstream summary: A security issue has been reported in Bacula, which can be exploited by malicious users to bypass certain security restrictions. […]

Read more
FreeBSD 12 — apache-solr — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache-solr — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Solr — Apache Log4J Related CVEs: CVE-2017-12629 CVE-2019-17558 Upstream summary: Solr reports: Apache Solr affected by Apache Log4J Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
CHAT