FreeBSD 13

FreeBSD 13 — nagios-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — nagios-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nagios — Command Injection Vulnerability Related CVEs: CVE-2007-5803 CVE-2009-2288 Upstream summary: Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise […]

Read more
FreeBSD 13 — ruby+oniguruma — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ruby+oniguruma — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Multiple implementations — DoS via hash algorithm collision Related CVEs: CVE-2006-5467 CVE-2006-6303 CVE-2008-1447 CVE-2008-2726 CVE-2008-3655 CVE-2008-3656 CVE-2008-3905 CVE-2009-1904  +5 more Upstream summary: oCERT reports: A variety of programming languages suffer […]

Read more
FreeBSD 13 — py24-django-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py24-django-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2008-2302 CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 13 — libwww — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libwww — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: expat — multiple vulnerabilities Related CVEs: CVE-2005-3183 CVE-2009-3560 CVE-2009-3720 CVE-2016-9063 CVE-2017-9233 Upstream summary: Mitre reports: An integer overflow during the parsing of XML using the Expat library. XML External Entity […]

Read more
FreeBSD 13 — quagga — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — quagga — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: quagga — several security issues Related CVEs: CVE-2003-0858 CVE-2009-1572 CVE-2010-1674 CVE-2010-1675 CVE-2011-3323 CVE-2011-3324 CVE-2011-3325 CVE-2011-3326  +10 more Upstream summary: Quagga reports: The Quagga BGP daemon, bgpd, does not properly bounds […]

Read more
FreeBSD 13 — ruby_r — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ruby_r — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ruby — CGI DoS Related CVEs: CVE-2004-0983 Upstream summary: The Ruby CGI.rb module contains a bug which can cause the CGI module to go into an infinite loop, thereby causing […]

Read more
FreeBSD 13 — icingaweb — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — icingaweb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Icinga Web 2 — directory traversal vulnerability Related CVEs: CVE-2020-24368 Upstream summary: Icinga development team reports: CVE-2020-24368 Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal […]

Read more
FreeBSD 13 — py34-notebook — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py34-notebook — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Jupyter Notebook — vulnerability Related CVEs: CVE-2018-8768 Upstream summary: MITRE reports: In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook […]

Read more
FreeBSD 13 — bitlbee — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — bitlbee — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bitlbee — account recreation security issues Related CVEs: CVE-2008-3920 CVE-2008-3969 Upstream summary: Secunia reports: Some security issues have been reported in BitlBee, which can be exploited by malicious people to […]

Read more
FreeBSD 13 — zh-unzip — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zh-unzip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unzip — permission race vulnerability Related CVEs: CVE-2005-2475 Upstream summary: Imran Ghory reports a vulnerability within unzip. The vulnerability is caused by a race condition between extracting an archive and […]

Read more
CHAT