FreeBSD 13

FreeBSD 13 — phpmustache — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — phpmustache — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mustache – Possible Remote Code Execution Related CVEs: CVE-2022-0323 Upstream summary: huntr.dev reports: In Mustache.php v2.0.0 through v2.14.0, Sections tag can lead to arbitrary php code execution even if strict_callables […]

Read more
FreeBSD 13 — smarty — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — smarty — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: smarty3 — shell injection in math Upstream summary: The smarty project reports: bugfix {math} shell injection vulnerability Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

Read more
FreeBSD 13 — isolate — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — isolate — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isolate — local root exploit Upstream summary: Isolate currently suffers from some bad security bugs! These are local root privilege escalation bugs. Thanks to the helpful person who reported them […]

Read more
FreeBSD 13 — php5-mbstring — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php5-mbstring — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-mbstring — php mbstring buffer overflow vulnerability Related CVEs: CVE-2008-5557 Upstream summary: SecurityFocus reports: PHP is prone to a buffer-overflow vulnerability because it fails to perform boundary checks before copying […]

Read more
FreeBSD 13 — py38-Scrapy — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py38-Scrapy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-Scrapy — DoS vulnerability Related CVEs: CVE-2017-14158 CVE-2022-0577 Upstream summary: kmike and nramirezuy report: Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files […]

Read more
FreeBSD 13 — isc-dhcp43-server — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — isc-dhcp43-server — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcp — Multiple vulnerabilities Related CVEs: CVE-2015-8605 CVE-2018-5732 CVE-2018-5733 Upstream summary: ISC reports: Failure to properly bounds check a buffer used for processing DHCP options allows a malicious server (or […]

Read more
FreeBSD 13 — iperf — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — iperf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: iperf3 — buffer overflow Related CVEs: CVE-2016-4303 Upstream summary: ESnet reports: A malicious process can connect to an iperf3 server and, by sending a malformed message on the control channel, […]

Read more
FreeBSD 13 — php56-bz — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php56-bz — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292  +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
FreeBSD 13 — php55-phar — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php55-phar — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2013-7456 CVE-2015-5589 CVE-2015-5590 CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 CVE-2015-7803 CVE-2015-7804  +12 more Upstream summary: The PHP Group reports: Core: Fixed bug #72114 (Integer underflow / arbitrary […]

Read more
CHAT