🟢 Low ⏱ 5–15 min Last verified: 10 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jansson — local denial of service vulnerabilities Related CVEs: CVE-2016-4425 Upstream summary: QuickFuzz reports: A crash caused by stack exhaustion parsing a JSON was found. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jupyter notebook — open redirect vulnerability Upstream summary: Jupyter reports: 6.1.5 is a security release, fixing one vulnerability: Fix open redirect vulnerability GHSA-c7vm-f5p4-8fqh (CVE to be assigned) Table of contents […]
Introduction How to Configure Disk Quotas on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet filtering, […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenX — SQL injection vulnerability Related CVEs: CVE-2013-7149 Upstream summary: Revive reports: An SQL-injection vulnerability was recently discovered and reported to the Revive Adserver team by Florian Sander. The vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Mozilla — Stored passwords in 'Saved Logins' can be copied without master password entry Related CVEs: CVE-2019-11733 Upstream summary: Mozilla Foundation reports: CVE-2019-11733: Stored passwords in 'Saved Logins' can be […]
Introduction This guide explains how to Configure Prometheus Node Exporter on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained […]
🟡 Medium ⏱ 10–30 min Last verified: 9 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 Upstream summary: The PHP project reports: Core: Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive method calls). Fixed bug #70121 […]
🟢 Low ⏱ 5–15 min Last verified: 8 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-DBI — insecure temporary file creation vulnerability Related CVEs: CAN-2005-0077 Upstream summary: Javier Fernández-Sanguino Peña reports: The DBI library, the Perl5 database interface, creates a temporary PID file in an […]
🟢 Low ⏱ 5–15 min Last verified: 8 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: taglib — heap-based buffer over-read via a crafted audio file Related CVEs: CVE-2018-11439 Upstream summary: Webin security lab – dbapp security Ltd reports: The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib […]
