FreeBSD 13

FreeBSD 13 — ffmpeg — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ffmpeg — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2009-0385 CVE-2011-4351 CVE-2011-4352 CVE-2011-4353 CVE-2011-4364 CVE-2011-4579 CVE-2012-5150 CVE-2014-4609  +12 more Upstream summary: NVD reports: An issue was discovered in the FFmpeg package, where vp3_decode_frame […]

Read more
FreeBSD 13 — libzmq — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libzmq — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libzmq4 — Denial of Service Related CVEs: CVE-2014-9721 CVE-2019-13132 CVE-2019-6250 CVE-2020-15166 Upstream summary: Google's oss-fuzz project reports: Denial-of-Service on CURVE/ZAP-protected servers by unauthenticated clients. If a raw TCP socket is […]

Read more
FreeBSD 13 — sam2p — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — sam2p — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sam2p — multiple issues Related CVEs: CVE-2017-14628 CVE-2017-14629 CVE-2017-14630 CVE-2017-14631 CVE-2017-14636 CVE-2017-14637 Upstream summary: sam2p developers report: In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of […]

Read more
FreeBSD 13 — chicken — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — chicken — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: chicken — multiple vulnerabilities Related CVEs: CVE-2014-9651 CVE-2015-4556 CVE-2016-6830 CVE-2016-6831 CVE-2016-9954 CVE-2017-11343 CVE-2017-6949 CVE-2017-9334 Upstream summary: CHICKEN reports: CVE-2017-6949: Unchecked malloc() call in SRFI-4 constructors when allocating in non-GC memory, […]

Read more
FreeBSD 13 — p5-File-Path — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — p5-File-Path — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-File-Path — rmtree allows creation of setuid files Related CVEs: CVE-2005-0448 Upstream summary: Jan Lieskovsky reports: perl-File-Path rmtree race condition (CVE-2005-0448 was assigned to address this) This vulnerability was fixed […]

Read more
FreeBSD 13 — horde-devel — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — horde-devel — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: horde — cross-site scripting vulnerability in help window Upstream summary: A Horde Team announcement states that a potential cross-site scripting vulnerability in the help window has been corrected. The vulnerability […]

Read more
FreeBSD 13 — adminer — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — adminer — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: adminer — remote code execution Upstream summary: Jakub Vrana reports: Fix remote code execution in SQLite query Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

Read more
FreeBSD 13 — fr-cups-base — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — fr-cups-base — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cups-base — HPGL buffer overflow vulnerability Related CVEs: CVE-2004-1267 Upstream summary: Ariel Berkman has discovered a buffer overflow vulnerability in CUPS's HPGL input driver. This vulnerability could be exploited to […]

Read more
FreeBSD 13 — wget+ipv — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — wget+ipv — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wget — multiple vulnerabilities Related CVEs: CVE-2004-1487 CVE-2004-1488 Upstream summary: Jan Minar reports that there exists multiple vulnerabilities in wget: Wget erroneously thinks that the current directory is a fair […]

Read more
FreeBSD 13 — linux-c7-libtiff — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-c7-libtiff — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2015-8870 CVE-2016-5652 CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 CVE-2016-9536 CVE-2016-9537 CVE-2016-9540 Upstream summary: libtiff project reports: Multiple flaws have been discovered in libtiff library and utilities. Table […]

Read more
CHAT