FreeBSD 14

FreeBSD 14 — w3m-m17n — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — w3m-m17n — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: w3m — format string vulnerability Related CVEs: CVE-2006-6772 Upstream summary: An anonymous person reports: w3m-0.5.1 crashes when using the -dump or -backend options to open a HTTPS URL with a […]

Read more
FreeBSD 14 — py38-borgbackup — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py38-borgbackup — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Borg (Backup) — flaw in cryptographic authentication scheme in Borg allowed an attacker to fake archives and indirectly cause backup data loss. Related CVEs: CVE-2023-36811 Upstream summary: Thomas Waldmann reports: […]

Read more
FreeBSD 14 — sharutils — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — sharutils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sharutils — unshar insecure temporary file creation Related CVEs: CVE-2005-0990 Upstream summary: An Ubuntu Advisory reports: Joey Hess discovered that "unshar" created temporary files in an insecure manner. This could […]

Read more
FreeBSD 14 — opengtl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — opengtl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]

Read more
FreeBSD 14 — pear-Horde_Image — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pear-Horde_Image — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pear-Horde_Image — DoS vulnerability Related CVEs: CVE-2017-9773 CVE-2017-9774 Upstream summary: Michael J Rubinsky reports: The second vulnerability (CVE-2017-9773) is a DOS vulnerability. This only affects Horde installations that do not […]

Read more
FreeBSD 14 — vtiger — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — vtiger — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vtiger — multiple remote file inclusion vulnerabilities Related CVEs: CVE-2006-5289 Upstream summary: Dedi Dwianto a.k.a the_day reports: Input passed to the "$calpath" parameter in update.php is not properly verified before […]

Read more
FreeBSD 14 — apache13+ipv — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — apache13+ipv — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — heap overflow in mod_proxy Related CVEs: CVE-2004-0492 Upstream summary: A buffer overflow exists in mod_proxy which may allow an attacker to launch local DoS attacks and possibly execute […]

Read more
FreeBSD 14 — R — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — R — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: R — arbitrary code execution vulnerability Related CVEs: CVE-2024-27322 Upstream summary: HiddenLayer Research reports: Deserialization of untrusted data can occur in the R statistical programming language, enabling a maliciously crafted […]

Read more
FreeBSD 14 — guile — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — guile — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: guile2 — multiple vulnerabilities Related CVEs: CVE-2016-8605 CVE-2016-8606 Upstream summary: Ludovic Courtès reports: The REPL server is vulnerable to the HTTP inter-protocol attack The ‘mkdir’ procedure of GNU Guile, an […]

Read more
FreeBSD 14 — py38-tflite — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py38-tflite — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-tflite — buffer overflow vulnerability Related CVEs: CVE-2021-37689 CVE-2022-41894 Upstream summary: Thibaut Goetghebuer-Planchon reports: The reference kernel of the CONV_3D_TRANSPOSE TensorFlow Lite operator wrongly increments the data_ptr when adding the […]

Read more
CHAT