FreeBSD 14

FreeBSD 14 — cross-binutils — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — cross-binutils — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GNU binutils — multiple vulnerabilities Related CVEs: CVE-2014-8501 CVE-2014-8502 CVE-2014-8503 Upstream summary: US-CERT/NIST reports: The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause […]

Read more
FreeBSD 14 — zziplib — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — zziplib — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zziplib – multiple vulnerabilities Related CVEs: CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5977 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981  +9 more Upstream summary: NIST reports (by search in the range 2017/01/01 – 2018/07/06): 17 security […]

Read more
FreeBSD 14 — ja-eb — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ja-eb — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: eb — Potential buffer overrun vulnerability Upstream summary: Kazuhiro Ito reports: Potential buffer overrun vulnerability is found in eb/multiplex.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 14 — v8-devel — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — v8-devel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: node, iojs, and v8 — denial of service Related CVEs: CVE-2015-5380 Upstream summary: node reports: This release of Node.js fixes a bug that triggers an out-of-band write in V8's utf-8 […]

Read more
FreeBSD 14 — libebml — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libebml — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libebml — multiple vulnerabilities Related CVEs: CVE-2015-8789 CVE-2015-8790 CVE-2015-8791 Upstream summary: Mortiz Bunkus reports: Multiple invalid memory accesses vulnerabilities. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 14 — compat5x-alpha — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — compat5x-alpha — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openssl — potential SSL 2.0 rollback Related CVEs: CVE-2005-2969 Upstream summary: Vulnerability: Such applications are affected if they use the option SSL_OP_MSIE_SSLV2_RSA_PADDING. This option is implied by use of SSL_OP_ALL, […]

Read more
FreeBSD 14 — puppetserver — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — puppetserver — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: puppet — Unsafe HTTP Redirect Related CVEs: CVE-2018-1000180 CVE-2018-1000613 CVE-2020-7943 CVE-2021-27023 Upstream summary: Puppet reports: A flaw was discovered in Puppet Agent and Puppet Server that may result in a […]

Read more
FreeBSD 14 — apache22-worker-mpm — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — apache22-worker-mpm — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache22 — chunk header parsing defect Related CVEs: CVE-2012-0833 CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 CVE-2013-1862 CVE-2013-1896 CVE-2013-5704 CVE-2013-6438  +5 more Upstream summary: Apache Foundation reports: CVE-2015-3183 core: Fix chunk header parsing defect. […]

Read more
FreeBSD 14 — halibut — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — halibut — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: halibut — Segmentation fault, denial of service or possibly other unspecified impact via a crafted text document Related CVEs: CVE-2021-42612 CVE-2021-42613 CVE-2021-42614 Upstream summary: [email protected] reports: CVE-2021-42612: A use after […]

Read more
FreeBSD 14 — tcpreplay — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — tcpreplay — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tcpreplay — Multiple vulnerabilities Related CVEs: CVE-2019-8376 CVE-2019-8377 CVE-2019-8381 Upstream summary: fklassen on Github reports: This release fixes the following security issues: memory access in do_checksum() NULL pointer dereference get_layer4_v6() […]

Read more
CHAT