FreeBSD

FreeBSD 12 — spamdyke — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — spamdyke — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spamdyke — Buffer Overflow Vulnerabilities Related CVEs: CVE-2008-2784 CVE-2012-0070 CVE-2012-0802 Upstream summary: Secunia reports: Fixed a number of very serious errors in the usage of snprintf()/vsnprintf(). The return value was […]

Read more
FreeBSD 12 — libXinerama — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXinerama — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg — protocol handling issues in X Window System client libraries Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: freedesktop.org reports: Ilja van Sprundel, […]

Read more
FreeBSD 12 — vnc — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — vnc — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vnc — authentication bypass vulnerability Upstream summary: RealVNC is susceptible to an authentication-bypass vulnerability. A malicious VNC client can cause a VNC server to allow it to connect without any […]

Read more
FreeBSD 12 — php55-phar — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php55-phar — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2013-7456 CVE-2015-5589 CVE-2015-5590 CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 CVE-2015-7803 CVE-2015-7804  +12 more Upstream summary: The PHP Group reports: Core: Fixed bug #72114 (Integer underflow / arbitrary […]

Read more
FreeBSD 12 — icoutils — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — icoutils — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: icoutils — check_offset overflow on 64-bit systems Related CVEs: CVE-2017-5208 CVE-2017-5331 CVE-2017-5332 CVE-2017-5333 Upstream summary: Choongwoo Han reports: An exploitable crash exists in the wrestool utility on 64-bit systems where […]

Read more
FreeBSD 12 — php55-soap — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php55-soap — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 CVE-2015-6834 CVE-2015-6835 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Upstream summary: PHP reports: Core: Fixed bug #70172 (Use After Free Vulnerability in unserialize()). Fixed bug […]

Read more
FreeBSD 12 — php55-fileinfo — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php55-fileinfo — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Upstream summary: The PHP Group reports: Fileinfo: Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic file). mbstring: Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in […]

Read more
FreeBSD 12 — py26-graphite-web — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py26-graphite-web — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-graphite-web — Multiple vulnerabilities Related CVEs: CVE-2013-5093 Upstream summary: Graphite developers report: This release contains several security fixes for cross-site scripting (XSS) as well as a fix for a remote-execution […]

Read more
FreeBSD 12 — isolate — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — isolate — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isolate — local root exploit Upstream summary: Isolate currently suffers from some bad security bugs! These are local root privilege escalation bugs. Thanks to the helpful person who reported them […]

Read more
CHAT