FreeBSD

FreeBSD 12 — ledger — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ledger — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ledger — multiple vulnerabilities Related CVEs: CVE-2017-2807 CVE-2017-2808 Upstream summary: Talos reports: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal […]

Read more
FreeBSD 12 — py36-slixmpp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py36-slixmpp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: slixmpp — improper access control Related CVEs: CVE-2019-1000021 Upstream summary: NVD reports: slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private […]

Read more
FreeBSD 12 — sitecopy — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sitecopy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: neon date parsing vulnerability Related CVEs: CVE-2004-0179 CVE-2004-0398 Upstream summary: Stefan Esser reports: A vulnerability within a libneon date parsing function could cause a heap overflow which could lead to […]

Read more
FreeBSD 12 — kaffeine — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kaffeine — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kaffeine — buffer overflow vulnerability Related CVEs: CVE-2006-0051 Upstream summary: The KDE team reports: Kaffeine can produce a buffer overflow in http_peek() while creating HTTP request headers for fetching remote […]

Read more
FreeBSD 12 — percona56-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — percona56-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]

Read more
FreeBSD 12 — openafs — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — openafs — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openafs — multiple vulnerabilities Related CVEs: CVE-2013-1794 CVE-2013-4134 CVE-2014-0159 CVE-2015-7762 CVE-2015-7763 CVE-2015-8312 CVE-2016-2860 CVE-2016-4536 Upstream summary: The OpenAFS development team reports: Foreign users can bypass access controls to create groups […]

Read more
FreeBSD 12 — libaudiofile — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libaudiofile — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libaudiofile — heap-based overflow in Microsoft ADPCM compression module Related CVEs: CVE-2014-0159 Upstream summary: Debian reports: Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to […]

Read more
FreeBSD 12 — cs-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — cs-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
FreeBSD 12 — swfdec — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — swfdec — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: swfdec — exposure of sensitive information Related CVEs: CVE-2008-1834 Upstream summary: Secunia reports: A vulnerability has been reported in swfdec, which can be exploited by malicious people to disclose sensitive […]

Read more
FreeBSD 12 — linux-c7-libsndfile — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-c7-libsndfile — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libsndfile — out-of-bounds reads Related CVEs: CVE-2017-12562 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634 CVE-2017-17456 CVE-2017-17457 CVE-2017-6892 CVE-2017-7585  +7 more Upstream summary: Xin-Jiang on Github reports: CVE-2017-14245 (Medium): An out of bounds read in […]

Read more
CHAT