FreeBSD

FreeBSD 14 — zebra — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — zebra — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zebra/quagga denial of service vulnerability Related CVEs: CVE-2003-0858 Upstream summary: A remote attacker could cause zebra/quagga to crash by sending a malformed telnet command to their management port. Table of […]

Read more
FreeBSD 14 — gstreamer1-plugins-jpeg — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gstreamer1-plugins-jpeg — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gstreamer1-plugins-jpeg — NULL-pointer dereferences in JPEG decoder Related CVEs: CVE-2024-47599 Upstream summary: The GStreamer Security Center reports: Insufficient error handling in the JPEG decoder that can lead to NULL-pointer dereferences, […]

Read more
FreeBSD 14 — anydesk — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — anydesk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Anydesk — Multiple Vulnerabilities Related CVEs: CVE-2020-13160 Upstream summary: Anydesk reports: AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code […]

Read more
FreeBSD 14 — flphoto — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — flphoto — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]

Read more
FreeBSD 14 — gitlab-ce — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gitlab-ce — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Gitlab — vulnerabilities Related CVEs: CVE-2018-14364 CVE-2018-14601 CVE-2018-14602 CVE-2018-14603 CVE-2018-14604 CVE-2018-14605 CVE-2018-14606 CVE-2018-15472  +12 more Upstream summary: Gitlab reports: Cross-site Scripting issue in Analytics dashboard chart rendering impacts GitLab EE […]

Read more
FreeBSD 14 — asterisk-bristuff — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — asterisk-bristuff — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: asterisk — remote heap overwrite vulnerability Upstream summary: Adam Boileau of Security-Assessment.com reports: The Asterisk Skinny channel driver for Cisco SCCP phones (chan_skinny.so) incorrectly validates a length value in the […]

Read more
FreeBSD 14 — tidy-html — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — tidy-html — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tidy — heap-buffer-overflow Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Geoff McLane reports: tidy is affected by a write out of bounds when processing malformed html files. This issue could be […]

Read more
FreeBSD 14 — ru-wordpress-ru_RU — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ru-wordpress-ru_RU — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — XSS Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block type Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 14 — redis — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — redis — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: redis — Bug in XACKDEL may lead to stack overflow and potential RCE Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2013-7458 CVE-2015-4335 CVE-2021-21309 CVE-2021-29477  +12 more Upstream summary: Google Big Sleep […]

Read more
CHAT