FreeBSD

FreeBSD 14 — ja-gd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ja-gd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gd — integer overflow Related CVEs: CVE-2004-0990 Upstream summary: infamous41md reports about the GD Graphics Library: There is an integer overflow when allocating memory in the routine that handles loading […]

Read more
FreeBSD 14 — py37-spotipy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py37-spotipy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Spotipy — Path traversal vulnerability Related CVEs: CVE-2023-23608 Upstream summary: Stéphane Bruckert If a malicious URI is passed to the library, the library can be tricked into performing an operation […]

Read more
FreeBSD 14 — isc-dhcp31-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — isc-dhcp31-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcp-client — dhclient does not strip or escape shell meta-characters Related CVEs: CVE-2009-0692 CVE-2011-0997 Upstream summary: ISC reports: ISC dhclient did not strip or escape certain shell meta-characters in responses […]

Read more
FreeBSD 13 — ghostscript7-commfont — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ghostscript7-commfont — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2023-28879 Upstream summary: [email protected] reports: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential […]

Read more
FreeBSD 14 — libcue — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libcue — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libcue — out-of-bounds array access Related CVEs: CVE-2023-43641 Upstream summary: The libcue team reports: There is a vulnerability to out-of-bounds array access. Table of contents Symptom & Impact Environment & […]

Read more
FreeBSD 14 — readstat — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — readstat — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: readstat — Heap buffer overflow in readstat_convert Upstream summary: Google reports: A heap buffer overflow exists in readstat_convert. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
FreeBSD 14 — mumble — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mumble — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mumble — multiple vulnerabilities Related CVEs: CVE-2014-0044 CVE-2014-0045 Upstream summary: Mumble reports: SVG images with local file references could trigger client DoS The Mumble client did not properly HTML-escape some […]

Read more
FreeBSD 14 — cmake-core — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — cmake-core — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: curl — SOCKS5 heap buffer overflow Related CVEs: CVE-2023-38545 Upstream summary: The curl team reports: This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When […]

Read more
FreeBSD 14 — de-bugzilla — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — de-bugzilla — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bugzilla — multiple vulnerabilities Related CVEs: CVE-2013-0785 CVE-2013-0786 Upstream summary: A Bugzilla Security Advisory reports: Cross-Site Scripting When viewing a single bug report, which is the default, the bug ID […]

Read more
FreeBSD 14 — owncloudclient — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — owncloudclient — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: owncloudclient — Improper validation of certificates when using self-signed certificates Related CVEs: CVE-2015-7298 Upstream summary: owncloud.org reports: The ownCloud Desktop Client was vulnerable against MITM attacks until version 2.0.0 in […]

Read more
CHAT