FreeBSD

FreeBSD 13 — php80-kanboard — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php80-kanboard — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 November 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Kanboard — Multiple vulnerabilities Related CVEs: CVE-2023-32685 CVE-2023-33956 CVE-2023-33968 CVE-2023-33969 CVE-2023-33970 Upstream summary: Kanboard is project management software that focuses on the Kanban methodology. The last update includes 4 vulnerabilities: […]

Read more
FreeBSD 14 — py39-pycares — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-pycares — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 November 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-pycares — domain hijacking vulnerability Related CVEs: CVE-2021-3672 Upstream summary: Philipp Jeitner and Haya Shulman report: A flaw was found in c-ares library, where a missing input validation check of […]

Read more
FreeBSD 14 — silc-irssi-client — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — silc-irssi-client — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 November 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: silc-client — Format string vulnerability Related CVEs: CVE-2009-3051 Upstream summary: SILC changelog reports: An unspecified format string vulnerability exists in silc-client. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 14 — hashcash — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — hashcash — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 November 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: hashcash — heap overflow vulnerability Related CVEs: CVE-2005-0687 Upstream summary: Andreas Seltenreich reports that hashcash is prone to a heap overflow vulnerability. This vulnerability is caused by improper checking of […]

Read more
FreeBSD 14 — pl-ekg — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pl-ekg — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 November 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libgadu — multiple vulnerabilities Related CVEs: CVE-2005-1850 CVE-2005-1851 CVE-2005-1852 CVE-2005-1916 CVE-2005-2369 CVE-2005-2370 CVE-2005-2448 Upstream summary: Wojtek Kaniewski reports: Multiple vulnerabilities have been found in libgadu, a library for handling Gadu-Gadu […]

Read more
FreeBSD 14 — transmission-cli — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — transmission-cli — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 November 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libutp — remote denial of service or arbitrary code execution Related CVEs: CVE-2012-6129 Upstream summary: NVD reports: Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 […]

Read more
FreeBSD 14 — ghostscript7-nox — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ghostscript7-nox — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 November 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

Read more
FreeBSD 14 — py33-pycrypto — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py33-pycrypto — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 November 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pycrypto — PRNG reseed race condition Related CVEs: CVE-2013-1445 Upstream summary: Dwayne Litzenberger reports: In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator (PRNG) exhibits a race condition that may […]

Read more
FreeBSD 14 — py27-django-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py27-django-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 November 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-1443 CVE-2013-4315 CVE-2014-0472 CVE-2014-0473 CVE-2014-0474  +12 more Upstream summary: Tim Graham reports: Malicious redirect and possible XSS attack via user-supplied redirect […]

Read more
FreeBSD 14 — golddig — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — golddig — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 November 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: golddig — local buffer overflow vulnerabilities Related CVEs: CVE-2005-0121 Upstream summary: Two buffer overflow vulnerabilities where detected. Both issues can be used by local users to gain group games privileges […]

Read more
CHAT