FreeBSD

FreeBSD 13 — coturn — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — coturn — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: coturn — information leakage Related CVEs: CVE-2020-4067 Upstream summary: Felix Dörre reports: The issue is that STUN/TURN response buffer is not initialized properly. (CWE 665) This is a leak of […]

Read more
FreeBSD 13 — krfb — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — krfb — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: krfb — Multiple security issues in bundled libvncserver Related CVEs: CVE-2014-4607 CVE-2014-6055 Upstream summary: Martin Sandsmark reports: krfb 4.14 [and earlier] embeds libvncserver which has had several security issues. Several […]

Read more
FreeBSD 13 — surf — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — surf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: surf — private information disclosure Related CVEs: CVE-2012-0842 Upstream summary: surf does not protect its cookie jar against access read access from other local users Table of contents Symptom & […]

Read more
FreeBSD 13 — turba — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — turba — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: turba — Cross site scripting vulnerabilities in several of the address book name and contact data fields Upstream summary: Announce of Turba H3 (2.0.5) (final): This [2.0.5] is a security […]

Read more
FreeBSD 13 — timidity++-xskin — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — timidity++-xskin — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: TiMidity++ — Multiple vulnerabilities Related CVEs: CVE-2017-11546 CVE-2017-11547 CVE-2017-11549 Upstream summary: qflb.wu of DBAPPSecurity reports: Ihe insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 can cause a denial of service(divide-by-zero error […]

Read more
FreeBSD 13 — heartbeat — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — heartbeat — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: heartbeat — insecure temporary file creation vulnerability Related CVEs: CAN-2005-2231 Upstream summary: Eric Romang reports a temporary file creation vulnerability within heartbeat. The vulnerability is caused by hardcoded temporary file […]

Read more
FreeBSD 13 — getmail — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — getmail — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: getmail — symlink vulnerability during maildir delivery Related CVEs: CVE-2004-0881 Upstream summary: David Watson reports a symlink vulnerability in getmail. If run as root (not the recommended mode of operation), […]

Read more
FreeBSD 13 — php56-exif — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php56-exif — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-3074 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291  +5 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
CHAT