FreeBSD

FreeBSD 12 — libXxf86dga — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXxf86dga — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg — protocol handling issues in X Window System client libraries Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: freedesktop.org reports: Ilja van Sprundel, […]

Read more
FreeBSD 12 — iourbanterror — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — iourbanterror — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: id Tech 3 — remote code execution vulnerability Related CVEs: CVE-2017-6903 Upstream summary: The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers […]

Read more
FreeBSD 12 — php-suhosin — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php-suhosin — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — open_basedir Race Condition Vulnerability Related CVEs: CVE-2006-5178 Upstream summary: Stefan Esser reports: PHP's open_basedir feature is meant to disallow scripts to access files outside a set of configured […]

Read more
FreeBSD 12 — pcsc-lite — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pcsc-lite — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Use-After-Free Vulnerability in pcsc-lite Related CVEs: CVE-2016-10109 Upstream summary: Peter Wu on Openwall mailing-list reports: The issue allows a local attacker to cause a Denial of Service, but can potentially […]

Read more
FreeBSD 12 — p5-Net-DNS — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p5-Net-DNS — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-Net-DNS — multiple Vulnerabilities Related CVEs: CVE-2007-3377 CVE-2007-3409 Upstream summary: A Secunia Advisory reports: An error exists in the handling of DNS queries where IDs are incremented with a fixed […]

Read more
FreeBSD 12 — osc — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — osc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: osc — shell command injection via crafted _service files Related CVEs: CVE-2015-0778 Upstream summary: SUSE Security Update reports: osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell […]

Read more
FreeBSD 12 — ja-wordpress-ja — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-wordpress-ja — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — XSS Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block type Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 12 — libmspack — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libmspack — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libmspack — frame_end overflow which could cause infinite loop Related CVEs: CVE-2014-9556 Upstream summary: There is a denial of service vulnerability in libmspack. The libmspack code is built into cabextract, […]

Read more
FreeBSD 12 — tomcat — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tomcat — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache Tomcat — Multiple Vulnerabilities Related CVEs: CVE-2005-2090 CVE-2007-0450 CVE-2007-1355 CVE-2007-1358 CVE-2010-1157 CVE-2011-0013 CVE-2012-0022 CVE-2012-2733  +12 more Upstream summary: [email protected] reports: A race condition on connection close could trigger a […]

Read more
FreeBSD 12 — wgetpro — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wgetpro — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wget — multiple vulnerabilities Related CVEs: CVE-2004-1487 CVE-2004-1488 Upstream summary: Jan Minar reports that there exists multiple vulnerabilities in wget: Wget erroneously thinks that the current directory is a fair […]

Read more
CHAT