FreeBSD

FreeBSD 12 — libgd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libgd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libgd — Denial of servica via double free Related CVEs: CVE-2017-6362 CVE-2017-7890 Upstream summary: libgd developers report: Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote […]

Read more
FreeBSD 12 — proftpd-devel — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — proftpd-devel — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: proftpd — arbitrary code execution vulnerability with chroot Related CVEs: CVE-2008-4242 CVE-2008-4247 CVE-2009-0542 CVE-2009-0543 Upstream summary: The FreeBSD security advisory FreeBSD-SA-11:07.chroot reports: If ftpd is configured to place a user […]

Read more
FreeBSD 12 — gtk-vnc — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gtk-vnc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gtk-vnc — bounds checking vulnerabilities Related CVEs: CVE-2017-5884 CVE-2017-5885 Upstream summary: Daniel P. Berrange reports: CVE-2017-5884 – fix bounds checking for RRE, hextile and copyrect encodings CVE-2017-5885 – fix color […]

Read more
FreeBSD 12 — freexl — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — freexl — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Multiple exploitable heap-based buffer overflow vulnerabilities exists in FreeXL 1.0.3 Related CVEs: CVE-2015-2776 CVE-2017-2923 CVE-2017-2924 Upstream summary: Cisco TALOS reports: An exploitable heap based buffer overflow vulnerability exists in the […]

Read more
FreeBSD 12 — linux-blackdown-jdk — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-blackdown-jdk — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jdk/jre — Applet Caching May Allow Network Access Restrictions to be Circumvented Related CVEs: CVE-2004-1029 CVE-2005-1080 CVE-2007-5232 Upstream summary: SUN reports: A vulnerability in the Java Runtime Environment (JRE) with […]

Read more
FreeBSD 12 — php56-xsl — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php56-xsl — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-6834 CVE-2015-6835 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Upstream summary: PHP reports: Core: Fixed bug #70172 (Use After Free Vulnerability in unserialize()). Fixed bug #70219 (Use after […]

Read more
FreeBSD 12 — gitlab — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gitlab — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Gitlab — Remote Code Execution Vulnerability in GitLab Projects Import Related CVEs: CVE-2016-4340 CVE-2016-4738 CVE-2016-9086 CVE-2017-0882 CVE-2017-0915 CVE-2017-11438 CVE-2017-12426 CVE-2017-5029  +8 more Upstream summary: Gitlab reports: Remote Code Execution Vulnerability […]

Read more
FreeBSD 12 — isc-dhcp3-devel — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — isc-dhcp3-devel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary […]

Read more
FreeBSD 12 — uk-gd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — uk-gd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gd — integer overflow Related CVEs: CVE-2004-0990 Upstream summary: infamous41md reports about the GD Graphics Library: There is an integer overflow when allocating memory in the routine that handles loading […]

Read more
FreeBSD 12 — py27-imaging — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py27-imaging — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-imaging, py-pillow — Buffer overflow in PCD decoder Related CVEs: CVE-2016-0775 Upstream summary: The Pillow maintainers report: In all versions of Pillow, dating back at least to the last PIL […]

Read more
CHAT