FreeBSD

FreeBSD 12 — scponly — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — scponly — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: scponly — local privilege escalation exploits Upstream summary: Max Vozeler reports: If ALL the following conditions are true, administrators using scponly-4.1 or older may be at risk of a local […]

Read more
FreeBSD 12 — gd — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gd — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libgd — integer overflow which could lead to heap buffer overflow Related CVEs: CVE-2004-0990 CVE-2007-3472 CVE-2007-3473 CVE-2007-3474 CVE-2007-3475 CVE-2007-3476 CVE-2007-3477 CVE-2007-3478  +5 more Upstream summary: LibGD reports: An integer overflow […]

Read more
FreeBSD 12 — cyrus-imspd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — cyrus-imspd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Cyrus IMSPd multiple vulnerabilities Upstream summary: The Cyrus team reported multiple vulnerabilities in older versions of Cyrus IMSPd: These releases correct a recently discovered buffer overflow vulnerability, as well as […]

Read more
FreeBSD 12 — syslog-ng — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — syslog-ng — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: syslog-ng2 — startup directory leakage in the chroot environment Related CVEs: CVE-2008-5110 Upstream summary: Florian Grandel reports: I have not had the time to analyze all of syslog-ng code. But […]

Read more
FreeBSD 12 — nagios-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — nagios-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nagios — Command Injection Vulnerability Related CVEs: CVE-2007-5803 CVE-2009-2288 Upstream summary: Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise […]

Read more
FreeBSD 12 — tor — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tor — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/tor — SOCKS4(a) inversion bug Related CVEs: CVE-2005-2643 CVE-2006-0414 CVE-2009-0414 CVE-2009-0936 CVE-2009-0937 CVE-2009-0938 CVE-2010-1676 CVE-2011-0427  +3 more Upstream summary: The Tor Project reports: TROVE-2022-002: The SafeSocks option for SOCKS4(a) is […]

Read more
FreeBSD 12 — plans — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — plans — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: plans — multiple vulnerabilities Upstream summary: Secunia reports: A vulnerability has been reported in Plans, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to […]

Read more
FreeBSD 12 — handbrake — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — handbrake — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2015-3395 CVE-2015-3417 CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822  +12 more Upstream summary: NVD reports: An issue was discovered in the FFmpeg package, where vp3_decode_frame […]

Read more
FreeBSD 12 — tethereal — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tethereal — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — PCNFSD Dissector Denial of Service Vulnerability Related CVEs: CVE-2004-0176 CVE-2004-0365 CVE-2004-0367 CVE-2004-0504 CVE-2004-0505 CVE-2004-0506 CVE-2004-0507 CVE-2004-0633  +12 more Upstream summary: Secunia reports: A vulnerability has been reported in […]

Read more
CHAT