🟠 High ⏱ 15–60 min Last verified: 23 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1782 CVE-2016-0787 CVE-2019-13115 CVE-2019-17498 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 +7 more Upstream summary: The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service […]
🟡 Medium ⏱ 5–30 min Last verified: 23 November 2022 Affected versions: Windows Server 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟢 Low ⏱ 5–15 min Last verified: 23 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6271 Upstream summary: The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by leveraging a missing HVI check on DHPart2 packet reception. […]
🟢 Low ⏱ 5–15 min Last verified: 23 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1064 Upstream summary: apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access […]
Introduction to Network Access Control on Windows Server 2022 Network Access Control (NAC) is a set of policies and technologies that restricts network access based on the identity and health state of the connecting device. On Windows Server 2022, the primary NAC infrastructure component is the Network Policy Server (NPS), which acts as a RADIUS […]
🟠 High ⏱ 15–60 min Last verified: 23 November 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5555-1 Related CVEs: CVE-2022-1920 CVE-2022-1921 CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925 CVE-2022-2122 CVE-2021-3497 +7 more Upstream summary: It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly […]
🟠 High ⏱ 15–60 min Last verified: 23 November 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9029 Related CVEs: CVE-2022-0185 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 23 November 2022 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-1067 Related CVEs: CVE-2022-3560 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 23 November 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9365 Related CVEs: CVE-2022-27666 CVE-2020-24504 CVE-2021-45095 CVE-2022-1158 CVE-2020-24502 CVE-2020-24503 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 23 November 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:2161-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31625 CVE-2022-31626 CVE-2020-36193 CVE-2020-7069 CVE-2021-21702 CVE-2021-21704 CVE-2022-31628 CVE-2022-31629 +7 more Upstream summary: In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, […]
