🟡 Medium ⏱ 10–30 min Last verified: 3 November 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6117-1 Related CVEs: CVE-2019-17566 CVE-2020-11987 CVE-2022-38398 CVE-2022-38648 CVE-2022-40146 CVE-2022-41704 CVE-2022-42890 Upstream summary: It was discovered that Apache Batik incorrectly handled certain inputs. An attacker could possibly use this to perform […]
🟡 Medium ⏱ 5–30 min Last verified: 3 November 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟢 Low ⏱ 5–15 min Last verified: 3 November 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6106-1 Related CVEs: https://launchpad.net/bugs/2016436 Upstream summary: It was discovered that calamares-settings-ubuntu allowed creating the first user with a blank password, contrary to expectations. Table of contents Symptom & Impact Environment […]
Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure dynamic lpar (dlpar) on ibm aix 7.2 on […]
🟢 Low ⏱ 5–15 min Last verified: 3 November 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5833-1 Related CVEs: CVE-2022-40899 Upstream summary: Sebastian Chnelik discovered that python-future incorrectly handled certain HTTP header field. An attacker could possibly use this issue to cause a denial of service. […]
🟠 High ⏱ 15–60 min Last verified: 3 November 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-5468 Related CVEs: CVE-2022-31626 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
Introduction to Exploit Protection Exploit Protection is a Windows Defender feature in Windows Server 2019 that applies exploit mitigation techniques to operating system processes and individual applications. It is the successor to Enhanced Mitigation Experience Toolkit (EMET) and provides a comprehensive set of memory protection, code execution prevention, and anti-exploit technologies. Exploit Protection mitigations make […]
🟡 Medium ⏱ 10–30 min Last verified: 3 November 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-0089 Related CVEs: CVE-2022-26305 CVE-2022-26306 CVE-2022-26307 CVE-2022-3140 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟠 High ⏱ 30–90 min Last verified: 3 November 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2006-4254, IBM Support Bulletin CVE: CVE-2006-4254 NVD summary: Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors. References: ftp://aix.software.ibm.com/aix/efixes/security/R secunia.com/advisories/21541 […]
What Is Remote Desktop Gateway Remote Desktop Gateway (RD Gateway) is a Windows Server role service that enables authorized remote users to connect to internal network resources — including Remote Desktop hosts, virtual desktops, and RemoteApp programs — over an HTTPS-encrypted tunnel on port 443. Without RD Gateway, RDP traffic uses port 3389 directly, which […]
