🟢 Low ⏱ 5–15 min Last verified: 12 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2350 Upstream summary: pam_shield before 0.9.4: Default configuration does not perform protective action Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
Introduction Deploying install and configure squid proxy on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before […]
🟡 Medium ⏱ 10–30 min Last verified: 12 October 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7966-1 Related CVEs: CVE-2022-29189 CVE-2022-29222 CVE-2022-29190 Upstream summary: It was discovered that Pion DTLS, vendored in Snowflake, did not impose a limit on the amount of data that was buffered […]
🟠 High ⏱ 30–90 min Last verified: 12 October 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2007-4938, IBM PSIRT advisory page CVE: CVE-2007-4938 NVD summary: Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly […]
🟡 Medium ⏱ 15–45 min Last verified: 11 October 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2001-1554, IBM PSIRT advisory page CVE: CVE-2001-1554 NVD summary: IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit […]
🟡 Medium ⏱ 15–45 min Last verified: 11 October 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2022-22373, IBM Support Bulletin CVE: CVE-2022-22373 NVD summary: An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and […]
🟡 Medium ⏱ 15–45 min Last verified: 11 October 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2022-35721, IBM Support Bulletin CVE: CVE-2022-35721 NVD summary: IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web […]
🟡 Medium ⏱ 10–30 min Last verified: 11 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bash — remote code execution Related CVEs: CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 Upstream summary: Note that this is different than the public "Shellshock" issue. Specially crafted environment variables could […]
🟡 Medium ⏱ 10–30 min Last verified: 11 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tor — security regression Related CVEs: CVE-2009-0414 CVE-2009-0936 CVE-2009-0937 CVE-2009-0938 CVE-2010-1676 CVE-2011-0427 CVE-2014-5117 CVE-2017-0377 Upstream summary: The Tor Project reports: Tor 0.3.0.9 fixes a path selection bug that would allow […]
🟡 Medium ⏱ 10–30 min Last verified: 11 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — use-after-free vulnerability Related CVEs: CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988 CVE-2007-1001 +1 more Upstream summary: Symeon Paraschoudis reports: Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk() Table of contents Symptom & […]
