🟠 High ⏱ 15–60 min Last verified: 13 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0577 CVE-2003-0865 CVE-2004-0805 CVE-2004-0982 CVE-2004-0991 CVE-2004-1284 CVE-2006-1655 CVE-2006-3355 +10 more Upstream summary: mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2217 Upstream summary: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a […]
Introduction This guide explains how to Configure Multipath I/O on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the standard […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1136 CVE-2021-36081 Upstream summary: In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's […]
🟡 Medium ⏱ 10–30 min Last verified: 13 September 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5847-1 Related CVEs: CVE-2020-7729 CVE-2022-0436 CVE-2022-1537 Upstream summary: It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to […]
🟡 Medium ⏱ 10–30 min Last verified: 13 September 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:3372-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2255 Upstream summary: A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 13 September 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-5809 Related CVEs: CVE-2022-1586 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 15–45 min Last verified: 12 September 2022 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2022-43381, IBM Support Bulletin CVE: CVE-2022-43381 NVD summary: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PG Partition Manager — arbitrary code execution Related CVEs: CVE-2021-33204 Upstream summary: PG Partition Manager reports: In the pg_partman (aka PG Partition Manager) extension before 4.5.1 for PostgreSQL, arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: KDE Frameworks — malicious .desktop files execute code Related CVEs: CVE-2019-14744 Upstream summary: The KDE Community has released a security announcement: The syntax Key[$e]=$(shell command) in *.desktop files.directory files, and […]
