🟢 Low ⏱ 5–15 min Last verified: 22 August 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6692-1 Related CVEs: CVE-2022-25647 Upstream summary: It was discovered that Gson incorrectly handled deserialization of untrusted input data. If a user or an automated system were tricked into opening a […]
🟡 Medium ⏱ 10–30 min Last verified: 22 August 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5673-1 Related CVEs: CVE-2021-4217 CVE-2022-0529 CVE-2022-0530 https://launchpad.net/bugs/1957077 CVE-2014-9913 CVE-2016-9844 CVE-2018-1000035 CVE-2018-18384 +1 more Upstream summary: It was discovered that unzip did not properly handle unicode strings under certain circumstances. If […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:1999 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up configure snort network intrusion detection on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step carefully […]
🟡 Medium ⏱ 10–30 min Last verified: 22 August 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2022:1047-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29869 CVE-2022-27239 CVE-2020-14342 CVE-2021-20208 CVE-2012-1586 Upstream summary: cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) […]
🟠 High ⏱ 15–60 min Last verified: 22 August 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:0940-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7747 CVE-2018-17095 CVE-2019-13147 CVE-2022-24599 CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830 +10 more Upstream summary: Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File […]
🟡 Medium ⏱ 10–30 min Last verified: 22 August 2022 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-0304 Related CVEs: CVE-2022-3140 CVE-2022-26307 CVE-2022-26305 CVE-2022-26306 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟡 Medium ⏱ 15–45 min Last verified: 21 August 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2019-4377, IBM Support Bulletin CVE: CVE-2019-4377 NVD summary: IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks against the system. […]
🟠 High ⏱ 30–90 min Last verified: 21 August 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0041, IBM PSIRT advisory page CVE: CVE-1999-0041 NVD summary: Buffer overflow in NLS (Natural Language Service). References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 21 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using mod_proxy in […]
