🟠 High ⏱ 15–60 min Last verified: 23 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11554 CVE-2017-11555 CVE-2017-11556 CVE-2017-11608 CVE-2018-11499 CVE-2018-11693 CVE-2018-11694 CVE-2018-11695 +12 more Upstream summary: There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7203-1 Related CVEs: CVE-2018-1046 CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 CVE-2020-17482 CVE-2022-27227 Upstream summary: Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled memory when accessing certain files. An attacker could possibly use […]
🟠 High ⏱ 15–60 min Last verified: 23 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5485-1 Related CVEs: CVE-2022-21123 CVE-2022-21125 CVE-2022-21166 CVE-2022-1158 CVE-2022-1966 CVE-2022-1972 CVE-2022-21499 CVE-2022-24958 +12 more Upstream summary: It was discovered that some Intel processors did not completely perform cleanup actions on multi-core […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-1991 Related CVEs: CVE-2021-38185 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 23 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
How to Configure Windows Server 2016 VPN with SSTP Secure Socket Tunneling Protocol (SSTP) is a VPN tunneling protocol that uses HTTPS over TCP port 443, making it ideal for environments where firewalls block other VPN protocols. Because SSTP traffic is indistinguishable from regular HTTPS traffic, it passes through nearly all firewalls and proxy servers […]
🟠 High ⏱ 5–30 min Last verified: 22 May 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: Oracle Bug 25597898 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rust — Race condition enabling symlink following Related CVEs: CVE-2019-12083 CVE-2022-21658 Upstream summary: The Rust Security Response WG was notified that the std::fs::remove_dir_all standard library function is vulnerable to a […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]
🟠 High ⏱ 5–30 min Last verified: 22 May 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
