🟠 High ⏱ 15–60 min Last verified: 4 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpbb — NULL byte injection vulnerability Related CVEs: CVE-2005-3310 CVE-2005-3415 CVE-2005-3416 CVE-2005-3417 CVE-2005-3418 CVE-2005-3419 CVE-2005-3420 CVE-2005-3536 +2 more Upstream summary: Secunia reports: ShAnKaR has discovered a vulnerability in phpBB, which […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-amf — input sanitization errors Related CVEs: CVE-2015-8549 Upstream summary: oCERT reports: A specially crafted AMF payload, containing malicious references to XML external entities, can be used to trigger Denial […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xml-security-c — crashes on malformed KeyInfo content Related CVEs: CVE-2013-2156 CVE-2013-2210 Upstream summary: The shibboleth project reports: SAML messages, assertions, and metadata all commonly make use of the XML Signature […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2020:1766 Related CVEs: CVE-2018-20337 CVE-2019-12447 CVE-2019-12448 CVE-2019-12449 CVE-2019-3825 Upstream summary: GNOME is the default desktop environment of AlmaLinux. Security Fix(es): * LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337) […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0098 CVE-2003-0099 Upstream summary: Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3540 Upstream summary: Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2945 CVE-2005-2992 CVE-2015-9275 Upstream summary: arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) […]
🟠 High ⏱ 15–60 min Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0962 CVE-2004-0426 CVE-2004-0792 CVE-2004-2093 CVE-2006-2083 CVE-2007-4091 CVE-2007-6199 CVE-2007-6200 +12 more Upstream summary: Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to […]
Introduction This guide explains how to Set Up Riemann Event Stream Processor on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6097-1 Related CVEs: CVE-2021-3570 Upstream summary: It was discovered that Linux PTP did not properly perform a length check when forwarding a PTP message between ports. A remote attacker could […]
