🟡 Medium ⏱ 15–45 min Last verified: 29 January 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-20560, IBM Support Bulletin CVE: CVE-2021-20560 NVD summary: IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading […]
🟢 Low ⏱ 5–30 min Last verified: 29 January 2022 Affected versions: Oracle Linux 8 📖 ~3 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟡 Medium ⏱ 15–45 min Last verified: 29 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-38954, IBM Support Bulletin CVE: CVE-2021-38954 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: squashfs-tools — Integer overflow Related CVEs: CVE-2015-4645 Upstream summary: Phillip Lougher reports: Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a […]
Introduction CentOS Stream 9 ships with a stable, security-hardened base that makes deploying configure btrfs snapshots on centos stream 9 both straightforward and auditable. This tutorial covers the complete procedure for how to Configure Btrfs Snapshots on CentOS Stream 9, including dnf module streams where applicable, systemd unit management, and the firewalld rules required for […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mt-daapd — integer overflow Related CVEs: CVE-2007-5824 CVE-2008-1771 Upstream summary: FrSIRT reports: A vulnerability has been identified in mt-daapd which could be exploited by remote attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: unarj — long filename buffer overflow Related CVEs: CVE-2004-0947 CVE-2004-1027 Upstream summary: Ludwig Nussel has discovered a buffer overflow vulnerability in unarj's handling of long filenames which could potentially lead […]
🟠 High ⏱ 5–30 min Last verified: 29 January 2022 Affected versions: 8.6 8.7 8.8 8.9 8.10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-joblib — arbitrary code execution Related CVEs: CVE-2022-21797 Upstream summary: jimlinntu reports: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag […]
🟡 Medium ⏱ 10–30 min Last verified: 29 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5208 CVE-2017-5331 CVE-2017-5332 CVE-2017-5333 CVE-2017-6009 CVE-2017-6010 CVE-2017-6011 Upstream summary: Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service […]
