🟠 High ⏱ 30–90 min Last verified: 15 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2005-3749, IBM Support Bulletin CVE: CVE-2005-3749 NVD summary: Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors. References: secunia.com/advisories/17474 […]
🟡 Medium ⏱ 15–45 min Last verified: 14 January 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-20562, IBM Support Bulletin CVE: CVE-2021-20562 NVD summary: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 14 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-0827 Related CVEs: CVE-2022-24512 CVE-2020-8927 CVE-2022-24464 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟡 Medium ⏱ 10–30 min Last verified: 14 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: trac — potential DOS vulnerability Related CVEs: CVE-2005-3980 CVE-2005-4065 CVE-2005-4305 Upstream summary: Trac development team reports: 0.11.2 is a new stable maintenance release. It contains several security fixes and everyone […]
Introduction Setting up configure apache with mod_pagespeed on centos stream 9 on a CentOS Stream 9 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Configure Apache with mod_pagespeed on CentOS Stream 9, with all the commands you need, the SELinux and firewalld considerations to […]
🟡 Medium ⏱ 10–30 min Last verified: 14 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: socat — diffie hellman parameter was not prime Related CVEs: CVE-2012-0219 CVE-2013-3571 CVE-2014-0019 Upstream summary: socat reports: In the OpenSSL address implementation the hard coded 1024 bit DH p parameter […]
🟠 High ⏱ 5–30 min Last verified: 14 January 2022 Affected versions: 14.04 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs […]
🟢 Low ⏱ 5–15 min Last verified: 14 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: brotli — buffer overflow Related CVEs: CVE-2016-1624 CVE-2016-1968 Upstream summary: Google Chrome Releases reports: [583607] High CVE-2016-1624: Buffer overflow in Brotli. Credit to lukezli. Mozilla Foundation reports: Security researcher Luke […]
🟠 High ⏱ 5–30 min Last verified: 14 January 2022 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟢 Low ⏱ 5–15 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4012 Upstream summary: Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to […]
