🟡 Medium ⏱ 10–30 min Last verified: 18 October 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-9561 Related CVEs: CVE-2021-23841 CVE-2021-23840 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟠 High ⏱ 15–60 min Last verified: 18 October 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4130 Related CVEs: CVE-2021-38506 CVE-2021-38504 CVE-2021-38503 CVE-2021-38507 CVE-2021-38509 CVE-2021-38508 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 17 October 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4056 Related CVEs: CVE-2020-36385 CVE-2021-3656 CVE-2021-0512 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟡 Medium ⏱ 15–45 min Last verified: 17 October 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-39048, IBM Support Bulletin CVE: CVE-2021-39048 NVD summary: IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could […]
🟢 Low ⏱ 5–15 min Last verified: 17 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: slim — insecure PATH assignment Related CVEs: CVE-2009-1756 CVE-2010-2945 Upstream summary: SLiM assigns logged on users a PATH in which the current working directory ("./") is included. This PATH can […]
Introduction How to Configure MAC Policies on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet filtering, […]
🟢 Low ⏱ 5–15 min Last verified: 17 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3369 Upstream summary: The add_conversation function in conversations.c in EtherApe before 0.9.12 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via […]
🟡 Medium ⏱ 5–30 min Last verified: 17 October 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 10–30 min Last verified: 17 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0871 CVE-2003-0211 CVE-2012-0862 CVE-2013-4342 Upstream summary: xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to […]
🟠 High ⏱ 15–60 min Last verified: 17 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3151 CVE-2005-3302 CVE-2005-4470 CVE-2007-1253 CVE-2008-1102 CVE-2008-1103 CVE-2008-4863 CVE-2009-3850 +12 more Upstream summary: Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a […]
