🟡 Medium ⏱ 10–30 min Last verified: 16 February 2021 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4875-1 Related CVEs: CVE-2020-7247 CVE-2020-8793 CVE-2020-8794 Upstream summary: It was discovered that OpenSMTPD incorrectly verified the sender's or receiver's e-mail addresses under certain conditions. An attacker could possibly use this […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7211-1 Related CVEs: CVE-2020-11867 Upstream summary: Mike Salvatore discovered that Audacity incorrectly handled default permissions of temporary files created by the application. An attacker could possibly use this issue to […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5027-1 Related CVEs: CVE-2021-32610 CVE-2020-36193 CVE-2020-28948 CVE-2020-28949 Upstream summary: It was discovered that PEAR incorrectly handled symbolic links in archives. A remote attacker could possibly use this issue to execute […]
Introduction to Device Guard Device Guard is a set of hardware and software security features in Windows Server 2019 that locks down a device to run only trusted applications and drivers. It consists of two main components: Virtualization-Based Code Integrity (HVCI, also called Memory Integrity), which uses Hyper-V to protect the kernel from unsigned or […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202210-07 Related CVEs: CVE-2021-3427 Upstream summary: Deluge does not sufficiently sanitize crafted torrent file data, leading to the application interpreting untrusted data as HTML. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5169-1 Related CVEs: CVE-2020-10737 Upstream summary: Matthias Gerstner discovered that there was a race condition in the mkhomedir tool shipped with the oddjob package. An authenticated attacker could use this […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-3582 Related CVEs: CVE-2021-22923 CVE-2021-22922 CVE-2021-22924 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-5683 Related CVEs: CVE-2022-21541 CVE-2022-21540 CVE-2022-34169 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🔴 Critical ⏱ 5–30 min Last verified: 15 February 2021 Affected versions: Ubuntu 14.04 LTS Ubuntu 14.04 Ubuntu 14.04.6 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]
🟡 Medium ⏱ 5–30 min Last verified: 15 February 2021 Affected versions: 16.04 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs […]
