🟢 Low ⏱ 5–15 min Last verified: 26 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1800 Upstream summary: The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks […]
🟡 Medium ⏱ 10–30 min Last verified: 26 September 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7569-1 Related CVEs: CVE-2021-23450 CVE-2020-4051 CVE-2019-10785 CVE-2018-15494 Upstream summary: It was discovered that Dojo did not correctly handle DataGrids. An attacker could possibly use this issue to execute arbitrary code. […]
🟠 High ⏱ 15–60 min Last verified: 26 September 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5698-2 Related CVEs: CVE-2022-32166 CVE-2020-35498 CVE-2015-8011 CVE-2020-27827 CVE-2018-17204 CVE-2018-17205 CVE-2018-17206 CVE-2017-9214 +3 more Upstream summary: USN-5698-1 fixed a vulnerability in Open. This update provides the corresponding update for Ubuntu 16.04 […]
🟠 High ⏱ 15–60 min Last verified: 26 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libgd — integer overflow which could lead to heap buffer overflow Related CVEs: CVE-2013-7456 CVE-2015-4643 CVE-2015-4644 CVE-2015-8874 CVE-2015-8879 CVE-2016-3074 CVE-2016-4343 CVE-2016-5093 +12 more Upstream summary: LibGD reports: An integer overflow […]
🟡 Medium ⏱ 10–30 min Last verified: 26 September 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-1566 Related CVEs: CVE-2022-27649 CVE-2022-27651 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟠 High ⏱ 15–60 min Last verified: 26 September 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12206 Related CVEs: CVE-2022-2873 CVE-2022-41218 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 5–30 min Last verified: 25 September 2022 Affected versions: 14.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 25 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fail2ban — possible RCE vulnerability in mailing action using mailutils Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek reports: Command mail from mailutils package used in mail actions like mail-whois can […]
🟢 Low ⏱ 5–15 min Last verified: 25 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pygments — shell injection vulnerability Related CVEs: CVE-2015-8557 Upstream summary: NVD reports: The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via […]
🟡 Medium ⏱ 5–30 min Last verified: 25 September 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
