🟢 Low ⏱ 5–15 min Last verified: 4 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: x11/cde — Local privilege escalation via CDE dtsession Related CVEs: CVE-2020-2696 Upstream summary: Marco Ivaldi (marco.ivaldi () mediaservice net) reports: A buffer overflow in the CheckMonitor() function in the Common […]
🟡 Medium ⏱ 10–30 min Last verified: 4 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-1810 Related CVEs: CVE-2019-19924 CVE-2019-19925 CVE-2019-8457 CVE-2019-13753 CVE-2019-13752 CVE-2019-19959 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 4 December 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libcaca — Multiple vulnerabilities Related CVEs: CVE-2018-20545 CVE-2018-20546 CVE-2018-20547 CVE-2018-20548 CVE-2018-20549 CVE-2021-30498 CVE-2021-30499 CVE-2021-3410 Upstream summary: Sam Hocevar reports: Multiple memory leaks and invalid memory accesses: CVE-2018-20545: Illegal WRITE memory […]
🟡 Medium ⏱ 5–30 min Last verified: 4 December 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
Introduction This tutorial covers How to Set Up a LEMP Stack on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: […]
🟢 Low ⏱ 5–15 min Last verified: 4 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pcal — buffer overflow vulnerabilities Related CVEs: CVE-2004-1289 Upstream summary: Danny Lungstrom has found two buffer overflow vulnerabilities in pcal which can lead to execution of arbitrary code by making […]
Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to tune asynchronous i/o on ibm aix 7.2 on IBM […]
🟢 Low ⏱ 5–15 min Last verified: 4 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zeek — potential DoS vulnerability Upstream summary: Wojtulewicz of Corelight reports: A specially-crafted series of MIME headers sent via SMTP or HTTP could cause Zeek to use large amounts of […]
🟢 Low ⏱ 5–15 min Last verified: 4 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-44512 CVE-2021-44513 Upstream summary: World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to compromise the integrity of session handling, or obtain the read-write […]
🟠 High ⏱ 15–60 min Last verified: 4 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0802 CVE-2004-1026 CVE-2006-4806 CVE-2006-4807 CVE-2006-4808 CVE-2006-4809 CVE-2008-2426 CVE-2008-5187 +12 more Upstream summary: Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary […]
