🟠 High ⏱ 15–60 min Last verified: 9 January 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9601 Related CVEs: CVE-2022-21505 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
Red Hat Enterprise Linux 9 (RHEL 9, codenamed “Plow”) is the most significant release of RHEL in years, built on Linux kernel 5.14, OpenSSL 3.0, and shipped with a hardened-by-default security posture including SELinux enforcing mode, nftables as the default firewall backend, and full support for the latest POWER, ARM, and x86_64 architectures. Whether you […]
🟡 Medium ⏱ 15–45 min Last verified: 8 January 2023 Affected versions: IBM AIX 7.2 Affected: 7.1, 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2022-47990, IBM Support Bulletin CVE: CVE-2022-47990 NVD summary: IBM AIX 7.1, 7.2, 7.3 and VIOS, 3.1 could allow a non-privileged local user to exploit a vulnerability in X11 […]
🟠 High ⏱ 5–30 min Last verified: 8 January 2023 Affected versions: Ubuntu 22.04 LTS Ubuntu 22.04 Ubuntu 22.04.4 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]
🟡 Medium ⏱ 15–45 min Last verified: 8 January 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2022-22487, IBM Support Bulletin CVE: CVE-2022-22487 NVD summary: An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to […]
🟡 Medium ⏱ 10–30 min Last verified: 8 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4136 CVE-2014-1831 CVE-2015-7519 CVE-2016-10345 CVE-2017-16355 CVE-2018-12029 Upstream summary: ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure console and terminal settings on IBM AIX 7.3 […]
🟡 Medium ⏱ 10–30 min Last verified: 8 January 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5704-1 Related CVEs: CVE-2022-42010 CVE-2022-42011 CVE-2022-42012 Upstream summary: It was discovered that DBus incorrectly handled messages with invalid type signatures. A local attacker could possibly use this issue to cause […]
🟢 Low ⏱ 5–15 min Last verified: 8 January 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5937-1 Related CVEs: CVE-2022-47021 Upstream summary: It was discovered that Opusfile was not properly validating pointer arguments in some of its functions, which could lead to a NULL pointer dereference. […]
🟠 High ⏱ 15–60 min Last verified: 8 January 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1510-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29527 Upstream summary: Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to […]
