🟢 Low ⏱ 5–15 min Last verified: 15 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — ini database truncation inside dba_replace() function Related CVEs: CVE-2008-7068 Upstream summary: securityfocus research reports: A bug that leads to the emptying of the INI file contents if the […]
🟢 Low ⏱ 5–15 min Last verified: 15 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6720 Upstream summary: libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than […]
🟢 Low ⏱ 5–15 min Last verified: 15 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4462 Upstream summary: lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 15 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-25021 CVE-2018-25022 CVE-2021-44847 Upstream summary: The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to […]
Introduction Deploying automate debian 11 server provisioning with ansible on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will […]
🟠 High ⏱ 15–60 min Last verified: 15 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0116 CVE-2005-0362 CVE-2005-0363 CVE-2005-0435 CVE-2005-0436 CVE-2005-0437 CVE-2005-0438 CVE-2005-1527 +12 more Upstream summary: AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell […]
🟢 Low ⏱ 5–15 min Last verified: 15 October 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5378-4 Related CVEs: CVE-2022-1271 Upstream summary: USN-5378-1 fixed a vulnerability in Gzip. This update provides the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM. Original advisory details: Cleemy Desu […]
🟠 High ⏱ 30–90 min Last verified: 15 October 2022 Affected versions: IBM AIX 7.3 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2017-1093, IBM Support Bulletin CVE: CVE-2017-1093 NVD summary: IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain […]
🟠 High ⏱ 30–90 min Last verified: 15 October 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2003-0681, IBM PSIRT advisory page CVE: CVE-2003-0681 NVD summary: A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope […]
🟡 Medium ⏱ 15–45 min Last verified: 14 October 2022 Affected versions: IBM AIX 7.3 Affected: 7.1, 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2022-43381, IBM Support Bulletin CVE: CVE-2022-43381 NVD summary: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX […]
