🟢 Low ⏱ 5–15 min Last verified: 1 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: png — memory corruption/possible remote code execution Related CVEs: CVE-2011-3048 Upstream summary: The PNG project reports: libpng fails to correctly handle malloc() failures for text chunks (in png_set_text_2()), which can […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: krb5-appl — telnetd code execution vulnerability Related CVEs: CVE-2011-4862 Upstream summary: The MIT Kerberos Team reports: When an encryption key is supplied via the TELNET protocol, its length is not […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1569 CVE-2008-1570 Upstream summary: policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0036-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27927 CVE-2022-35230 CVE-2022-24349 CVE-2020-15803 CVE-2022-23134 Upstream summary: In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate […]
Introduction This guide explains how to Configure ifconfig Networking on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1390 CVE-2005-0391 Upstream summary: The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3471-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-39028 Upstream summary: telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or […]
🟡 Medium ⏱ 10–30 min Last verified: 1 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-3178 CVE-2016-3179 CVE-2019-12106 Upstream summary: The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory access and daemon crash) […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6730-1 Related CVEs: CVE-2022-29599 Upstream summary: It was discovered that Apache Maven Shared Utils did not handle double-quoted strings properly, allowing shell injection attacks. This could allow an attacker to […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6225-1 Related CVEs: CVE-2022-40188 Upstream summary: It was discovered that Knot Resolver did not correctly handle certain client options. A remote attacker could send requests to malicous domains and cause […]
