🟡 Medium ⏱ 10–30 min Last verified: 23 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1476 CVE-2007-6613 CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 Upstream summary: Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute […]
🟠 High ⏱ 15–60 min Last verified: 23 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-5775 Related CVEs: CVE-2022-1705 CVE-2022-32148 CVE-2022-30631 CVE-2022-30635 CVE-2022-30630 CVE-2022-30632 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 23 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gallery — multiple vulnerabilities Related CVEs: CVE-2004-0522 CVE-2004-1106 CVE-2004-2124 CVE-2005-0219 CVE-2005-0220 CVE-2005-0221 CVE-2005-0222 CVE-2005-3251 +9 more Upstream summary: Red Hat Security Response Team reports: Gallery upstream has released 3.0.9 version, […]
🟢 Low ⏱ 5–15 min Last verified: 23 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: newspost — server response buffer overflow vulnerability Related CVEs: CVE-2005-0101 Upstream summary: The newspost program uses a function named socket_getline to read server responses from the network socket. Unfortunately this […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to tune network parameters with no on IBM AIX 7.3 […]
🟢 Low ⏱ 5–15 min Last verified: 23 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kstars — exploitable set-user-ID application fliccd Related CVEs: CVE-2005-0011 Upstream summary: A KDE Security Advisory explains: Overview KStars includes support for the Instrument Neutral Distributed Interface (INDI). The build system […]
🟠 High ⏱ 15–60 min Last verified: 23 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0906 CVE-2002-1165 CVE-2002-1337 CVE-2002-1827 CVE-2002-2261 CVE-2003-0161 CVE-2003-0308 CVE-2003-0681 +11 more Upstream summary: Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query […]
🟢 Low ⏱ 5–15 min Last verified: 23 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0846 Upstream summary: django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 23 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15108 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 Upstream summary: spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access […]
🟡 Medium ⏱ 10–30 min Last verified: 23 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6117-1 Related CVEs: CVE-2019-17566 CVE-2020-11987 CVE-2022-38398 CVE-2022-38648 CVE-2022-40146 CVE-2022-41704 CVE-2022-42890 Upstream summary: It was discovered that Apache Batik incorrectly handled certain inputs. An attacker could possibly use this to perform […]
