🟢 Low ⏱ 5–15 min Last verified: 20 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Buffer overflows and format string bugs in Emil Related CVEs: CVE-2004-0152 CVE-2004-0153 Upstream summary: Ulf Härnhammar reports multiple buffer overflows in Emil, some of which are triggered during the parsing […]
🟠 High ⏱ 15–60 min Last verified: 20 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2006-6077 CVE-2007-0008 CVE-2007-0009 CVE-2007-0775 CVE-2007-0776 CVE-2007-0777 CVE-2007-0778 CVE-2007-0779 +5 more Upstream summary: The Mozilla Foundation reports of multiple security issues in Firefox, Seamonkey, and […]
Introduction This guide explains how to Automate Backups with rsync on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained […]
🟡 Medium ⏱ 10–30 min Last verified: 20 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟢 Low ⏱ 5–15 min Last verified: 20 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1914 CVE-2005-2096 Upstream summary: dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file. […]
🟡 Medium ⏱ 10–30 min Last verified: 20 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: awstats — arbitrary commands execution vulnerability Related CVEs: CVE-2008-3714 CVE-2008-5080 CVE-2010-4367 Upstream summary: Awstats change log reports: Security fix (Traverse directory of LoadPlugin) Security fix (Limit config to defined directory […]
How to Configure Nginx WebSocket Proxying on RHEL 7 WebSockets provide a full-duplex communication channel over a single TCP connection, enabling real-time features such as live chat, push notifications, collaborative editing, and live dashboards. Unlike traditional HTTP requests, a WebSocket connection is established through an HTTP upgrade handshake and then kept open indefinitely. Nginx can […]
🟠 High ⏱ 15–60 min Last verified: 20 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4201 CVE-2008-5244 CVE-2017-9218 CVE-2017-9219 CVE-2017-9220 CVE-2017-9221 CVE-2017-9222 CVE-2017-9223 +12 more Upstream summary: Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 20 December 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5036-1 Related CVEs: CVE-2019-8955 CVE-2021-28089 CVE-2021-28090 CVE-2021-34548 CVE-2021-34549 CVE-2021-34550 CVE-2021-38385 Upstream summary: It was discovered that Tor incorrectly handled certain memory operations. A remote attacker could use this issue to […]
🟠 High ⏱ 30–90 min Last verified: 19 December 2021 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0130, IBM PSIRT advisory page CVE: CVE-1999-0130 NVD summary: Local users can start Sendmail in daemon mode and gain root privileges. References: www.securityfocus.com/bid/716 www.securityfocus.com/bid/716 Table of contents Symptom & Impact Environment […]
